$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d04f8cd8-4f42-3cb1-946f-614ea2ac5655.roa File: d04f8cd8-4f42-3cb1-946f-614ea2ac5655.roa (raw, json) Hash identifier: UtVFRzTdiTtiicQ7sPZrUNYmSy3CXrhm6O0rPdOvX/0= Subject key identifier: 0A:FC:D8:9C:F8:B8:F2:60:60:68:E1:94:07:0B:C4:48:0E:28:8A:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F84B5BABA29BB8C1E5E480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d04f8cd8-4f42-3cb1-946f-614ea2ac5655.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 98.246.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:4b:5b:ab:a2:9b:b8:c1:e5:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=d07540d0-e30c-4a37-8a55-306f47cfaa33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d8:9f:64:4c:3e:ac:3b:c7:25:41:17:e3:d0: ea:06:7d:6d:c4:c1:56:02:3b:44:b1:c7:e7:32:1b: cb:6f:fa:1f:59:53:dd:58:77:f6:e3:a4:e0:ce:3f: 4e:0d:35:31:5c:de:d9:e9:21:33:28:e5:02:be:33: 16:b1:64:2c:78:6e:c1:d2:06:ce:31:46:91:e5:ae: 4f:52:2d:ce:e8:fe:1a:ec:95:86:07:ad:1f:98:be: 1e:6b:1a:93:10:49:9f:bb:7c:72:ca:db:e8:ef:72: 92:b7:ab:2d:be:06:b2:cd:aa:6a:8f:d1:ae:4e:50: 4f:d6:60:c7:60:f4:6b:f1:76:32:ab:ca:55:b9:b0: 3e:eb:a9:ea:ad:98:b1:51:dc:f9:71:b4:a5:c0:dc: e1:7e:68:e3:d2:bc:eb:45:60:4f:39:27:da:35:c3: dc:6e:7d:d1:94:81:be:72:92:a4:ff:4e:7b:d2:f0: 35:e3:cc:dc:f0:dd:c7:cb:5d:b7:c8:cd:99:da:e4: 4c:6a:26:5f:d5:0d:9a:d6:08:9e:8c:27:00:ee:fe: f7:c6:5f:71:11:5c:76:7d:97:c9:d8:ca:7f:ad:17: 10:72:e2:28:ad:2d:6f:4f:78:47:81:2a:c9:f8:2a: ca:02:50:ef:ff:f3:b5:c5:04:15:e1:90:53:50:86: d3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FC:D8:9C:F8:B8:F2:60:60:68:E1:94:07:0B:C4:48:0E:28:8A:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d04f8cd8-4f42-3cb1-946f-614ea2ac5655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5f:c3:4e:4c:ea:80:ae:49:0b:2c:8b:d2:4f:d9:fc:34:a8: 64:2c:24:d2:ee:0a:41:28:47:4c:49:8f:f8:d3:14:35:d7:75: 8c:c6:28:96:e4:a4:74:12:99:5d:12:81:4a:bc:4b:22:09:9e: 86:7b:85:aa:82:bc:77:8b:de:60:b7:cb:33:fe:50:aa:a6:de: 9c:e3:24:d9:d8:f3:e0:de:b4:fe:b3:2a:af:5d:4e:89:d1:13: 44:82:4a:33:90:92:09:38:a5:f1:a7:02:35:77:3b:1c:60:55: dd:ba:f7:68:07:ef:c1:4e:06:e4:26:52:e9:37:0c:94:e1:40: 64:70:bc:fd:c7:8d:5d:37:32:38:83:f2:ff:dc:9a:1a:73:17: e4:60:44:8a:c6:08:b1:1e:b1:82:1c:76:7f:ad:5a:8c:e5:db: 0c:0c:a2:77:bc:1c:f2:5c:d9:f9:0c:26:7e:e5:a3:7f:56:c0: 0f:2b:c4:30:ac:93:c5:01:c9:c8:82:da:c0:24:1d:4e:9a:5a: d2:e2:1f:06:d2:d1:32:96:56:92:bf:e0:62:ba:80:3b:7e:ce: b0:7e:82:ed:58:70:10:5a:0f:95:46:e6:02:99:55:8b:ff:5e: 10:54:7d:87:28:2f:f4:5d:18:f9:83:88:6f:e6:0f:2a:69:6f: b1:b0:17:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Etbq6KbuMHl5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZDA3NTQwZDAtZTMwYy00YTM3LThhNTUtMzA2ZjQ3Y2ZhYTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNifZEw+rDvHJUEX49DqBn1txMFWAjtEscfn MhvLb/ofWVPdWHf246Tgzj9ODTUxXN7Z6SEzKOUCvjMWsWQseG7B0gbOMUaR5a5P Ui3O6P4a7JWGB60fmL4eaxqTEEmfu3xyytvo73KSt6stvgayzapqj9GuTlBP1mDH YPRr8XYyq8pVubA+66nqrZixUdz5cbSlwNzhfmjj0rzrRWBPOSfaNcPcbn3RlIG+ cpKk/0570vA148zc8N3Hy123yM2Z2uRMaiZf1Q2a1giejCcA7v73xl9xEVx2fZfJ 2Mp/rRcQcuIorS1vT3hHgSrJ+CrKAlDv//O1xQQV4ZBTUIbTJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAr82Jz4uPJgYGjhlAcLxEgOKIqxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDA0ZjhjZDgtNGY0Mi0z Y2IxLTk0NmYtNjE0ZWEyYWM1NjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvaoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBfw05M6oCuSQssi9JP2fw0qGQsJNLuCkEoR0xJj/jTFDXXdYzGKJbk pHQSmV0SgUq8SyIJnoZ7haqCvHeL3mC3yzP+UKqm3pzjJNnY8+DetP6zKq9dTonR E0SCSjOQkgk4pfGnAjV3OxxgVd2692gH78FOBuQmUuk3DJThQGRwvP3HjV03MjiD 8v/cmhpzF+RgRIrGCLEesYIcdn+tWozl2wwMone8HPJc2fkMJn7lo39WwA8rxDCs k8UByciC2sAkHU6aWtLiHwbS0TKWVpK/4GK6gDt+zrB+gu1YcBBaD5VG5gKZVYv/ XhBUfYcoL/RdGPmDiG/mDyppb7GwFx8= -----END CERTIFICATE-----Generated at Mon Apr 7 05:54:30 2025 by rpki-client