$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4030276-3a90-31ff-802a-da81c1684724.roa File: d4030276-3a90-31ff-802a-da81c1684724.roa (raw, json) Hash identifier: zFbaA3SN/SpLY8OpP1XTourw1q9PQBYg53GbM2SG+dU= Subject key identifier: F0:54:80:86:B0:D0:A2:B0:AA:03:CA:7C:87:68:3D:BA:6F:0F:E7:B1 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F95C614FB2B4CDBCA9C080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4030276-3a90-31ff-802a-da81c1684724.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.197.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:5c:61:4f:b2:b4:cd:bc:a9:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=58b63a81-d3dd-4496-a19b-dbb79290feb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:86:75:95:98:91:41:a2:48:89:7d:16:8f:b8: 7b:12:9f:2b:29:ce:af:8f:f2:47:33:57:cd:07:c0: 73:17:f2:1c:23:73:37:28:c6:a5:1e:1f:47:0e:3c: 23:0b:e4:1f:82:63:c7:10:1e:fb:2e:e7:0c:be:fc: 16:fb:b2:2f:ba:0e:43:c3:28:63:56:3d:97:fc:8d: 7c:db:11:6e:b9:ce:0d:89:3a:dd:2e:fd:23:e4:1c: f9:2b:7e:c6:45:81:0e:ac:c5:60:03:29:1e:aa:c9: 26:cb:12:26:72:00:91:7b:0d:d5:c5:fa:c8:04:3e: d3:6e:71:69:15:46:d8:dd:1a:34:17:f2:71:03:9d: a7:d6:dd:24:a9:a7:5b:e1:47:20:31:14:89:11:87: 36:be:43:b2:d5:ad:7f:13:c8:c8:3b:6b:c7:d9:61: 60:80:f9:64:84:13:74:df:fd:38:c8:5c:b2:d5:70: cb:1d:96:3a:e9:8a:2d:c9:ab:e8:d1:19:48:a1:b8: 9d:39:56:77:3c:d3:48:7e:06:c3:0d:dd:89:cf:1e: d8:07:ae:f1:06:2a:28:09:a3:4e:2a:d0:06:50:cd: 52:13:14:2f:7e:11:ac:20:ba:cf:02:b4:80:1c:c8: 16:1e:6a:6a:69:fb:08:81:54:b4:2c:ec:68:fe:dd: 56:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:54:80:86:B0:D0:A2:B0:AA:03:CA:7C:87:68:3D:BA:6F:0F:E7:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4030276-3a90-31ff-802a-da81c1684724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.197.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e8:20:fd:c2:f2:02:e6:bb:e2:f2:c1:ae:db:22:a9:3c:d2: a9:a7:38:88:ec:da:4a:02:bc:0c:ac:f4:41:e9:98:3d:0e:8d: 2f:7d:b4:f7:9d:a8:1c:25:17:3d:e1:c2:97:33:1b:b9:a3:fe: 68:1b:f4:8d:f1:79:d9:d2:e8:a5:28:13:06:15:da:60:f3:87: b5:9a:2c:00:0b:7f:8d:b2:06:fa:ee:00:82:c9:83:2f:14:48: 5c:0e:19:df:9a:7e:b3:db:0c:a8:31:6f:58:cd:91:24:fd:50: 32:fd:60:9f:7d:1e:f9:d0:50:42:5c:5a:e0:88:0b:ec:28:bc: 64:ee:47:c8:06:95:f7:26:72:94:1d:ac:5c:16:37:fb:a6:4d: b3:29:fd:af:11:e6:f4:ba:d7:35:42:96:44:17:d2:67:e3:9d: 81:4d:bc:87:e1:5b:95:ec:41:94:54:8c:44:73:05:44:93:99: a8:56:3b:f7:32:cd:ae:d4:22:73:50:f9:f4:f7:53:4f:d6:64: 36:0d:08:59:cb:af:dd:19:a6:9c:3c:e7:2d:80:1d:6b:26:e5: c1:95:75:d2:1c:58:a4:02:33:64:64:cb:aa:0e:b7:bc:11:50: b6:f3:52:04:70:9e:c3:ec:3f:27:2d:17:fd:ff:67:0a:31:38: d5:8b:21:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+VxhT7K0zbypwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NThiNjNhODEtZDNkZC00NDk2LWExOWItZGJiNzkyOTBmZWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIZ1lZiRQaJIiX0Wj7h7Ep8rKc6vj/JHM1fN B8BzF/IcI3M3KMalHh9HDjwjC+QfgmPHEB77LucMvvwW+7Ivug5DwyhjVj2X/I18 2xFuuc4NiTrdLv0j5Bz5K37GRYEOrMVgAykeqskmyxImcgCRew3VxfrIBD7TbnFp FUbY3Ro0F/JxA52n1t0kqadb4UcgMRSJEYc2vkOy1a1/E8jIO2vH2WFggPlkhBN0 3/04yFyy1XDLHZY66Yotyavo0RlIobidOVZ3PNNIfgbDDd2Jzx7YB67xBiooCaNO KtAGUM1SExQvfhGsILrPArSAHMgWHmpqafsIgVS0LOxo/t1WVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBUgIaw0KKwqgPKfIdoPbpvD+exMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQwMzAyNzYtM2E5MC0z MWZmLTgwMmEtZGE4MWMxNjg0NzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYsW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7oIP3C8gLmu+Lywa7bIqk80qmnOIjs2koCvAys9EHpmD0OjS99tPed qBwlFz3hwpczG7mj/mgb9I3xednS6KUoEwYV2mDzh7WaLAALf42yBvruAILJgy8U SFwOGd+afrPbDKgxb1jNkST9UDL9YJ99HvnQUEJcWuCIC+wovGTuR8gGlfcmcpQd rFwWN/umTbMp/a8R5vS61zVClkQX0mfjnYFNvIfhW5XsQZRUjERzBUSTmahWO/cy za7UInNQ+fT3U0/WZDYNCFnLr90Zppw85y2AHWsm5cGVddIcWKQCM2Rky6oOt7wR ULbzUgRwnsPsPyctF/3/ZwoxONWLIfI= -----END CERTIFICATE-----Generated at Mon Apr 7 06:49:36 2025 by rpki-client