$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d49f6036-43ef-3683-9bcf-e553783d143e.roa File: d49f6036-43ef-3683-9bcf-e553783d143e.roa (raw, json) Hash identifier: eXfa+kvgVa1xb9D3IskVHdBkHgthJ1Bz3yoXQHlkMmQ= Subject key identifier: 77:5D:F0:75:AB:03:0F:6C:1D:57:08:71:02:C9:62:C5:78:50:3D:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849203CBEC3353E885896481600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d49f6036-43ef-3683-9bcf-e553783d143e.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 7725 IP address blocks: 98.251.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:be:c3:35:3e:88:58:96:48:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=2fc1b0cb-2089-4da4-a941-df63dabcdd52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:09:8a:f9:9d:16:68:79:08:59:40:bf:4f:ab: fe:8b:a3:4d:2a:e3:56:6f:68:0d:42:17:62:a5:b1: 8d:c3:5e:a7:10:18:b0:cc:ed:fa:af:3a:dc:ec:61: 80:ef:bd:cb:06:03:37:05:15:98:72:5a:48:10:53: 72:e6:6c:6c:d1:2f:6e:31:3c:ce:7d:ff:61:d7:96: 5c:1f:ce:92:ed:36:8f:b2:b9:8a:75:8d:20:96:56: 37:10:8c:21:b6:87:19:1c:6e:9f:01:ab:db:97:f1: f9:48:db:ae:61:c3:63:69:9e:6c:0a:97:d0:1e:55: 8c:15:ac:cc:79:ae:4a:7a:aa:db:91:bd:98:ba:9f: ae:1c:ab:f1:36:3a:7b:32:1d:a6:15:77:b3:ae:45: 28:5e:82:c4:fe:a8:b9:4f:51:d2:da:0f:0c:24:29: 4c:e3:6d:d3:5d:1f:91:ab:f3:f8:99:d1:fb:c2:18: 14:4c:33:e2:1a:1e:27:bb:d5:1b:1b:f5:96:1a:2a: 9c:cc:50:af:e4:7b:c4:21:2b:86:8b:6c:51:02:3b: e3:2a:fa:32:83:a2:9e:5f:df:27:9d:3a:3d:7c:75: e0:38:a4:99:24:63:47:9e:fb:2d:fc:ce:86:3d:d4: 5d:ea:4e:3c:e2:19:0b:7f:b8:32:70:5a:60:81:e5: f9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5D:F0:75:AB:03:0F:6C:1D:57:08:71:02:C9:62:C5:78:50:3D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d49f6036-43ef-3683-9bcf-e553783d143e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.251.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:0c:bb:3b:62:9f:f7:7a:53:38:62:69:eb:ad:06:e9:9f:7c: f9:42:4f:94:3c:35:b4:07:b3:d2:78:aa:c9:32:9f:fe:7a:88: 56:dc:9a:ff:6a:6a:01:25:3f:1f:ed:e6:72:f4:56:43:3a:11: 78:d0:d3:95:16:d5:3e:ce:20:60:fe:1f:55:fd:d1:f1:2c:b3: c3:ba:92:78:57:ae:82:b2:14:b4:39:a1:c4:5d:31:a1:84:df: 4e:2c:95:e0:ad:be:fd:53:ee:99:62:cb:2b:77:b7:f5:57:25: f0:ec:23:74:45:cf:84:47:83:dd:05:d5:23:62:5c:07:4b:ab: 69:82:30:c4:82:65:7c:7b:6d:5b:3f:ba:2f:38:43:d7:af:0c: 0a:11:05:4a:a9:59:89:6e:ba:a6:47:5d:d3:93:d4:fa:01:b4: 9e:26:f5:4b:97:0e:64:13:d1:22:6d:1c:1b:e1:1a:31:17:f3: b7:5d:14:ec:e3:f0:04:b0:e9:bc:fd:ed:93:bf:52:34:38:33: 4d:2a:93:d1:e7:8b:8b:c2:db:d3:b3:be:71:b4:15:94:e9:51: 44:03:76:22:f9:c7:ca:a4:ee:25:d3:0e:4f:cd:37:7f:88:ac: 74:b5:60:41:21:6d:7a:dc:02:aa:61:dd:bf:46:03:1d:24:0a: 83:e7:33:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkgPL7DNT6IWJZIFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MmZjMWIwY2ItMjA4OS00ZGE0LWE5NDEtZGY2M2RhYmNkZDUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAmK+Z0WaHkIWUC/T6v+i6NNKuNWb2gNQhdi pbGNw16nEBiwzO36rzrc7GGA773LBgM3BRWYclpIEFNy5mxs0S9uMTzOff9h15Zc H86S7TaPsrmKdY0gllY3EIwhtocZHG6fAavbl/H5SNuuYcNjaZ5sCpfQHlWMFazM ea5Keqrbkb2Yup+uHKvxNjp7Mh2mFXezrkUoXoLE/qi5T1HS2g8MJClM423TXR+R q/P4mdH7whgUTDPiGh4nu9UbG/WWGiqczFCv5HvEISuGi2xRAjvjKvoyg6KeX98n nTo9fHXgOKSZJGNHnvst/M6GPdRd6k484hkLf7gycFpggeX51QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHdd8HWrAw9sHVcIcQLJYsV4UD1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDQ5ZjYwMzYtNDNlZi0z NjgzLTliY2YtZTU1Mzc4M2QxNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvtvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcMuztin/d6UzhiaeutBumffPlCT5Q8NbQHs9J4qskyn/56iFbcmv9q agElPx/t5nL0VkM6EXjQ05UW1T7OIGD+H1X90fEss8O6knhXroKyFLQ5ocRdMaGE 304sleCtvv1T7pliyyt3t/VXJfDsI3RFz4RHg90F1SNiXAdLq2mCMMSCZXx7bVs/ ui84Q9evDAoRBUqpWYluuqZHXdOT1PoBtJ4m9UuXDmQT0SJtHBvhGjEX87ddFOzj 8ASw6bz97ZO/UjQ4M00qk9Hni4vC29OzvnG0FZTpUUQDdiL5x8qk7iXTDk/NN3+I rHS1YEEhbXrcAqph3b9GAx0kCoPnM2o= -----END CERTIFICATE-----Generated at Mon Apr 7 06:22:42 2025 by rpki-client