$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d597219a-a112-3bbe-9d12-c93c4c0f7b67.roa File: d597219a-a112-3bbe-9d12-c93c4c0f7b67.roa (raw, json) Hash identifier: 0lG3LrQ8Q7GNY8ExS8+4+dmtt7WPg66MQkgrDDqLtFQ= Subject key identifier: 85:2B:EC:60:66:B4:39:93:E9:AC:9E:3D:BD:12:1F:12:35:C1:02:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D27946AF191BF3086380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d597219a-a112-3bbe-9d12-c93c4c0f7b67.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 98.250.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d2:79:46:af:19:1b:f3:08:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=5aaf3972-c1e1-44fc-8dc8-3d42ad12ece9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:e9:cc:81:d7:85:f2:69:e5:95:4a:bd:6a: a6:8b:23:97:19:3d:12:f8:37:1b:6f:01:63:51:1f: b0:ee:29:45:4d:e6:6e:07:c9:75:8f:e3:89:ac:27: 73:96:4d:9e:61:62:03:5a:bd:bc:5f:2c:63:d6:54: f3:de:a5:25:70:11:c3:f4:0a:ea:e5:a5:73:11:50: 2e:2f:93:2a:40:fc:7f:d4:59:6a:b6:3c:39:2c:33: ad:80:fb:47:ce:cb:12:9b:78:db:12:98:7e:ac:2d: 8a:7b:bf:60:4f:41:a3:43:0f:95:8a:7a:af:ca:ff: 30:fa:38:3d:90:de:39:39:d1:1e:0d:c0:72:4a:d8: 32:4e:cf:61:3a:9d:41:1f:7a:87:85:31:06:e4:96: 8a:7c:1d:d8:45:b8:ce:51:f3:ca:60:36:fa:6d:68: 8f:1a:e5:7a:09:72:b9:b7:79:90:a9:c4:4e:9d:f6: 2a:ff:55:a8:a2:cd:8b:31:25:7d:97:1f:4d:21:76: 62:03:ab:7c:a8:f0:e5:7a:1b:f1:59:94:a5:b0:0f: c2:7b:cf:51:06:fe:9a:9a:f8:e4:e2:5f:97:aa:f9: ea:97:4b:46:b1:9f:b6:ea:f5:9e:b1:36:06:fa:d8: 05:e5:e3:ee:c9:4e:de:ed:a7:bb:06:78:43:23:4a: cf:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2B:EC:60:66:B4:39:93:E9:AC:9E:3D:BD:12:1F:12:35:C1:02:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d597219a-a112-3bbe-9d12-c93c4c0f7b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption da:2f:ca:f7:da:45:4b:e4:14:fe:6d:4f:f2:4e:2b:47:79:d3: 3e:37:e8:59:62:a7:cb:a0:0e:c6:16:00:6e:3b:7b:2d:be:69: 99:dc:21:c2:87:24:73:21:61:bd:66:51:18:59:d2:38:a1:e1: 32:8d:f9:e2:27:a8:92:0d:66:89:f2:55:0f:1f:1b:bf:1d:91: 9a:3e:19:8c:ea:71:b0:87:a0:19:46:7f:53:b7:98:a9:0c:ff: fb:1e:34:ad:38:25:89:0d:e5:b9:6b:62:2c:bd:57:12:c4:04: fa:ec:f2:77:be:35:7a:18:de:6a:94:50:63:cf:f6:c0:75:62: 43:bb:23:b9:7c:05:29:0e:f4:73:54:c5:8e:d1:9c:f6:f8:4f: fe:b2:c8:a8:4b:5f:78:11:2e:1b:bc:34:0f:12:f8:c4:f2:0a: d0:8c:bc:30:6d:aa:88:ef:ce:9c:cd:f5:d2:c1:79:48:49:58: 5d:e2:d2:14:64:21:7b:10:e5:e3:42:fe:db:7e:47:16:a8:18: 3a:2b:31:d4:2d:e4:7f:b6:da:8d:4d:fd:9c:c9:2f:90:fa:80: c9:79:82:65:4d:4f:70:43:9c:f1:ee:db:b4:08:fa:74:fc:64: 43:27:12:a1:16:14:36:c1:5a:4d:69:67:f3:25:e4:d0:b9:6a: 05:41:34:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj099J5Rq8ZG/MIY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NWFhZjM5NzItYzFlMS00NGZjLThkYzgtM2Q0MmFkMTJlY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNDpzIHXhfJp5ZVKvWqmiyOXGT0S+DcbbwFj UR+w7ilFTeZuB8l1j+OJrCdzlk2eYWIDWr28Xyxj1lTz3qUlcBHD9Arq5aVzEVAu L5MqQPx/1Flqtjw5LDOtgPtHzssSm3jbEph+rC2Ke79gT0GjQw+Vinqvyv8w+jg9 kN45OdEeDcByStgyTs9hOp1BH3qHhTEG5JaKfB3YRbjOUfPKYDb6bWiPGuV6CXK5 t3mQqcROnfYq/1Woos2LMSV9lx9NIXZiA6t8qPDlehvxWZSlsA/Ce89RBv6amvjk 4l+Xqvnql0tGsZ+26vWesTYG+tgF5ePuyU7e7ae7BnhDI0rPUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUr7GBmtDmT6ayePb0SHxI1wQLQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDU5NzIxOWEtYTExMi0z YmJlLTlkMTItYzkzYzRjMGY3YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvoOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANovyvfaRUvkFP5tT/JOK0d50z436Flip8ugDsYWAG47ey2+aZncIcKH JHMhYb1mURhZ0jih4TKN+eInqJINZonyVQ8fG78dkZo+GYzqcbCHoBlGf1O3mKkM //seNK04JYkN5blrYiy9VxLEBPrs8ne+NXoY3mqUUGPP9sB1YkO7I7l8BSkO9HNU xY7RnPb4T/6yyKhLX3gRLhu8NA8S+MTyCtCMvDBtqojvzpzN9dLBeUhJWF3i0hRk IXsQ5eNC/tt+RxaoGDorMdQt5H+22o1N/ZzJL5D6gMl5gmVNT3BDnPHu27QI+nT8 ZEMnEqEWFDbBWk1pZ/Ml5NC5agVBNBE= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:02 2025 by rpki-client