$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da67f956-161d-38ce-b3d6-b2fbdf922192.roa File: da67f956-161d-38ce-b3d6-b2fbdf922192.roa (raw, json) Hash identifier: ezjvAgo4iFvpogaaRRIh+UlGesgwyTnP2CXQAUUpoI8= Subject key identifier: A6:3C:F4:7B:55:54:AA:76:44:0D:82:97:01:60:81:54:0D:07:38:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849FF75D70933A60014A99958C0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da67f956-161d-38ce-b3d6-b2fbdf922192.roa Signing time: Wed 28 May 2025 01:00:49 +0000 ROA not before: Wed 28 May 2025 01:00:49 +0000 ROA not after: Tue 26 Aug 2025 01:00:49 +0000 asID: 7725 IP address blocks: 98.54.52.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ff:75:d7:09:33:a6:00:14:a9:99:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 28 01:00:49 2025 GMT Not After : Aug 26 01:00:49 2025 GMT Subject: CN=8ad7f66c-c8f9-433f-9b1f-b5b5d6e1a306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:8b:f4:65:fa:11:0d:45:8c:32:78:7e:07: 50:da:fa:44:a5:53:48:bb:24:52:bf:88:61:fb:d6: d7:fc:80:70:e6:57:85:71:c8:f0:f4:a0:81:3c:a0: 2b:8b:65:2e:2a:12:1e:44:64:f3:6f:b7:c8:30:c2: ef:36:16:9c:46:bc:22:3d:bb:9d:c3:38:1e:5f:58: 90:44:26:f8:64:82:ec:78:7f:4c:cb:90:4c:10:a0: c2:c9:83:a9:c3:1d:a5:28:34:de:85:9e:35:0b:95: 1b:9f:95:ca:8e:89:24:43:f7:a2:a0:72:09:77:4d: 7c:eb:70:bb:82:f4:1b:99:41:ef:95:42:2c:da:e2: 5b:88:03:3a:ce:be:89:48:38:50:07:e4:55:56:a9: 7c:a1:a9:4f:06:7e:4d:1f:70:5e:83:31:06:00:62: 5f:12:59:b2:7f:74:b8:b4:9e:54:06:a6:fe:57:2a: 9e:bd:83:21:8e:e2:dd:25:21:de:37:49:fd:18:2a: 99:79:c6:ba:bd:71:ed:39:2d:74:01:66:2c:92:8b: cb:40:a6:59:45:7a:09:cd:cf:30:42:23:7b:ce:73: 73:ae:76:57:f0:f1:a7:68:5c:9d:ae:e6:0e:79:77: eb:f4:4d:54:e8:8a:71:95:d6:cd:3d:75:60:ec:4c: 92:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3C:F4:7B:55:54:AA:76:44:0D:82:97:01:60:81:54:0D:07:38:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/da67f956-161d-38ce-b3d6-b2fbdf922192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.54.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:fd:e9:94:f9:85:93:89:9a:c0:65:fc:db:24:43:50:1e:82: cf:66:26:6b:b7:16:56:d3:29:42:b1:c7:99:38:cd:9a:91:c2: d2:cf:ea:01:96:52:0a:6e:ec:79:ad:18:3c:d9:fb:07:7b:29: ee:d6:99:66:bd:3b:7a:fd:85:32:ef:c4:07:73:41:90:b4:f1: 47:f9:71:18:2c:1d:67:c6:f4:f8:82:cd:b9:b1:95:65:38:c5: e7:57:51:64:a7:4e:a9:93:96:be:2a:7c:37:cb:db:a1:7a:6e: ac:cd:c2:fd:aa:9f:0e:04:48:1c:c4:85:1d:15:eb:b6:96:cc: 04:87:0e:0e:44:c2:77:50:ae:66:6b:ab:19:ea:c3:9d:95:6a: af:5a:19:86:c5:c6:6f:70:e7:23:bc:21:00:5d:80:9a:74:e8: d3:38:77:4c:3d:73:9c:38:87:0c:22:0c:d5:ff:85:0d:84:65: 11:82:87:a1:e2:3a:03:00:8c:6e:db:29:6d:b4:21:db:12:b5: 17:8f:20:90:12:7e:e5:db:f8:11:04:76:3e:f0:9d:21:43:cb: 89:ed:e5:22:60:50:61:39:29:b5:b7:38:f5:ac:a7:21:44:db: 3f:17:66:13:fb:b3:2a:42:43:1f:be:33:56:ef:7b:10:db:85: 33:8f:98:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn/ddcJM6YAFKmZWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUyODAxMDA0OVoXDTI1MDgyNjAxMDA0OVowLzEtMCsGA1UEAxMk OGFkN2Y2NmMtYzhmOS00MzNmLTliMWYtYjViNWQ2ZTFhMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszCL9GX6EQ1FjDJ4fgdQ2vpEpVNIuyRSv4hh +9bX/IBw5leFccjw9KCBPKAri2UuKhIeRGTzb7fIMMLvNhacRrwiPbudwzgeX1iQ RCb4ZILseH9My5BMEKDCyYOpwx2lKDTehZ41C5Ubn5XKjokkQ/eioHIJd01863C7 gvQbmUHvlUIs2uJbiAM6zr6JSDhQB+RVVql8oalPBn5NH3BegzEGAGJfElmyf3S4 tJ5UBqb+VyqevYMhjuLdJSHeN0n9GCqZeca6vXHtOS10AWYskovLQKZZRXoJzc8w QiN7znNzrnZX8PGnaFydruYOeXfr9E1U6IpxldbNPXVg7EySJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY89HtVVKp2RA2ClwFggVQNBzhUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGE2N2Y5NTYtMTYxZC0z OGNlLWIzZDYtYjJmYmRmOTIyMTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYjY0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALH96ZT5hZOJmsBl/NskQ1Aegs9mJmu3FlbTKUKxx5k4zZqRwtLP6gGW Ugpu7HmtGDzZ+wd7Ke7WmWa9O3r9hTLvxAdzQZC08Uf5cRgsHWfG9PiCzbmxlWU4 xedXUWSnTqmTlr4qfDfL26F6bqzNwv2qnw4ESBzEhR0V67aWzASHDg5EwndQrmZr qxnqw52Vaq9aGYbFxm9w5yO8IQBdgJp06NM4d0w9c5w4hwwiDNX/hQ2EZRGCh6Hi OgMAjG7bKW20IdsStRePIJASfuXb+BEEdj7wnSFDy4nt5SJgUGE5KbW3OPWspyFE 2z8XZhP7sypCQx++M1bvexDbhTOPmFo= -----END CERTIFICATE-----Generated at Tue Jun 3 07:43:08 2025 by rpki-client