$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbca5ede-a358-3c75-9da1-99d8ea290b55.roa File: dbca5ede-a358-3c75-9da1-99d8ea290b55.roa (raw, json) Hash identifier: mzJ1ECSCJiUGeSgcSwnmKmcGPXRV/5Q7lOtgrsZHc5Y= Subject key identifier: 89:19:0F:05:A2:B4:E3:67:33:E5:6B:A3:E3:7D:91:71:5E:C5:B7:96 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFC05A7C608C0EDAD2D880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbca5ede-a358-3c75-9da1-99d8ea290b55.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.212.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:c0:5a:7c:60:8c:0e:da:d2:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1fff082e-5fac-44f4-a0e6-2f32c130c3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5a:ac:a7:22:94:99:31:ec:5b:f9:44:cf:65: a7:d4:04:23:7b:d2:44:59:bc:23:90:cb:f7:34:04: 9b:d1:11:92:b0:13:ac:42:aa:22:26:ef:23:c5:5d: 4d:d1:2b:83:b4:ca:fa:0c:07:24:93:39:71:e1:4f: 9a:0d:11:44:93:bf:d2:82:c6:ec:ac:e1:35:d5:0c: 6c:52:69:4e:a5:9f:90:0f:cf:90:c4:75:4f:5f:56: 62:60:28:0f:35:c2:0d:3b:bc:94:e8:61:14:b9:f3: ac:ba:70:4c:e7:8b:61:d2:b8:e0:d0:69:8d:50:fd: a8:81:84:93:5a:3a:4a:52:a9:18:e0:79:16:25:49: 19:f4:a9:49:b0:27:47:06:8b:5a:7f:2d:c4:6b:27: 88:68:46:5f:bf:b0:ea:e6:38:f1:0a:5d:34:3e:bf: 0c:3d:00:30:02:5f:d5:c5:14:a0:30:84:50:d8:11: e9:3a:50:97:e5:35:16:08:26:9e:fa:90:e2:48:5d: 9e:f6:17:17:b1:0e:02:dd:93:cf:8e:e7:47:88:4e: c1:e6:47:87:cd:a3:0f:95:ce:92:4e:df:d3:75:a6: 7c:f9:8f:4e:72:cb:90:61:8f:54:85:13:42:c1:da: 8e:cf:a7:1a:5d:16:b6:19:8e:25:9b:78:4f:c2:29: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:19:0F:05:A2:B4:E3:67:33:E5:6B:A3:E3:7D:91:71:5E:C5:B7:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dbca5ede-a358-3c75-9da1-99d8ea290b55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.212.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:39:20:fe:34:b9:5f:c7:e6:21:ec:88:32:43:3d:d7:c1:c0: 6d:f4:1b:59:71:1d:b7:a1:dd:67:ae:8c:bd:bf:8c:86:61:77: 5f:a3:9e:12:2c:f5:81:a6:2b:77:49:4c:97:58:c6:60:de:98: df:ad:3e:96:30:ec:52:df:8c:71:95:d3:01:50:b3:84:4e:a2: 93:fc:a2:9e:a5:42:bd:8e:57:b8:b0:d5:c7:76:7a:3d:50:cd: 97:51:eb:45:86:15:45:78:59:74:79:1c:5e:87:56:75:e0:cd: 3e:c1:12:7e:03:46:85:18:d9:6d:3a:da:53:bf:82:af:34:15: 71:3f:b8:1b:90:91:71:d2:e4:97:e9:f2:43:53:65:0f:14:58: cc:05:39:38:02:59:a8:c4:d2:56:20:71:1f:be:c2:40:01:bd: a6:69:ee:45:ac:10:bc:5c:4c:94:2c:2e:7d:a8:f4:ed:a2:70: 9e:e3:7f:c0:b0:d8:c1:dd:d8:a6:f2:9d:66:ae:88:b0:17:3a: ae:7c:78:00:40:bb:10:b7:9b:11:63:2f:2b:3b:73:1b:4f:19: 81:31:22:9d:f4:73:c9:74:89:fd:26:e9:0e:7b:4b:18:34:b5: 7c:31:4c:ad:e0:3c:3b:47:9b:52:b6:93:73:5a:75:77:76:6f: a2:ab:f7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr8BafGCMDtrS2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWZmZjA4MmUtNWZhYy00NGY0LWEwZTYtMmYzMmMxMzBjM2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FqspyKUmTHsW/lEz2Wn1AQje9JEWbwjkMv3 NASb0RGSsBOsQqoiJu8jxV1N0SuDtMr6DAckkzlx4U+aDRFEk7/SgsbsrOE11Qxs UmlOpZ+QD8+QxHVPX1ZiYCgPNcINO7yU6GEUufOsunBM54th0rjg0GmNUP2ogYST WjpKUqkY4HkWJUkZ9KlJsCdHBotafy3EayeIaEZfv7Dq5jjxCl00Pr8MPQAwAl/V xRSgMIRQ2BHpOlCX5TUWCCae+pDiSF2e9hcXsQ4C3ZPPjudHiE7B5keHzaMPlc6S Tt/TdaZ8+Y9OcsuQYY9UhRNCwdqOz6caXRa2GY4lm3hPwillHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkZDwWitONnM+Vro+N9kXFexbeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGJjYTVlZGUtYTM1OC0z Yzc1LTlkYTEtOTlkOGVhMjkwYjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYtRyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABo5IP40uV/H5iHsiDJDPdfBwG30G1lxHbeh3WeujL2/jIZhd1+jnhIs 9YGmK3dJTJdYxmDemN+tPpYw7FLfjHGV0wFQs4ROopP8op6lQr2OV7iw1cd2ej1Q zZdR60WGFUV4WXR5HF6HVnXgzT7BEn4DRoUY2W062lO/gq80FXE/uBuQkXHS5Jfp 8kNTZQ8UWMwFOTgCWajE0lYgcR++wkABvaZp7kWsELxcTJQsLn2o9O2icJ7jf8Cw 2MHd2KbynWauiLAXOq58eABAuxC3mxFjLys7cxtPGYExIp30c8l0if0m6Q57Sxg0 tXwxTK3gPDtHm1K2k3NadXd2b6Kr94k= -----END CERTIFICATE-----Generated at Mon Apr 7 06:19:38 2025 by rpki-client