$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc637ec9-1237-359f-935f-6ffb93fcd49a.roa File: dc637ec9-1237-359f-935f-6ffb93fcd49a.roa (raw, json) Hash identifier: 1ug1dYgFD69Avm0tXUA0JE4t8FQa5FfyoHfwcR1ZPBA= Subject key identifier: C8:E9:CA:1D:53:06:72:CA:4F:03:A2:1C:EB:F1:14:2F:40:57:F3:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430D69088494C481CCBB180 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc637ec9-1237-359f-935f-6ffb93fcd49a.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.209.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:d6:90:88:49:4c:48:1c:cb:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=aa34ffa5-e2bf-43f6-bdde-fa3fae726a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:0f:b3:13:fd:b0:b5:8a:c0:a2:a0:92:c3: 0a:95:e4:43:ab:fa:f0:08:ec:d9:cc:01:5b:f5:3b: d4:60:b2:d2:34:0d:ec:1a:66:fa:83:fe:c3:b9:b1: 42:fb:f4:46:0f:2e:e0:3b:83:0f:2e:08:a4:43:b3: de:0d:b0:b4:33:a2:82:e8:df:f1:55:b9:25:1f:4f: 6e:28:12:96:ec:82:ee:32:bb:aa:b4:9a:00:7c:92: 75:29:45:ce:19:a5:1a:74:20:58:0d:f8:4b:80:0b: f9:ed:aa:1f:62:4f:e7:d2:e0:15:6f:40:fb:d9:ed: 48:5e:08:6d:a6:e1:58:09:d2:bc:8f:b8:3b:18:b1: 14:56:d4:7c:45:d5:05:b3:3e:5e:8d:3b:e3:e2:56: 87:9e:23:f3:f7:25:34:78:b1:81:9f:09:a8:17:a2: f2:55:fc:79:36:fb:89:1f:9e:b6:10:63:bd:62:f5: 4c:c1:9a:a0:a2:12:9a:eb:d8:00:59:0f:0b:da:ce: 00:af:05:a1:64:2c:11:b4:e8:93:1b:14:dc:91:91: 48:84:07:29:47:24:78:2f:2a:94:fa:cb:e4:3c:d4: c9:6d:6b:2d:e3:43:ce:c1:15:d1:9f:d1:6c:c3:ad: 48:28:27:eb:48:88:a1:da:2f:14:8e:dd:d7:63:a4: 5e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E9:CA:1D:53:06:72:CA:4F:03:A2:1C:EB:F1:14:2F:40:57:F3:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc637ec9-1237-359f-935f-6ffb93fcd49a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.209.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:c5:b6:26:43:88:7d:57:1f:bb:4a:45:e4:80:aa:37:68:1b: 1c:26:05:7d:f6:c3:ed:b0:e1:65:fd:8c:b9:97:99:99:40:fe: eb:ca:78:72:e6:e0:2a:d4:16:1f:f9:35:8c:60:37:71:51:2d: d5:7d:2c:eb:4e:03:f7:10:97:a4:ab:7a:7b:c5:34:65:8d:ae: 09:71:dc:87:89:24:2f:30:59:74:a3:97:34:36:c4:0a:2f:7b: 3f:17:19:76:9f:19:ff:be:72:37:71:7c:26:90:d4:6c:56:64: 6d:66:d3:41:f8:b9:5e:e2:5c:c8:06:20:20:5e:d4:dd:be:a8: af:c8:43:e7:2c:2c:f5:72:e2:b3:30:c1:f8:13:b5:cd:be:ee: 91:a2:0a:95:9b:00:cb:bc:2f:0d:27:6f:72:14:e9:c1:cb:09: b8:cf:64:b1:be:bb:0a:36:20:bf:c2:dc:0d:b3:f3:e9:a6:9c: 65:83:61:b4:0d:96:56:9a:e1:e7:1f:4d:d2:86:e9:ad:af:36: d0:ac:94:43:a8:8b:0b:e4:64:71:f6:f0:fa:c5:81:db:be:f5: 78:4d:16:4e:66:d1:93:c4:42:b0:e5:9c:e0:af:27:00:d2:c5: 99:1d:96:0c:24:94:ed:ce:19:91:3d:69:e5:6c:22:ed:f5:e1: 70:8b:c3:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMNaQiElMSBzLsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk YWEzNGZmYTUtZTJiZi00M2Y2LWJkZGUtZmEzZmFlNzI2YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS8PsxP9sLWKwKKgksMKleRDq/rwCOzZzAFb 9TvUYLLSNA3sGmb6g/7DubFC+/RGDy7gO4MPLgikQ7PeDbC0M6KC6N/xVbklH09u KBKW7ILuMruqtJoAfJJ1KUXOGaUadCBYDfhLgAv57aofYk/n0uAVb0D72e1IXght puFYCdK8j7g7GLEUVtR8RdUFsz5ejTvj4laHniPz9yU0eLGBnwmoF6LyVfx5NvuJ H562EGO9YvVMwZqgohKa69gAWQ8L2s4ArwWhZCwRtOiTGxTckZFIhAcpRyR4LyqU +svkPNTJbWst40POwRXRn9Fsw61IKCfrSIih2i8Ujt3XY6ReBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjpyh1TBnLKTwOiHOvxFC9AV/P+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGM2MzdlYzktMTIzNy0z NTlmLTkzNWYtNmZmYjkzZmNkNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYtHUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALzFtiZDiH1XH7tKReSAqjdoGxwmBX32w+2w4WX9jLmXmZlA/uvKeHLm 4CrUFh/5NYxgN3FRLdV9LOtOA/cQl6SrenvFNGWNrglx3IeJJC8wWXSjlzQ2xAov ez8XGXafGf++cjdxfCaQ1GxWZG1m00H4uV7iXMgGICBe1N2+qK/IQ+csLPVy4rMw wfgTtc2+7pGiCpWbAMu8Lw0nb3IU6cHLCbjPZLG+uwo2IL/C3A2z8+mmnGWDYbQN llaa4ecfTdKG6a2vNtCslEOoiwvkZHH28PrFgdu+9XhNFk5m0ZPEQrDlnOCvJwDS xZkdlgwklO3OGZE9aeVsIu314XCLw5g= -----END CERTIFICATE-----Generated at Tue Jun 3 06:10:38 2025 by rpki-client