$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de1afc8d-7942-3c1c-89cf-07170c947127.roa File: de1afc8d-7942-3c1c-89cf-07170c947127.roa (raw, json) Hash identifier: rnOvoQcr98KLovJn7hL5sZLQlsIlQ14DvoNNGOoJ/YU= Subject key identifier: 0B:DC:13:A7:00:0F:91:F1:BA:70:24:D7:C7:58:A3:D5:5E:19:2E:65 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C08DF639A5751C442B25F40 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de1afc8d-7942-3c1c-89cf-07170c947127.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33651 IP address blocks: 98.234.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:08:df:63:9a:57:51:c4:42:b2:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=61ce7db5-bacb-4465-9f9f-31bc0bcf1f31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:ad:fe:ad:e0:38:ba:a7:47:b6:e7:51:a3: 19:ff:5d:2b:01:01:1d:e3:2d:07:11:06:bd:41:84: 61:f4:3b:e7:fc:34:bb:2f:33:fb:d0:90:40:5a:7c: 1d:f4:0c:e9:85:a6:bd:6f:c8:b2:62:a2:38:53:15: 6c:f2:58:e1:1c:16:ad:82:9d:b9:92:d1:f1:c4:0b: 73:11:8e:ca:fa:b3:0d:dd:8c:1e:51:72:79:b7:91: 85:cb:e1:a9:73:a4:3d:57:ac:ef:27:1a:8e:01:db: a7:9b:c1:76:66:63:47:f8:40:d3:e3:bc:8f:67:3b: ac:17:06:5a:68:a6:7e:82:b5:d0:5c:50:9b:38:af: 25:65:3e:05:82:6f:72:18:a2:2e:e5:d0:11:ad:3c: 61:60:9e:f5:94:9d:2f:1a:00:92:71:e6:97:11:fe: 71:71:be:59:d7:35:18:23:a3:84:cf:ac:ef:3e:9d: ef:dc:5e:3d:63:cd:3e:3c:80:c8:58:78:05:34:a7: ae:65:7c:a4:ee:58:6d:c8:1d:17:ce:64:c6:85:c1: bb:25:ad:d7:ef:e9:79:54:c8:25:1d:44:1c:54:51: c2:b4:d5:14:a7:2f:0d:d4:4c:cd:f0:dd:b2:95:2e: 8c:a4:b4:ec:ef:21:24:65:55:4d:51:ae:bc:e4:e4: 8a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:DC:13:A7:00:0F:91:F1:BA:70:24:D7:C7:58:A3:D5:5E:19:2E:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de1afc8d-7942-3c1c-89cf-07170c947127.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.234.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f4:cf:c1:1a:de:36:95:2d:a8:8f:ae:c5:c4:fc:c5:6c:dc: 3d:22:03:47:09:44:08:50:c0:bf:0b:12:e9:6e:ef:3e:c2:58: f2:0c:47:91:f5:4f:6d:29:db:ec:2a:97:a6:28:08:15:78:79: 45:28:94:8c:ed:ea:4a:be:e9:bc:26:3c:fe:ce:91:a9:c6:58: 3f:60:25:2a:1b:28:61:80:2e:b3:c2:b4:cb:04:e3:eb:99:52: d6:04:e4:83:4e:26:30:df:db:13:6b:8d:6a:47:77:8f:9e:f8: 30:fe:8a:43:24:0f:5b:74:0b:21:02:41:0a:99:f4:a9:3f:ab: d4:69:bb:a1:56:40:89:56:17:8a:d1:04:6d:ea:97:b9:53:aa: 45:62:ce:e5:36:49:d4:d6:b5:31:ff:de:62:ea:01:33:3c:19: 96:89:d4:41:75:17:c4:69:e3:e6:de:15:b7:48:b1:50:13:ba: 25:d4:e2:56:47:e9:6b:28:57:83:64:13:6d:b7:99:1d:b7:4f: 95:b0:91:f9:37:25:11:3d:09:da:c9:a5:ec:96:22:4b:8e:dc: a1:e8:39:e2:d4:b8:aa:2d:d8:7c:4e:e6:49:b2:bb:4e:e7:bc: ba:48:63:f2:6b:58:e1:21:50:9f:cc:e4:b3:db:16:73:b8:e0: 8f:15:b1:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMCN9jmldRxEKyX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NjFjZTdkYjUtYmFjYi00NDY1LTlmOWYtMzFiYzBiY2YxZjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxmt/q3gOLqnR7bnUaMZ/10rAQEd4y0HEQa9 QYRh9Dvn/DS7LzP70JBAWnwd9Azphaa9b8iyYqI4UxVs8ljhHBatgp25ktHxxAtz EY7K+rMN3YweUXJ5t5GFy+Gpc6Q9V6zvJxqOAdunm8F2ZmNH+EDT47yPZzusFwZa aKZ+grXQXFCbOK8lZT4Fgm9yGKIu5dARrTxhYJ71lJ0vGgCSceaXEf5xcb5Z1zUY I6OEz6zvPp3v3F49Y80+PIDIWHgFNKeuZXyk7lhtyB0XzmTGhcG7Ja3X7+l5VMgl HUQcVFHCtNUUpy8N1EzN8N2ylS6MpLTs7yEkZVVNUa685OSKEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvcE6cAD5HxunAk18dYo9VeGS5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGUxYWZjOGQtNzk0Mi0z YzFjLTg5Y2YtMDcxNzBjOTQ3MTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuqsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA30z8Ea3jaVLaiPrsXE/MVs3D0iA0cJRAhQwL8LEulu7z7CWPIMR5H1 T20p2+wql6YoCBV4eUUolIzt6kq+6bwmPP7OkanGWD9gJSobKGGALrPCtMsE4+uZ UtYE5INOJjDf2xNrjWpHd4+e+DD+ikMkD1t0CyECQQqZ9Kk/q9Rpu6FWQIlWF4rR BG3ql7lTqkVizuU2SdTWtTH/3mLqATM8GZaJ1EF1F8Rp4+beFbdIsVATuiXU4lZH 6WsoV4NkE223mR23T5Wwkfk3JRE9CdrJpeyWIkuO3KHoOeLUuKot2HxO5kmyu07n vLpIY/JrWOEhUJ/M5LPbFnO44I8VscM= -----END CERTIFICATE-----Generated at Tue Jun 3 06:13:20 2025 by rpki-client