$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2a7c2e9-2248-3556-b388-f18c68469f70.roa File: e2a7c2e9-2248-3556-b388-f18c68469f70.roa (raw, json) Hash identifier: /zRaLzY7q33EVctMWu4mJyJYCnEyr2t3q1Bga6fNO1g= Subject key identifier: 6B:EE:F3:19:51:DE:6C:BC:74:2F:A3:6D:D3:2F:93:8D:DF:6D:AA:3D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05945B387E924DD3DB7380 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2a7c2e9-2248-3556-b388-f18c68469f70.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33660 IP address blocks: 98.33.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:94:5b:38:7e:92:4d:d3:db:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=4aaeb422-04e2-4fa0-b64a-50f9ca23ae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:73:81:c5:e8:b3:f5:83:67:6e:19:fd:6c:65: 53:3b:d9:a4:46:d3:5e:30:1f:dc:43:66:2f:f0:1c: 47:52:c1:ab:54:af:c3:2b:a3:14:da:55:67:b1:f9: 2f:89:ee:f0:b1:93:78:d7:85:af:39:60:9e:bb:a5: 18:99:8e:29:f2:2e:ca:d7:64:7b:bc:b9:1b:d6:25: 3f:83:74:a1:05:08:b7:44:e1:04:19:f5:44:ed:4f: 23:64:b2:49:ad:15:25:61:6f:d0:ba:de:25:ee:fb: 5c:9f:11:02:09:54:d4:4c:e6:d2:ca:ab:2b:5c:3d: 65:7a:6d:ea:77:b5:b9:98:37:b6:7d:33:06:fa:8d: c1:cf:7d:56:15:2c:2b:4e:2a:50:71:19:f6:b6:7d: 62:72:e7:6b:65:55:8c:57:96:49:71:af:db:d5:37: d1:04:01:b8:35:76:8f:db:a7:51:21:fb:01:c3:15: ab:72:c1:5e:8c:17:f7:2b:b6:4d:3c:45:dc:5f:3c: 02:cd:1d:84:0c:1c:20:40:3b:b1:cf:10:26:64:8f: c4:99:cf:59:99:71:a5:56:25:3a:04:a4:d0:e9:d2: 17:d0:6d:68:bc:6e:07:ba:70:5f:d9:2c:23:09:65: 48:11:e0:e7:9c:dd:95:b3:be:a6:17:37:50:75:d7: 91:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:EE:F3:19:51:DE:6C:BC:74:2F:A3:6D:D3:2F:93:8D:DF:6D:AA:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e2a7c2e9-2248-3556-b388-f18c68469f70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.33.206.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:35:e5:e9:20:4f:6d:76:7f:97:0f:75:98:26:69:30:f2:5b: a7:80:36:b3:e1:f1:aa:9d:9e:8d:6c:b9:13:3e:f7:3a:72:02: f9:77:07:b2:12:85:6b:a0:4e:18:c5:1d:f7:3e:3e:62:0d:4c: f0:2d:23:5b:67:63:22:1c:03:61:21:e0:6e:06:c1:b8:2e:4b: 51:67:ab:98:8f:ec:a3:d7:e2:3e:13:4f:9c:16:30:00:fd:30: 33:af:19:63:83:da:82:3b:e3:61:4e:15:12:ec:a3:66:5e:f1: dd:fe:e3:2d:54:76:37:97:eb:5f:a0:30:b8:86:f2:4b:38:50: 75:97:93:0a:2a:31:16:be:9a:fb:75:42:85:22:fd:0c:e2:c2: 3c:11:8a:60:6c:1f:75:79:7c:37:76:f7:1e:33:73:17:94:1c: 01:f9:5a:af:67:92:65:2e:96:e4:45:fa:95:fd:97:c6:ba:0a: 7b:4d:35:f2:99:19:50:0d:3b:98:66:21:bf:13:23:79:e6:84: 46:f6:73:ae:7d:96:de:5f:6f:f6:11:21:d3:74:be:66:80:f3: 27:3d:77:e4:92:da:07:fd:67:f5:3a:97:70:46:24:08:b7:a0: 3f:54:e3:ba:43:3b:c6:2c:89:a0:8a:b8:4a:52:cb:d1:b4:9b: 86:68:70:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBZRbOH6STdPbc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk NGFhZWI0MjItMDRlMi00ZmEwLWI2NGEtNTBmOWNhMjNhZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnOBxeiz9YNnbhn9bGVTO9mkRtNeMB/cQ2Yv 8BxHUsGrVK/DK6MU2lVnsfkvie7wsZN414WvOWCeu6UYmY4p8i7K12R7vLkb1iU/ g3ShBQi3ROEEGfVE7U8jZLJJrRUlYW/Qut4l7vtcnxECCVTUTObSyqsrXD1lem3q d7W5mDe2fTMG+o3Bz31WFSwrTipQcRn2tn1icudrZVWMV5ZJca/b1TfRBAG4NXaP 26dRIfsBwxWrcsFejBf3K7ZNPEXcXzwCzR2EDBwgQDuxzxAmZI/Emc9ZmXGlViU6 BKTQ6dIX0G1ovG4HunBf2SwjCWVIEeDnnN2Vs76mFzdQddeR4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvu8xlR3my8dC+jbdMvk43fbao9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTJhN2MyZTktMjI0OC0z NTU2LWIzODgtZjE4YzY4NDY5ZjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYiHOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACk15ekgT212f5cPdZgmaTDyW6eANrPh8aqdno1suRM+9zpyAvl3B7IS hWugThjFHfc+PmINTPAtI1tnYyIcA2Eh4G4GwbguS1Fnq5iP7KPX4j4TT5wWMAD9 MDOvGWOD2oI742FOFRLso2Ze8d3+4y1UdjeX61+gMLiG8ks4UHWXkwoqMRa+mvt1 QoUi/QziwjwRimBsH3V5fDd29x4zcxeUHAH5Wq9nkmUuluRF+pX9l8a6CntNNfKZ GVANO5hmIb8TI3nmhEb2c659lt5fb/YRIdN0vmaA8yc9d+SS2gf9Z/U6l3BGJAi3 oD9U47pDO8YsiaCKuEpSy9G0m4ZocLM= -----END CERTIFICATE-----Generated at Tue Jun 3 07:01:06 2025 by rpki-client