$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e352df83-a12c-38d7-945a-7c1b3d914aa3.roa File: e352df83-a12c-38d7-945a-7c1b3d914aa3.roa (raw, json) Hash identifier: c29imVnCxTjhb5zj2Ad3/x9bcOjIZRxuUYKKkETE10c= Subject key identifier: 13:64:D1:AA:94:1D:97:77:3B:FD:2B:5A:E4:2C:B9:C2:6C:82:C6:A4 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F95B62824CA20E208A6880 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e352df83-a12c-38d7-945a-7c1b3d914aa3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.197.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:5b:62:82:4c:a2:0e:20:8a:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=0d7a7f86-916c-4b6a-b093-0f7b45bb088d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a6:0f:89:ac:da:66:0f:d5:b3:46:2c:1d:1f: 55:ef:61:2b:1d:4b:e3:01:c7:5c:5e:df:9b:29:23: 1b:9c:72:76:6f:dd:ca:f9:42:fc:47:d4:1f:9b:ae: 5f:d2:79:02:23:4a:3c:c5:40:54:0d:98:4f:b9:a5: ca:6e:b8:d8:5d:b8:bd:d9:e9:31:eb:1b:12:bf:cf: 33:bf:ae:c3:b0:62:27:88:31:92:ce:dd:d8:1d:3f: 20:e2:cd:99:62:57:8d:0a:1c:50:3c:0c:44:07:36: d5:fb:43:79:7f:02:cb:79:cd:48:5b:5f:38:ce:dc: da:db:6e:2a:68:dd:af:4c:ee:c4:1d:ed:fd:23:0b: 9c:fa:b4:f7:16:c4:98:55:e2:fc:75:ea:09:f9:50: 45:78:72:b9:53:f0:cb:03:01:32:75:eb:ad:41:ab: bd:1a:f1:26:cf:6b:78:bd:fc:cc:b5:cf:dc:c6:b3: 39:88:b2:98:fa:cc:0f:fc:59:8d:25:40:dc:27:fd: b2:33:62:b4:7c:78:bc:4e:29:8b:14:43:8d:0f:9f: a4:7d:f8:73:4d:ba:2a:3d:37:f8:4b:9e:57:ac:70: 25:61:54:d7:76:89:78:17:b9:21:0c:04:f5:7b:d1: 3c:f9:b7:ca:77:47:19:72:0e:63:89:77:20:a5:29: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:D1:AA:94:1D:97:77:3B:FD:2B:5A:E4:2C:B9:C2:6C:82:C6:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e352df83-a12c-38d7-945a-7c1b3d914aa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.197.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:2c:a0:56:e4:98:32:63:40:11:b6:16:fd:05:9d:ac:4c:cb: b7:97:a7:a7:27:ff:10:aa:cd:6b:4b:37:00:42:8d:0f:7c:ca: 77:8f:63:b6:b8:14:e1:ca:fe:8a:cb:b8:1a:fc:55:a9:2c:bf: 90:6a:fd:f7:79:e6:ee:ef:84:99:eb:0f:79:fe:fa:72:9c:d3: be:bd:2b:22:f3:8e:61:81:1c:3d:65:bd:00:8e:90:ed:7d:e2: 91:64:91:e2:c6:5f:35:57:4b:5d:01:d3:aa:08:e9:5b:44:d7: 7e:51:2d:43:34:0d:88:bc:3f:e4:6c:74:5b:74:43:8e:cf:60: 21:2e:7d:39:0b:20:7d:28:c2:b8:78:7b:82:a1:59:8f:51:e0: 46:18:5a:22:e9:02:ff:1d:95:37:e0:ac:de:6c:ab:e7:9f:bc: ce:e4:84:c0:51:53:a2:56:dd:35:9d:b1:e4:f9:99:ef:8a:da: cd:af:e1:5a:95:eb:eb:6a:5d:3a:04:3b:5e:13:7e:d3:9a:77: bd:40:3e:55:6e:0d:6c:44:2e:6d:9a:3a:fc:17:a8:3d:76:67: b8:43:05:0d:b8:b0:35:ed:d2:24:89:06:38:86:a8:d1:8c:a3: 95:a4:8c:f5:33:f7:9f:fe:31:f1:9c:75:ea:48:cf:13:67:95: 0e:e7:81:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+VtigkyiDiCKaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MGQ3YTdmODYtOTE2Yy00YjZhLWIwOTMtMGY3YjQ1YmIwODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqYPiazaZg/Vs0YsHR9V72ErHUvjAcdcXt+b KSMbnHJ2b93K+UL8R9Qfm65f0nkCI0o8xUBUDZhPuaXKbrjYXbi92ekx6xsSv88z v67DsGIniDGSzt3YHT8g4s2ZYleNChxQPAxEBzbV+0N5fwLLec1IW184ztza224q aN2vTO7EHe39Iwuc+rT3FsSYVeL8deoJ+VBFeHK5U/DLAwEydeutQau9GvEmz2t4 vfzMtc/cxrM5iLKY+swP/FmNJUDcJ/2yM2K0fHi8TimLFEOND5+kffhzTboqPTf4 S55XrHAlYVTXdol4F7khDAT1e9E8+bfKd0cZcg5jiXcgpSlb3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNk0aqUHZd3O/0rWuQsucJsgsakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTM1MmRmODMtYTEyYy0z OGQ3LTk0NWEtN2MxYjNkOTE0YWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8soFbkmDJjQBG2Fv0FnaxMy7eXp6cn/xCqzWtLNwBCjQ98ynePY7a4 FOHK/orLuBr8Vaksv5Bq/fd55u7vhJnrD3n++nKc0769KyLzjmGBHD1lvQCOkO19 4pFkkeLGXzVXS10B06oI6VtE135RLUM0DYi8P+RsdFt0Q47PYCEufTkLIH0owrh4 e4KhWY9R4EYYWiLpAv8dlTfgrN5sq+efvM7khMBRU6JW3TWdseT5me+K2s2v4VqV 6+tqXToEO14TftOad71APlVuDWxELm2aOvwXqD12Z7hDBQ24sDXt0iSJBjiGqNGM o5WkjPUz95/+MfGcdepIzxNnlQ7ngSY= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:03 2025 by rpki-client