$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa File: e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa (raw, json) Hash identifier: UBx88xdfRk1ms/zFX2i2OErJgthIV3rnQbQKusI7NR8= Subject key identifier: 60:6F:EE:56:30:71:0F:ED:10:0B:26:BD:31:BC:B2:74:AF:3E:0F:9D Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB02F08742C522FE4DC9FC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.47.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:2f:08:74:2c:52:2f:e4:dc:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=082c6bc9-4ab5-43ee-b9f8-d02ac591d0ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:27:24:c5:9b:a7:54:4e:b6:9c:74:6d:a1:81: ce:95:3a:75:2a:cc:65:70:c8:16:43:f9:59:b7:0f: 15:ce:41:23:a8:ab:55:75:59:5b:c0:10:5a:18:5a: 07:74:14:78:2b:00:ad:93:2f:2e:c3:fc:f8:8d:79: 39:a8:1a:c2:18:c0:cc:48:da:f8:9b:11:34:cc:f4: 9a:a5:48:6b:16:da:58:c4:2b:23:44:0f:31:4d:4e: 18:71:df:77:f4:44:2f:1a:01:f7:5f:3c:f6:fb:87: d8:99:6d:47:85:b9:9b:e1:92:ab:64:2a:a9:58:41: a9:f5:51:47:22:c1:3d:27:df:4d:c3:4c:22:eb:ba: df:e6:09:9b:6e:7a:a9:ba:52:f2:c9:83:41:11:4f: 1b:ce:ff:4a:c0:a5:01:06:87:70:64:bc:c1:df:5d: d5:65:4e:3a:90:ac:8b:1a:0c:03:7c:00:c1:98:3a: 2f:51:d5:e0:bf:a1:4d:c6:7b:62:4c:bc:9a:0d:03: 59:ac:c1:1f:79:50:4e:ff:42:20:77:70:6d:69:77: 26:95:9f:54:60:2a:23:8d:45:4b:1e:04:72:da:5f: ca:1a:2d:43:fa:0e:66:af:2a:a3:a8:fd:f3:b0:cf: 0c:ef:f9:8a:b7:c5:f8:26:9b:e2:92:54:03:86:8f: 18:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6F:EE:56:30:71:0F:ED:10:0B:26:BD:31:BC:B2:74:AF:3E:0F:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e96e2aeb-d04c-3c71-b226-9dd4a4c6a13c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.47.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:cc:ee:0a:a9:98:59:53:2d:75:d8:99:40:d1:6b:66:7a:2b: e5:5c:c3:d6:4c:1d:d3:b7:5d:41:92:da:e0:c7:3c:f1:4d:d9: b7:71:aa:1b:54:e4:4d:b9:7f:8f:4d:7e:6f:53:45:cd:7f:73: 42:d3:da:d0:46:4c:44:77:41:08:53:2b:b1:22:67:6f:c2:11: e9:13:93:4b:bd:e7:06:2e:ae:08:9f:9c:3a:7c:64:09:09:e7: 43:c6:a1:71:20:f3:10:6f:cd:60:1d:9e:9d:10:ba:c4:30:f4: ec:3d:81:88:3f:1d:3a:e2:0b:75:47:6c:6a:aa:b1:38:64:8c: ef:7e:5c:57:12:fd:23:89:cd:b4:98:a4:44:9d:fb:fe:ed:86: 59:ba:23:9f:b0:8e:ab:2f:3f:6b:c4:2c:27:f5:4b:e0:85:65: 00:3b:a9:0d:fb:c2:54:f1:be:80:9a:f8:b0:0d:b7:51:e8:c0: 23:7a:73:4d:d3:d9:6f:df:63:b6:7f:ad:f4:f2:cf:6e:4d:da: a3:ca:a3:15:c2:21:cc:0f:d4:ac:ba:1d:81:97:af:6c:ae:ba: 7f:65:ac:7c:de:3a:44:54:ed:7a:12:51:8c:98:6a:0a:59:1e: 5e:5a:3a:2f:ea:39:51:dc:0e:1f:de:40:53:f2:dc:78:d8:e3: 1d:f3:a2:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssC8IdCxSL+Tcn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDgyYzZiYzktNGFiNS00M2VlLWI5ZjgtZDAyYWM1OTFkMGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SckxZunVE62nHRtoYHOlTp1KsxlcMgWQ/lZ tw8VzkEjqKtVdVlbwBBaGFoHdBR4KwCtky8uw/z4jXk5qBrCGMDMSNr4mxE0zPSa pUhrFtpYxCsjRA8xTU4Ycd939EQvGgH3Xzz2+4fYmW1Hhbmb4ZKrZCqpWEGp9VFH IsE9J99Nw0wi67rf5gmbbnqpulLyyYNBEU8bzv9KwKUBBodwZLzB313VZU46kKyL GgwDfADBmDovUdXgv6FNxntiTLyaDQNZrMEfeVBO/0Igd3BtaXcmlZ9UYCojjUVL HgRy2l/KGi1D+g5mryqjqP3zsM8M7/mKt8X4JpviklQDho8Y1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBv7lYwcQ/tEAsmvTG8snSvPg+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTk2ZTJhZWItZDA0Yy0z YzcxLWIyMjYtOWRkNGE0YzZhMTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYi/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbM7gqpmFlTLXXYmUDRa2Z6K+Vcw9ZMHdO3XUGS2uDHPPFN2bdxqhtU 5E25f49Nfm9TRc1/c0LT2tBGTER3QQhTK7EiZ2/CEekTk0u95wYurgifnDp8ZAkJ 50PGoXEg8xBvzWAdnp0QusQw9Ow9gYg/HTriC3VHbGqqsThkjO9+XFcS/SOJzbSY pESd+/7thlm6I5+wjqsvP2vELCf1S+CFZQA7qQ37wlTxvoCa+LANt1HowCN6c03T 2W/fY7Z/rfTyz25N2qPKoxXCIcwP1Ky6HYGXr2yuun9lrHzeOkRU7XoSUYyYagpZ Hl5aOi/qOVHcDh/eQFPy3HjY4x3zon8= -----END CERTIFICATE-----Generated at Mon Apr 7 05:49:56 2025 by rpki-client