$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efd9b429-02d8-382f-a846-f4aab93b2f45.roa File: efd9b429-02d8-382f-a846-f4aab93b2f45.roa (raw, json) Hash identifier: 9qDzOLXXepmitvBkyBpXN62UEHcNhVtL7OljyIh6SHk= Subject key identifier: 57:75:AA:E8:52:85:5D:F1:88:D8:0C:54:99:46:22:15:D1:E7:79:32 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858489E6D87739CDF2E69CCCB2500 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efd9b429-02d8-382f-a846-f4aab93b2f45.roa Signing time: Tue 21 Jan 2025 14:00:53 +0000 ROA not before: Tue 21 Jan 2025 14:00:53 +0000 ROA not after: Mon 21 Apr 2025 13:00:53 +0000 asID: 33662 IP address blocks: 98.40.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9e:6d:87:73:9c:df:2e:69:cc:cb:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jan 21 14:00:53 2025 GMT Not After : Apr 21 13:00:53 2025 GMT Subject: CN=7a044fee-b002-4255-b8bd-b996a23ce774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:95:d0:77:e4:ed:42:42:55:3f:85:b9:e7:ae: 01:7e:74:17:4a:25:67:fd:55:4a:79:30:b2:86:1a: ba:e9:76:76:a0:c2:86:79:ef:3c:ab:88:0c:71:79: c0:35:13:d0:d8:49:28:e8:22:55:b1:ff:f0:e3:dd: 14:89:7f:75:5b:68:ca:eb:43:d0:98:4c:b3:2b:95: dd:02:1b:1b:36:91:77:09:b6:ac:14:2b:8a:ba:37: e4:01:61:ae:83:3e:b4:38:9b:1f:df:61:3e:ac:6d: 2e:cb:8f:ae:97:83:5d:00:91:97:ad:0b:d2:14:83: f9:cd:86:26:62:cc:8b:2e:7e:e0:20:b7:97:2a:43: 09:b4:7d:7c:1a:53:78:ab:02:f8:d7:07:b3:5e:e3: f4:09:4f:f1:0e:92:f2:ea:54:8f:6d:cf:f3:e3:3d: e4:f7:b1:3d:ae:21:28:78:0b:bc:86:43:ac:7a:d4: 2f:89:d5:e5:71:ae:f9:47:f9:b8:d1:15:8a:e2:a2: 71:cf:38:1f:86:3c:54:db:7b:30:12:0a:94:73:2d: d5:5b:9c:b1:fd:a6:c9:6e:a7:fb:97:15:09:0a:1a: 40:c1:88:f5:9e:48:17:60:a6:dd:94:ff:ae:b2:4f: 5a:56:89:f6:6d:d7:b1:cc:11:35:f3:a6:6d:31:48: 16:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:75:AA:E8:52:85:5D:F1:88:D8:0C:54:99:46:22:15:D1:E7:79:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/efd9b429-02d8-382f-a846-f4aab93b2f45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:56:d5:3b:3f:e7:18:72:c0:e3:e8:b6:e1:61:df:3e:b4:7e: 65:ce:b7:2f:e7:fb:19:46:d5:7d:5b:23:ba:91:35:9b:c8:2a: b3:be:94:d0:30:12:b5:7a:03:81:44:39:e4:ca:69:eb:b1:68: 5c:15:3a:40:13:64:b2:76:ef:16:47:b2:ba:3b:06:3e:10:ea: f0:02:cb:4e:c8:35:ec:c2:f8:9e:da:fb:62:1c:aa:3d:2a:b1: 37:71:8e:15:81:2a:bb:d6:d6:9d:e0:18:9e:85:50:cc:a9:4c: e4:7e:8c:2d:f1:fe:6a:86:9f:d8:24:27:e6:11:94:26:53:24: cc:7c:3b:a7:55:aa:4e:62:a9:dd:82:ab:e8:7b:71:11:5f:c6: 2f:61:b0:91:04:6c:cc:bc:88:a8:b9:d4:d5:23:8c:b1:bf:64: 79:c0:e6:8d:db:8b:3c:76:84:92:22:a9:6f:ba:07:4a:92:2d: 40:74:cc:3d:d6:fc:f0:8c:00:49:38:d8:eb:4e:d9:77:cc:2a: f0:06:58:f8:ba:9d:9e:2f:68:63:97:46:0b:b6:07:95:fc:c4: 4a:21:e6:6d:e3:f7:c0:3e:77:fa:23:cd:60:4b:77:dc:42:82: 6c:41:cb:0a:76:33:ef:ac:e4:58:ff:71:ce:84:49:6c:0d:18: f0:d2:76:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebYdznN8uaczLJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk N2EwNDRmZWUtYjAwMi00MjU1LWI4YmQtYjk5NmEyM2NlNzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipXQd+TtQkJVP4W5564BfnQXSiVn/VVKeTCy hhq66XZ2oMKGee88q4gMcXnANRPQ2Eko6CJVsf/w490UiX91W2jK60PQmEyzK5Xd AhsbNpF3CbasFCuKujfkAWGugz60OJsf32E+rG0uy4+ul4NdAJGXrQvSFIP5zYYm YsyLLn7gILeXKkMJtH18GlN4qwL41wezXuP0CU/xDpLy6lSPbc/z4z3k97E9riEo eAu8hkOsetQvidXlca75R/m40RWK4qJxzzgfhjxU23swEgqUcy3VW5yx/abJbqf7 lxUJChpAwYj1nkgXYKbdlP+usk9aVon2bdexzBE186ZtMUgWcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd1quhShV3xiNgMVJlGIhXR53kyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWZkOWI0MjktMDJkOC0z ODJmLWE4NDYtZjRhYWI5M2IyZjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYiiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANBW1Ts/5xhywOPotuFh3z60fmXOty/n+xlG1X1bI7qRNZvIKrO+lNAw ErV6A4FEOeTKaeuxaFwVOkATZLJ27xZHsro7Bj4Q6vACy07INezC+J7a+2Icqj0q sTdxjhWBKrvW1p3gGJ6FUMypTOR+jC3x/mqGn9gkJ+YRlCZTJMx8O6dVqk5iqd2C q+h7cRFfxi9hsJEEbMy8iKi51NUjjLG/ZHnA5o3bizx2hJIiqW+6B0qSLUB0zD3W /PCMAEk42OtO2XfMKvAGWPi6nZ4vaGOXRgu2B5X8xEoh5m3j98A+d/ojzWBLd9xC gmxBywp2M++s5Fj/cc6ESWwNGPDSdqM= -----END CERTIFICATE-----Generated at Mon Apr 7 06:01:55 2025 by rpki-client