$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa File: f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa (raw, json) Hash identifier: TEYCZCzMI3PlgJmkqmZzWQffLeb8tEuzzEsslJ3Pk2E= Subject key identifier: 5C:4F:05:F6:74:B4:15:A1:0C:C6:CC:1B:1A:76:C2:79:5E:68:9B:D0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4322EB5AE3C7B660C9CBC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 98.224.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:2e:b5:ae:3c:7b:66:0c:9c:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5d24f5cd-e2a9-4d50-96fc-cb4d25f52c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ec:09:c4:62:ea:19:2e:22:92:6b:2a:6d:52: 34:0a:df:b0:37:65:5f:69:b6:f1:dd:98:3d:84:6a: a8:94:e3:08:08:b3:4d:db:2f:d2:7c:7d:b1:24:1c: 9f:87:39:15:44:7a:54:90:81:6b:e3:fd:b1:dd:1f: 37:a9:41:f0:35:91:c2:61:09:b6:95:07:6c:fa:0a: 68:cc:81:1e:af:ea:c7:1f:e7:6c:f1:3e:fe:9d:b2: 15:ba:fc:74:5b:3b:dc:91:7f:7e:6a:e2:7f:f4:a8: 22:7d:df:e1:30:30:53:c6:9d:88:d4:55:6d:f1:50: 0a:5e:f7:a1:eb:62:49:57:2c:b8:b1:b6:5d:83:da: 07:df:75:98:58:70:0d:17:2b:88:9a:6c:5c:92:76: 0b:cb:cc:6f:51:ee:66:4c:65:89:fe:b3:5d:29:b7: 06:2f:f0:86:e6:f2:d8:e8:44:c6:59:d5:a8:9d:dc: 7a:29:b0:03:10:82:0c:ef:34:af:18:7c:40:fc:c1: 6f:ca:ce:c0:b7:84:b6:9e:14:d7:86:00:2a:ef:b1: 34:35:27:24:fc:27:9b:c8:4b:05:3c:15:f1:c9:c7: 1c:47:b8:f0:db:e9:ff:f1:6b:f5:da:da:72:b8:55: 3a:05:ff:f0:69:f1:91:ce:2a:33:55:b2:66:21:42: f9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:4F:05:F6:74:B4:15:A1:0C:C6:CC:1B:1A:76:C2:79:5E:68:9B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2ff6555-94b0-3a90-a4c2-fbf130a37513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.224.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a2:79:91:50:59:39:95:6d:9f:28:99:48:b9:2e:0c:81:93: c7:9d:23:b1:48:48:64:90:39:5a:a7:40:0c:0f:61:62:62:3e: f5:5f:f6:e9:75:c0:68:1f:0c:e3:6d:d4:17:2b:b4:82:9e:31: 25:8e:0f:de:b5:ce:50:f5:eb:43:45:30:b1:3a:11:1e:24:35: 43:d3:7b:e1:eb:3b:9e:b5:98:32:cb:ac:c5:36:0b:81:22:0e: bd:b6:21:04:d7:ce:bd:5d:51:b0:95:19:a3:e0:57:9f:e4:2b: 49:94:ef:aa:b1:4b:68:b8:fb:a5:e4:32:f3:02:97:78:fe:2b: 5a:c9:c9:19:e3:eb:b0:e3:32:ba:25:72:f1:25:e4:39:b7:2a: 5f:94:1b:07:34:c5:c3:01:49:af:67:b2:e6:3e:4d:b7:54:f0: 21:44:ce:5d:5a:92:29:dd:1a:ec:50:c4:dc:ae:25:10:08:49: eb:93:3c:2b:a8:fd:45:66:c1:97:34:58:78:e0:f4:69:c6:b1: e8:26:5d:05:2a:48:71:99:3b:ea:b5:ee:72:54:e1:cc:c9:ba: 92:3f:f0:ac:2f:59:55:22:d1:f9:5d:55:3f:76:e0:bf:e9:8a: f6:b4:ed:ee:2f:6e:d5:f4:e5:37:39:d7:24:d3:bd:70:7f:2f: d7:c2:00:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMi61rjx7ZgycvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NWQyNGY1Y2QtZTJhOS00ZDUwLTk2ZmMtY2I0ZDI1ZjUyYzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOwJxGLqGS4ikmsqbVI0Ct+wN2Vfabbx3Zg9 hGqolOMICLNN2y/SfH2xJByfhzkVRHpUkIFr4/2x3R83qUHwNZHCYQm2lQds+gpo zIEer+rHH+ds8T7+nbIVuvx0WzvckX9+auJ/9Kgifd/hMDBTxp2I1FVt8VAKXveh 62JJVyy4sbZdg9oH33WYWHANFyuImmxcknYLy8xvUe5mTGWJ/rNdKbcGL/CG5vLY 6ETGWdWondx6KbADEIIM7zSvGHxA/MFvys7At4S2nhTXhgAq77E0NSck/CebyEsF PBXxycccR7jw2+n/8Wv12tpyuFU6Bf/wafGRziozVbJmIUL5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFxPBfZ0tBWhDMbMGxp2wnleaJvQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjJmZjY1NTUtOTRiMC0z YTkwLWE0YzItZmJmMTMwYTM3NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeieZFQWTmVbZ8omUi5LgyBk8edI7FISGSQOVqnQAwPYWJiPvVf9ul1 wGgfDONt1BcrtIKeMSWOD961zlD160NFMLE6ER4kNUPTe+HrO561mDLLrMU2C4Ei Dr22IQTXzr1dUbCVGaPgV5/kK0mU76qxS2i4+6XkMvMCl3j+K1rJyRnj67DjMrol cvEl5Dm3Kl+UGwc0xcMBSa9nsuY+TbdU8CFEzl1akindGuxQxNyuJRAISeuTPCuo /UVmwZc0WHjg9GnGsegmXQUqSHGZO+q17nJU4czJupI/8KwvWVUi0fldVT924L/p iva07e4vbtX05Tc51yTTvXB/L9fCAOc= -----END CERTIFICATE-----Generated at Tue Jun 3 05:51:34 2025 by rpki-client