$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa File: f456a693-f74d-3894-8c75-2409850473b9.roa (raw, json) Hash identifier: i0Sti3/3iVwFDjjK7ONtZ5cFwuy41VHDADqlALFKyHs= Subject key identifier: 50:BC:0F:9B:18:74:5F:C7:31:2E:5C:FC:CE:0C:D1:E2:BF:A8:91:F6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F956A4C00CAE33DAF3DC80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.195.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:56:a4:c0:0c:ae:33:da:f3:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ae47e512-d201-47f6-989c-5ecd57f8b9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5e:8e:5d:fe:c9:ee:eb:b6:42:9d:57:be:7a: d1:81:0a:2d:a7:45:cb:b0:f5:7c:3f:ca:a9:92:10: f5:f4:47:48:cf:8d:71:b0:61:9a:7b:7b:1e:f3:06: 45:41:e3:b6:78:c0:f4:8f:e5:60:0a:2b:28:50:7f: 3f:1b:64:24:a6:75:3a:17:e6:08:31:10:24:8c:30: 6e:6f:4c:3c:05:3d:ec:56:62:29:c1:ca:7b:3b:13: 8c:67:df:1b:29:b7:10:0e:ce:e5:ca:79:2f:1c:32: 71:d5:d2:f3:3e:b6:b5:e6:9e:fc:22:ba:47:c7:52: 8e:7f:85:ec:44:1a:d1:df:26:f1:26:c2:de:5f:58: 5d:4f:5d:e0:1c:31:7a:17:10:a7:65:28:a8:82:b4: 46:8c:56:6a:51:85:c7:5f:23:95:29:f4:57:52:4f: 0d:57:6d:d3:3b:e3:cb:d4:16:e3:84:ef:c4:22:d1: b6:d3:e0:58:b0:18:d9:e1:d2:a2:99:d9:26:3c:b5: d3:91:ad:85:60:9f:6f:32:e3:5f:b1:2c:f2:ba:e7: 7a:da:5b:86:21:e2:9d:19:88:08:b0:01:8b:4c:61: f8:47:82:12:e8:d3:64:7e:6b:43:76:a2:6d:aa:12: de:22:03:76:59:73:bf:c3:e9:a9:72:2a:35:22:59: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BC:0F:9B:18:74:5F:C7:31:2E:5C:FC:CE:0C:D1:E2:BF:A8:91:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f456a693-f74d-3894-8c75-2409850473b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:12:02:e1:d0:56:f7:7f:c7:a3:e6:5a:ad:38:ba:40:5f:b4: d0:ed:31:dd:f2:93:53:af:c7:46:3a:9a:26:4b:be:f7:65:17: 10:86:4f:17:57:33:c9:6b:60:db:21:52:81:48:10:7f:e4:5f: 83:3e:0b:b8:91:31:c5:e1:72:dd:b4:88:d4:9f:46:33:61:5e: a8:ce:57:d7:b7:28:c5:94:9b:a7:c0:34:3e:6d:f5:af:73:0a: 2d:fe:c5:ba:ec:17:01:f2:1b:1f:3b:fa:a7:f5:bc:0f:90:d0: 86:bc:71:fa:71:31:e6:00:8f:18:28:64:38:29:29:e5:d1:c2: 61:41:a7:0a:fd:9c:a1:6b:3c:72:15:da:77:74:e9:ed:37:e3: ee:12:06:af:cc:d5:4e:00:1e:07:63:67:96:30:ec:5e:b3:74: 5c:32:df:c7:dc:f3:a7:62:81:bd:c7:9c:bd:ee:20:83:64:fa: 89:03:bb:e9:c7:6a:0f:41:81:2a:57:27:70:4e:55:8c:0d:54: 5a:ab:91:a6:d3:4f:66:c6:d2:c9:b8:64:f6:d5:8a:00:4e:ae: 83:e9:8f:3a:1c:6f:78:b0:19:59:7c:05:e7:4b:c0:04:7a:ce: f6:ac:44:4b:bc:b7:4d:cd:44:57:5b:2b:a7:57:bc:7d:50:ae: 55:7a:fb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+VakwAyuM9rz3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWU0N2U1MTItZDIwMS00N2Y2LTk4OWMtNWVjZDU3ZjhiOWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq16OXf7J7uu2Qp1XvnrRgQotp0XLsPV8P8qp khD19EdIz41xsGGae3se8wZFQeO2eMD0j+VgCisoUH8/G2QkpnU6F+YIMRAkjDBu b0w8BT3sVmIpwcp7OxOMZ98bKbcQDs7lynkvHDJx1dLzPra15p78IrpHx1KOf4Xs RBrR3ybxJsLeX1hdT13gHDF6FxCnZSiogrRGjFZqUYXHXyOVKfRXUk8NV23TO+PL 1BbjhO/EItG20+BYsBjZ4dKimdkmPLXTka2FYJ9vMuNfsSzyuud62luGIeKdGYgI sAGLTGH4R4IS6NNkfmtDdqJtqhLeIgN2WXO/w+mpcio1IllYwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC8D5sYdF/HMS5c/M4M0eK/qJH2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjQ1NmE2OTMtZjc0ZC0z ODk0LThjNzUtMjQwOTg1MDQ3M2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYsOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoSAuHQVvd/x6PmWq04ukBftNDtMd3yk1Ovx0Y6miZLvvdlFxCGTxdX M8lrYNshUoFIEH/kX4M+C7iRMcXhct20iNSfRjNhXqjOV9e3KMWUm6fAND5t9a9z Ci3+xbrsFwHyGx87+qf1vA+Q0Ia8cfpxMeYAjxgoZDgpKeXRwmFBpwr9nKFrPHIV 2nd06e034+4SBq/M1U4AHgdjZ5Yw7F6zdFwy38fc86digb3HnL3uIINk+okDu+nH ag9BgSpXJ3BOVYwNVFqrkabTT2bG0sm4ZPbVigBOroPpjzocb3iwGVl8BedLwAR6 zvasREu8t03NRFdbK6dXvH1QrlV6+/Y= -----END CERTIFICATE-----Generated at Sun Apr 13 13:05:39 2025 by rpki-client