$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91e321d-1be6-33c7-8d37-57189629f46b.roa File: f91e321d-1be6-33c7-8d37-57189629f46b.roa (raw, json) Hash identifier: RHmKtqsYuXqaYFM9UETsmxFH2S3YCj28vCskL5FN8Is= Subject key identifier: D4:B9:C0:DC:E9:C2:86:50:AB:13:69:F4:C2:D3:F5:7F:87:F4:BA:CF Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F84B7DD2086D48D94B4400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91e321d-1be6-33c7-8d37-57189629f46b.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33490 IP address blocks: 98.246.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:4b:7d:d2:08:6d:48:d9:4b:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=b32e43f7-82ac-4ca0-8c78-97135f308a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bc:d3:26:03:fb:f8:2c:8d:49:56:45:73:33: ce:a2:43:f1:64:d2:b5:ff:cb:96:40:cf:50:23:2f: 4a:fb:64:bd:47:33:c2:ce:12:0a:17:07:78:6c:1d: eb:7c:60:19:d0:1d:53:5e:d2:e5:ed:70:e3:c1:f0: 9d:f6:2c:8f:06:5f:cc:3c:31:84:a4:ab:04:f6:db: 93:21:3a:d7:a9:16:5d:4b:f6:52:37:18:e6:b2:fb: 46:0c:25:c9:12:c5:a1:2a:49:cf:1b:44:44:48:ea: ab:bb:a4:00:49:ab:ec:24:1b:99:9d:7d:df:a4:16: 86:22:19:ed:f3:cc:f6:12:01:c5:4f:15:16:2e:bf: 2c:7e:4a:91:eb:de:2c:73:f0:30:bb:0f:38:70:84: 4b:99:13:cd:38:b3:f8:fd:3d:fb:f0:e3:c4:c1:cd: 9d:4d:c3:e2:93:c8:8c:9f:56:87:9b:33:60:90:ff: 44:28:83:f4:5a:43:71:0a:fb:bb:4c:7a:de:10:ae: cd:b2:2f:6d:65:46:cd:c3:af:33:0a:65:db:ba:fb: 10:b5:60:98:d3:92:1d:a8:13:08:0a:e7:ee:70:c7: ab:2e:8d:15:41:70:24:41:a5:b5:9f:ce:fc:39:32: a7:23:8f:ca:3b:a4:a9:da:26:95:44:88:b5:b9:f1: e4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B9:C0:DC:E9:C2:86:50:AB:13:69:F4:C2:D3:F5:7F:87:F4:BA:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f91e321d-1be6-33c7-8d37-57189629f46b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.246.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:13:0d:e2:05:78:0c:21:0e:58:18:12:32:a4:8d:9e:a8:88: f7:c3:65:25:d1:3c:77:e7:f8:1c:e5:47:4b:21:9d:49:b0:b6: 7e:a1:33:a8:b6:d9:84:01:56:db:15:de:8d:52:0e:3e:4a:f0: 56:9a:60:ab:15:b3:49:52:17:d7:65:53:ee:6a:61:f9:cc:65: d6:4b:d0:05:35:79:bc:dc:35:5e:d1:fa:69:58:31:fe:0a:77: 94:5a:4d:10:eb:e1:a9:8a:7b:9a:76:07:8a:9f:6f:00:33:76: 43:2f:e7:82:fb:22:ef:3e:0a:c6:bb:1d:a4:ce:42:1f:58:f2: f5:cd:bc:06:d9:1d:06:97:80:65:31:13:e8:47:c9:51:29:cd: cb:7f:3a:9f:6d:83:38:ee:2d:a3:ac:7b:44:d9:c4:18:73:92: 5e:be:d0:7a:f5:53:57:28:6c:a4:d1:9f:a9:b7:c9:95:0a:24: d2:7f:57:b5:bd:87:fb:13:ac:2c:63:ab:ec:d7:27:2f:6d:22: 96:3a:40:91:4e:39:6f:2e:49:97:e8:0c:13:73:27:9e:96:8c: 9a:13:37:bb:f1:20:44:02:aa:9a:24:a4:3a:a1:6d:d9:c7:37: 96:57:4c:5c:e4:0c:8b:27:c2:8b:1e:8b:59:d3:4e:82:86:1f: ca:3b:0f:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Et90ghtSNlLRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YjMyZTQzZjctODJhYy00Y2EwLThjNzgtOTcxMzVmMzA4YTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LzTJgP7+CyNSVZFczPOokPxZNK1/8uWQM9Q Iy9K+2S9RzPCzhIKFwd4bB3rfGAZ0B1TXtLl7XDjwfCd9iyPBl/MPDGEpKsE9tuT ITrXqRZdS/ZSNxjmsvtGDCXJEsWhKknPG0RESOqru6QASavsJBuZnX3fpBaGIhnt 88z2EgHFTxUWLr8sfkqR694sc/Awuw84cIRLmRPNOLP4/T378OPEwc2dTcPik8iM n1aHmzNgkP9EKIP0WkNxCvu7THreEK7Nsi9tZUbNw68zCmXbuvsQtWCY05IdqBMI CufucMerLo0VQXAkQaW1n878OTKnI4/KO6Sp2iaVRIi1ufHkowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS5wNzpwoZQqxNp9MLT9X+H9LrPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjkxZTMyMWQtMWJlNi0z M2M3LThkMzctNTcxODk2MjlmNDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYvawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8TDeIFeAwhDlgYEjKkjZ6oiPfDZSXRPHfn+BzlR0shnUmwtn6hM6i2 2YQBVtsV3o1SDj5K8FaaYKsVs0lSF9dlU+5qYfnMZdZL0AU1ebzcNV7R+mlYMf4K d5RaTRDr4amKe5p2B4qfbwAzdkMv54L7Iu8+Csa7HaTOQh9Y8vXNvAbZHQaXgGUx E+hHyVEpzct/Op9tgzjuLaOse0TZxBhzkl6+0Hr1U1cobKTRn6m3yZUKJNJ/V7W9 h/sTrCxjq+zXJy9tIpY6QJFOOW8uSZfoDBNzJ56WjJoTN7vxIEQCqpokpDqhbdnH N5ZXTFzkDIsnwosei1nTToKGH8o7Dzw= -----END CERTIFICATE-----Generated at Mon Apr 7 05:56:53 2025 by rpki-client