$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9676486-a909-3dca-8c30-79a2c15b42a5.roa File: f9676486-a909-3dca-8c30-79a2c15b42a5.roa (raw, json) Hash identifier: 9od8B/jsE4cHWkxQJfKXQTNuRUSsDT2nxD4ipzqKPNw= Subject key identifier: 0D:17:6A:20:D5:69:DB:B3:67:DF:20:A9:BE:BA:A7:78:80:BF:CF:90 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C06B55E41F0654065803100 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9676486-a909-3dca-8c30-79a2c15b42a5.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33491 IP address blocks: 98.223.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:06:b5:5e:41:f0:65:40:65:80:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=1dc261f8-0ad1-4ddd-b0e2-133740eb9f96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:69:4e:25:61:56:24:1e:81:08:35:07:d7: e8:99:68:c5:cd:d6:58:fa:de:84:70:1b:60:4a:01: fb:84:46:d3:5b:98:b2:f5:a4:2a:e7:4f:ce:63:b4: d3:07:44:77:f0:50:d8:e6:0d:16:22:e0:b7:f3:05: 22:7d:c1:d9:ae:6b:c3:0f:f0:ab:a7:9b:9d:7e:4e: 32:be:29:ea:fd:c2:27:8e:ad:d0:93:fb:e1:6e:71: 1c:6e:cb:78:72:77:41:ef:c3:aa:66:4e:26:38:2e: f5:ea:fe:f8:fc:d5:d3:f2:59:a6:12:1a:69:e6:3d: 39:4a:f7:51:97:ba:db:f9:a4:7c:dc:61:d9:52:bf: 28:48:b5:1d:82:ed:d5:fe:79:8e:e4:01:54:12:dd: e0:fc:70:88:4c:9d:ac:c8:25:f4:f4:c6:a9:fb:94: 94:0a:d6:bf:12:43:1c:0c:14:80:2a:49:3e:32:13: bc:72:20:60:bb:db:e5:44:7d:1d:e3:0a:b3:d4:bd: a8:b9:a7:40:ed:be:c9:2b:d2:b6:22:c2:04:55:b7: 4e:32:04:99:7d:e2:d7:e4:d7:9c:42:1f:10:53:7a: 9f:03:5d:37:1a:f0:87:a6:9c:69:26:e2:9f:6f:fd: d4:22:50:c4:f7:a0:cb:cf:af:87:c7:2f:e4:db:44: d5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:17:6A:20:D5:69:DB:B3:67:DF:20:A9:BE:BA:A7:78:80:BF:CF:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9676486-a909-3dca-8c30-79a2c15b42a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:5b:6f:12:4d:af:25:af:07:22:20:2b:87:0f:7e:ae:90:fe: b0:42:8c:32:04:bf:48:1b:b1:e6:86:11:94:f5:ed:fb:11:23: b9:16:1d:cb:86:61:62:96:ad:ab:cf:21:9a:07:c3:ba:89:d8: 8f:4b:d1:08:ab:f5:76:fb:ca:98:81:f6:4c:18:49:0d:2d:45: 07:0f:d4:d5:aa:b5:d5:ed:82:a4:40:5b:f9:ae:ed:3a:e7:52: c0:2b:32:03:0e:5d:f5:49:79:25:f0:eb:cb:25:4e:00:0c:41: 85:99:ca:1f:b9:4d:90:5a:89:4a:8a:c2:fd:74:28:ee:dc:54: 7a:13:13:76:82:59:ed:bd:d1:7e:30:a3:6e:37:f3:8c:93:40: 4b:2e:6e:f1:57:e1:54:a6:43:0b:f6:cb:e0:a8:0a:8e:65:89: 23:6a:56:80:b1:74:39:fa:5a:10:59:55:e5:50:c4:e4:12:c2: ab:7b:1f:67:5a:47:d8:3c:5f:23:24:4b:d4:11:25:c8:da:b9: 5e:8c:b3:f8:9e:be:e4:32:d4:a6:41:5b:b3:eb:88:dd:15:a7: 7e:9f:d6:fe:2d:43:a7:bc:8e:a9:8f:28:c5:b2:b7:c3:7a:40: 9a:2b:13:a5:07:a3:ac:49:71:c2:74:7a:73:ef:9b:a2:d5:ea: 88:c0:e9:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBrVeQfBlQGWAMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk MWRjMjYxZjgtMGFkMS00ZGRkLWIwZTItMTMzNzQwZWI5Zjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTppTiVhViQegQg1B9fomWjFzdZY+t6EcBtg SgH7hEbTW5iy9aQq50/OY7TTB0R38FDY5g0WIuC38wUifcHZrmvDD/Crp5udfk4y vinq/cInjq3Qk/vhbnEcbst4cndB78OqZk4mOC716v74/NXT8lmmEhpp5j05SvdR l7rb+aR83GHZUr8oSLUdgu3V/nmO5AFUEt3g/HCITJ2syCX09Map+5SUCta/EkMc DBSAKkk+MhO8ciBgu9vlRH0d4wqz1L2ouadA7b7JK9K2IsIEVbdOMgSZfeLX5Nec Qh8QU3qfA103GvCHppxpJuKfb/3UIlDE96DLz6+Hxy/k20TVSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA0XaiDVaduzZ98gqb66p3iAv8+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjk2NzY0ODYtYTkwOS0z ZGNhLThjMzAtNzlhMmMxNWI0MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt8IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9bbxJNryWvByIgK4cPfq6Q/rBCjDIEv0gbseaGEZT17fsRI7kWHcuG YWKWravPIZoHw7qJ2I9L0Qir9Xb7ypiB9kwYSQ0tRQcP1NWqtdXtgqRAW/mu7Trn UsArMgMOXfVJeSXw68slTgAMQYWZyh+5TZBaiUqKwv10KO7cVHoTE3aCWe290X4w o24384yTQEsubvFX4VSmQwv2y+CoCo5liSNqVoCxdDn6WhBZVeVQxOQSwqt7H2da R9g8XyMkS9QRJcjauV6Ms/ievuQy1KZBW7PriN0Vp36f1v4tQ6e8jqmPKMWyt8N6 QJorE6UHo6xJccJ0enPvm6LV6ojA6UA= -----END CERTIFICATE-----Generated at Tue Jun 3 06:44:16 2025 by rpki-client