$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa File: 28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa (raw, json) Hash identifier: kykVYaRA8rIvQ9HlUQI9xQcWuXdj9fcjLO2Du6OpzaA= Subject key identifier: C6:0E:6A:87:CC:6A:0C:EC:84:BE:EA:2E:F3:EB:BF:59:BF:BD:B9:AE Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584929E3CBA3AEA58B1294154BC0 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa Signing time: Wed 12 Mar 2025 13:00:53 +0000 ROA not before: Wed 12 Mar 2025 13:00:53 +0000 ROA not after: Tue 10 Jun 2025 13:00:53 +0000 asID: 4213 IP address blocks: 98.126.166.0/24 maxlen: 24 98.126.213.0/24 maxlen: 24 98.126.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:e3:cb:a3:ae:a5:8b:12:94:15:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: Mar 12 13:00:53 2025 GMT Not After : Jun 10 13:00:53 2025 GMT Subject: CN=f10eca67-3c4d-438d-97b7-d9c816be1367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:63:62:6c:d7:32:3f:89:11:da:aa:81:eb:6d: 81:00:46:c0:1a:57:a9:c6:33:a8:6d:0b:98:8b:dd: 13:61:ca:fe:a2:a0:e4:c4:94:e5:cd:fd:f8:90:05: f0:42:5c:a9:55:6f:29:6a:e5:f7:a9:24:ea:0b:bb: 14:b2:ea:3e:47:5c:d3:9d:26:dc:cb:e3:16:e8:aa: 0d:50:0d:fa:71:47:2a:e9:de:a4:d6:ed:32:9b:92: 8e:e9:66:a8:de:66:80:a5:62:a3:99:ac:97:e8:e4: 6e:98:7a:3e:54:d3:4c:d2:37:a9:20:c4:68:fa:e6: 66:c2:9e:08:f6:38:5e:83:ea:86:7e:8d:1d:c5:99: c8:df:d1:38:d6:57:ad:17:8d:04:eb:3c:76:ac:8d: 08:f0:59:b3:ef:22:75:5f:e7:0c:f5:56:75:e6:7c: d5:20:13:cf:b9:0f:bd:ae:07:f8:5e:d6:8b:7a:f6: 56:7c:e6:06:78:b9:21:7a:34:81:d4:8f:9f:c6:31: d6:01:53:f6:d6:27:8e:8c:67:29:9c:5a:0b:66:c2: fe:ba:af:2e:af:7c:2c:68:5a:96:80:a3:82:d3:61: d3:f5:c3:85:66:fe:d8:bd:66:49:d5:44:9c:b2:ab: 44:9f:e6:b5:24:10:10:e2:d6:55:21:b2:ce:9f:58: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0E:6A:87:CC:6A:0C:EC:84:BE:EA:2E:F3:EB:BF:59:BF:BD:B9:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.166.0/24 98.126.213.0-98.126.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fd:ce:48:20:60:72:3e:25:b5:7b:91:f5:f4:01:e8:ca:5a: 56:d1:7f:c7:91:9a:63:80:c7:b8:53:c9:32:63:6d:e2:ea:98: 16:2f:9c:8c:21:55:9a:4c:9e:a0:72:06:64:d9:10:ee:8b:26: 55:7d:c2:86:58:26:8b:06:7e:67:01:bf:db:74:b4:58:1b:32: 32:ec:3a:9f:65:b6:bc:46:1b:b8:1d:07:81:89:b2:d3:e3:e6: e3:ca:d8:0c:14:7f:c2:b2:be:26:65:97:9b:01:29:04:ef:57: d9:f6:6b:f2:63:fb:4c:ff:2b:ce:55:89:bb:40:40:3c:bc:77: 5b:d1:db:ef:8a:f5:73:74:52:fb:6d:5d:92:0b:23:60:ea:f3: 2f:ad:d1:11:f0:f7:17:87:4b:27:d5:e0:fc:6b:83:99:36:a5: 91:35:92:23:9d:d3:9e:21:41:ec:4a:48:e3:f1:82:b5:7f:f8: 00:39:0b:b1:b4:35:c9:3c:bb:9b:6c:db:4a:29:b5:a4:fb:36: f3:b9:18:11:fc:6d:a2:97:bf:6b:70:d1:a5:0f:5d:c8:53:58: 1e:a9:50:c2:a8:da:d2:ea:f9:63:d0:aa:36:79:f0:84:85:ff: 76:1d:35:21:bd:6d:5e:90:34:3b:95:7d:9f:80:0e:6c:e5:04: 78:cd:5f:16 -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEkp48ujrqWLEpQVS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDMxMjEzMDA1M1oXDTI1MDYxMDEzMDA1M1owLzEtMCsGA1UEAxMk ZjEwZWNhNjctM2M0ZC00MzhkLTk3YjctZDljODE2YmUxMzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WNibNcyP4kR2qqB622BAEbAGlepxjOobQuY i90TYcr+oqDkxJTlzf34kAXwQlypVW8pauX3qSTqC7sUsuo+R1zTnSbcy+MW6KoN UA36cUcq6d6k1u0ym5KO6Wao3maApWKjmayX6ORumHo+VNNM0jepIMRo+uZmwp4I 9jheg+qGfo0dxZnI39E41letF40E6zx2rI0I8Fmz7yJ1X+cM9VZ15nzVIBPPuQ+9 rgf4XtaLevZWfOYGeLkhejSB1I+fxjHWAVP21ieOjGcpnFoLZsL+uq8ur3wsaFqW gKOC02HT9cOFZv7YvWZJ1UScsqtEn+a1JBAQ4tZVIbLOn1jSjwIDAQABo4IDYzCC A18wHQYDVR0OBBYEFMYOaofMagzshL7qLvPrv1m/vbmuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjhlMWFhNWMtNmZjYi0z MzQyLThhZjEtODk4YzhiNjUzZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAYn6mMAwD BABiftUDBANiftAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEAL/3OSCBgcj4ltXuR9fQB6MpaVtF/x5GaY4DH uFPJMmNt4uqYFi+cjCFVmkyeoHIGZNkQ7osmVX3ChlgmiwZ+ZwG/23S0WBsyMuw6 n2W2vEYbuB0HgYmy0+Pm48rYDBR/wrK+JmWXmwEpBO9X2fZr8mP7TP8rzlWJu0BA PLx3W9Hb74r1c3RS+21dkgsjYOrzL63REfD3F4dLJ9Xg/GuDmTalkTWSI53TniFB 7EpI4/GCtX/4ADkLsbQ1yTy7m2zbSim1pPs287kYEfxtope/a3DRpQ9dyFNYHqlQ wqja0ur5Y9CqNnnwhIX/dh01Ib1tXpA0O5V9n4AObOUEeM1fFg== -----END CERTIFICATE-----Generated at Fri Apr 4 18:59:31 2025 by rpki-client