$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa File: 04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa (raw, json) Hash identifier: YefsgALJanhPM/hmFlBggEtTOmNuhkgxS/4PyR7YxWk= Subject key identifier: 29:1C:68:24:DA:14:2C:AB:1E:E1:78:C8:4C:B4:E5:0C:B1:A0:98:3A Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Certificate serial: 010D0C9F432858494303ECB84A246E7BC31624E0 Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa Signing time: Fri 21 Mar 2025 13:00:50 +0000 ROA not before: Fri 21 Mar 2025 13:00:50 +0000 ROA not after: Thu 19 Jun 2025 13:00:50 +0000 asID: 22781 IP address blocks: 98.158.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:43:03:ec:b8:4a:24:6e:7b:c3:16:24:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba Validity Not Before: Mar 21 13:00:50 2025 GMT Not After : Jun 19 13:00:50 2025 GMT Subject: CN=4a937e22-fb08-4d0d-97bb-be297d787928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:59:13:6f:24:9b:1a:87:5f:e6:ed:52:5e: 8a:29:94:e4:cb:64:27:3c:86:de:ef:06:e9:a8:38: 4a:74:cd:31:61:9b:f4:96:b1:ee:4f:a8:e7:00:ec: 7c:c7:38:57:12:57:21:54:a1:50:2a:61:bd:5f:76: fe:ae:bc:75:e0:ac:11:ea:96:09:dc:64:ec:ff:46: 4a:99:b9:4f:d8:0f:35:97:1e:a8:07:bd:59:1a:76: 7a:f3:40:77:ce:12:a6:97:73:56:55:9e:7f:f8:64: 0e:6b:a1:eb:20:86:d9:d0:60:25:24:60:78:02:79: 76:7f:a9:c8:cb:62:21:80:46:df:a6:62:ad:ea:56: d2:1f:00:f9:3b:e5:2a:d5:45:ea:90:32:cd:62:6c: aa:95:ef:49:44:0b:e9:80:10:88:29:3e:e4:9a:1d: dd:2f:c4:dc:fe:36:fb:37:bf:e5:e5:77:c8:3b:b3: e6:d4:de:51:66:ec:58:05:e3:b0:65:4e:c8:20:11: d5:4a:11:a8:cc:b4:cc:25:da:32:54:fa:c6:ef:f0: 3e:31:1e:61:24:d2:96:93:19:d7:c3:53:34:0a:df: cb:d4:7d:57:40:d4:34:8c:e7:a1:fb:c1:a5:4d:9e: 67:7c:2b:d5:6e:e8:d1:10:37:30:a3:a8:17:18:6d: 8d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1C:68:24:DA:14:2C:AB:1E:E1:78:C8:4C:B4:E5:0C:B1:A0:98:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/04c4ff3f-33aa-3550-8e99-e3c724d7c968.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl X509v3 Authority Key Identifier: keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer sbgp-ipAddrBlock: critical IPv4: 98.158.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:4e:52:ef:e4:9b:b6:61:f3:88:cd:20:a6:29:5c:2a:21:a8: 6f:b0:3d:fb:1e:74:14:c8:5c:3e:33:a9:cd:d4:f6:f3:f8:e7: 98:2f:63:1a:08:d6:b1:e6:9d:5b:e5:a9:35:8e:28:57:36:2a: f6:5e:d9:dc:c0:fa:c8:26:30:13:e0:b8:53:96:91:eb:69:5e: da:eb:7e:3a:3f:51:44:58:c4:a9:56:42:69:ab:2d:21:5d:cb: ee:91:0e:98:88:41:0c:50:f6:34:35:a3:db:3f:73:2f:17:23: 05:ba:e6:8d:c0:20:9c:c2:a7:c5:4f:36:6d:65:81:77:67:ec: 8e:a9:4e:71:cf:ef:f9:4b:95:ad:69:5e:94:97:9b:83:ab:ed: 36:92:53:c0:67:88:37:1d:27:f9:1c:86:40:38:e2:ec:da:da: a6:8d:c7:7e:c7:ae:33:7f:f2:fd:f2:fc:e4:cf:62:23:cc:f9: 0e:8b:ef:6e:17:b1:15:45:c9:1e:75:26:cf:00:4f:21:9a:1f: 96:e5:c0:a2:f2:c6:56:40:ed:d4:70:68:78:82:22:2e:14:eb: 92:15:e4:9e:d1:64:aa:2c:de:d4:16:1f:6a:a6:a5:db:b0:38: 30:61:75:99:db:54:36:84:13:af:90:8c:78:99:51:d5:ad:b0: b0:8a:a8:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDA+y4SiRue8MWJOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz NmJhMB4XDTI1MDMyMTEzMDA1MFoXDTI1MDYxOTEzMDA1MFowLzEtMCsGA1UEAxMk NGE5MzdlMjItZmIwOC00ZDBkLTk3YmItYmUyOTdkNzg3OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYZZE28kmxqHX+btUl6KKZTky2QnPIbe7wbp qDhKdM0xYZv0lrHuT6jnAOx8xzhXElchVKFQKmG9X3b+rrx14KwR6pYJ3GTs/0ZK mblP2A81lx6oB71ZGnZ680B3zhKml3NWVZ5/+GQOa6HrIIbZ0GAlJGB4Anl2f6nI y2IhgEbfpmKt6lbSHwD5O+Uq1UXqkDLNYmyqle9JRAvpgBCIKT7kmh3dL8Tc/jb7 N7/l5XfIO7Pm1N5RZuxYBeOwZU7IIBHVShGozLTMJdoyVPrG7/A+MR5hJNKWkxnX w1M0Ct/L1H1XQNQ0jOeh+8GlTZ5nfCvVbujREDcwo6gXGG2NdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkcaCTaFCyrHuF4yEy05QyxoJg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMDRjNGZmM2YtMzNhYS0z NTUwLThlOTktZTNjNzI0ZDdjOTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3 OGU4ZTM2YmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYp5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhOUu/km7Zh84jNIKYpXCohqG+wPfsedBTIXD4zqc3U9vP455gvYxoI 1rHmnVvlqTWOKFc2KvZe2dzA+sgmMBPguFOWketpXtrrfjo/UURYxKlWQmmrLSFd y+6RDpiIQQxQ9jQ1o9s/cy8XIwW65o3AIJzCp8VPNm1lgXdn7I6pTnHP7/lLla1p XpSXm4Or7TaSU8BniDcdJ/kchkA44uza2qaNx37HrjN/8v3y/OTPYiPM+Q6L724X sRVFyR51Js8ATyGaH5blwKLyxlZA7dRwaHiCIi4U65IV5J7RZKos3tQWH2qmpduw ODBhdZnbVDaEE6+QjHiZUdWtsLCKqFg= -----END CERTIFICATE-----Generated at Fri Apr 11 23:22:49 2025 by rpki-client