$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa File: 04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa (raw, json) Hash identifier: RYGl4A1M2MMvIqN4o5NAy1Df/DInF2Vtl8monB18l/I= Subject key identifier: 44:65:7B:92:3A:89:0C:E9:EC:D0:09:3E:31:7B:95:3B:48:CC:93:67 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F90C74CB9E2F4E09A3A580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 98.250.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:0c:74:cb:9e:2f:4e:09:a3:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=e43e03f9-8700-4017-b647-30bbbecc92a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d4:f1:1d:ca:49:fb:01:49:dc:25:6e:3a:6a: c4:1a:1f:fd:36:c2:44:a8:0d:16:82:45:aa:04:43: 7c:91:45:cb:55:f9:6b:9e:8d:74:0f:14:fd:1f:3b: 7d:26:42:bc:81:05:e2:18:46:ee:17:68:dc:6d:ec: f0:15:78:05:ae:36:09:07:1e:4c:f2:7e:67:81:18: 6a:f7:a1:44:27:e0:b9:8e:3b:cb:10:1f:cc:dd:96: 0b:2f:a9:78:96:cd:c8:a3:e7:c7:ea:2f:f6:c2:7d: 36:40:db:0b:f7:36:95:e8:fb:bc:85:8b:95:09:b7: aa:a1:9e:8d:14:d0:77:7b:16:62:c7:f8:46:0f:c9: 89:4c:e1:42:17:08:82:92:f9:18:2a:ac:c9:84:7f: 90:8e:b1:f3:49:49:1f:45:e8:c7:47:96:20:d9:25: 67:3d:5f:cd:13:29:55:4c:fc:87:b7:f5:cc:59:d5: 5a:dd:ec:da:eb:f8:8a:b5:1c:d1:04:df:22:1c:26: c6:d9:a2:4f:0d:99:de:14:56:1f:31:9f:d1:35:f2: 5f:48:c6:3c:a4:f7:4b:55:5d:0c:69:21:02:30:9c: fe:92:92:d7:01:77:07:c8:56:0b:7a:b7:79:94:13: 70:32:ba:a4:0f:f9:20:7d:4c:a5:7c:02:47:2d:5f: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:65:7B:92:3A:89:0C:E9:EC:D0:09:3E:31:7B:95:3B:48:CC:93:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/04863e87-d0fa-3bbf-8221-b8be61bb47e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:71:df:a2:25:c7:a5:6d:34:8e:01:c3:a5:4f:bf:d6:3e:52: 9e:e4:32:9f:73:66:93:aa:40:7e:a5:91:73:0d:b1:ad:7a:dd: c5:33:f7:c2:01:a0:17:c0:f1:b9:95:86:bc:47:17:0a:84:43: 38:09:fc:03:18:2d:95:4f:cc:26:9e:a9:42:10:c8:ae:e4:2f: 02:9a:b2:21:71:f2:29:ec:62:37:c4:2b:75:60:c8:b3:56:16: 5b:15:85:54:54:91:35:2e:af:aa:0d:8d:b3:0d:4d:05:f2:6f: 53:d0:c8:27:87:6f:b8:88:a8:5f:e5:89:0d:7a:09:ac:7f:43: a4:64:c7:44:9f:63:a7:bc:97:81:06:de:33:02:43:03:49:85: c7:db:78:90:66:f0:65:91:92:ae:6d:b3:72:df:3d:cb:fd:f5: 2b:b3:26:99:37:c6:b3:64:22:61:86:8b:8d:32:de:d0:e6:5f: 52:e8:6c:d4:2f:a7:11:5c:c7:8f:df:ee:bd:a3:27:a4:bc:c4: ab:00:49:d9:8a:bc:96:a9:9b:68:ed:3e:5c:30:e8:b8:f3:81: 93:ee:d8:2b:00:7e:20:c9:a6:33:06:e6:1b:39:f7:d5:22:dd: fb:78:37:6c:d7:b3:c3:c3:3d:5a:d3:76:2f:43:d9:28:de:1d: 54:cf:70:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+Qx0y54vTgmjpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZTQzZTAzZjktODcwMC00MDE3LWI2NDctMzBiYmJlY2M5MmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdTxHcpJ+wFJ3CVuOmrEGh/9NsJEqA0WgkWq BEN8kUXLVflrno10DxT9Hzt9JkK8gQXiGEbuF2jcbezwFXgFrjYJBx5M8n5ngRhq 96FEJ+C5jjvLEB/M3ZYLL6l4ls3Io+fH6i/2wn02QNsL9zaV6Pu8hYuVCbeqoZ6N FNB3exZix/hGD8mJTOFCFwiCkvkYKqzJhH+QjrHzSUkfRejHR5Yg2SVnPV/NEylV TPyHt/XMWdVa3eza6/iKtRzRBN8iHCbG2aJPDZneFFYfMZ/RNfJfSMY8pPdLVV0M aSECMJz+kpLXAXcHyFYLerd5lBNwMrqkD/kgfUylfAJHLV8miQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERle5I6iQzp7NAJPjF7lTtIzJNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDQ4NjNlODctZDBmYS0z YmJmLTgyMjEtYjhiZTYxYmI0N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYvr+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5x36Ilx6VtNI4Bw6VPv9Y+Up7kMp9zZpOqQH6lkXMNsa163cUz98IB oBfA8bmVhrxHFwqEQzgJ/AMYLZVPzCaeqUIQyK7kLwKasiFx8insYjfEK3VgyLNW FlsVhVRUkTUur6oNjbMNTQXyb1PQyCeHb7iIqF/liQ16Cax/Q6Rkx0SfY6e8l4EG 3jMCQwNJhcfbeJBm8GWRkq5ts3LfPcv99SuzJpk3xrNkImGGi40y3tDmX1LobNQv pxFcx4/f7r2jJ6S8xKsASdmKvJapm2jtPlww6LjzgZPu2CsAfiDJpjMG5hs599Ui 3ft4N2zXs8PDPVrTdi9D2SjeHVTPcME= -----END CERTIFICATE-----Generated at Sun Apr 27 11:28:54 2025 by rpki-client