$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30239a83-6e52-3eab-9e78-79cd306a383e.roa File: 30239a83-6e52-3eab-9e78-79cd306a383e.roa (raw, json) Hash identifier: Mt6DVcKFsMx4RYjFmpCr6NWkiyd9NvhAAhq+6uH3f98= Subject key identifier: 94:D5:BA:2C:1B:B4:20:9F:A1:78:22:36:B3:6D:F2:D5:2A:C3:61:A0 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA49F803FC9D7A6A8F8DD80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30239a83-6e52-3eab-9e78-79cd306a383e.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 22909 IP address blocks: 98.40.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:9f:80:3f:c9:d7:a6:a8:f8:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=27c21b09-7bec-41a6-b84e-b0b2608ef7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:72:ce:04:17:b9:1b:32:be:35:2f:77:af:e0: 48:10:8b:f5:d5:eb:d4:40:cd:6a:a1:f2:2b:82:b6: e6:8c:5c:ac:b0:16:0f:05:f1:9b:eb:bf:41:d3:80: 2b:a5:79:f2:21:eb:3b:52:9c:2f:68:7b:7b:7b:e3: b9:cd:29:34:96:a1:9b:57:e8:89:eb:1e:c3:e1:60: a4:66:4f:52:fc:69:12:00:df:d9:74:6c:44:c1:49: 45:26:33:e9:9f:98:4f:ae:6d:22:18:32:ef:c3:93: bb:99:20:30:f0:8b:37:98:53:a5:bd:92:62:22:4e: 16:35:25:b6:ba:ae:d6:ad:3b:47:a9:16:49:24:a6: da:d6:d8:6d:ce:f4:03:00:3e:e3:d8:e1:15:c5:9d: a1:88:a5:d7:95:c7:34:e7:43:15:23:ec:52:68:f1: 39:66:58:a6:53:28:34:57:54:bf:c5:2c:d9:49:6d: a4:43:0d:88:7c:92:2a:e3:cd:45:d1:fc:46:72:dd: 23:48:09:c4:ed:a1:d2:d8:2c:3b:f9:01:ac:b5:44: b7:67:41:22:a5:a5:72:9e:99:6e:a5:01:ea:4a:f5: a6:8b:47:d2:89:64:9c:4b:a6:e1:ba:4f:52:69:96: 20:85:37:1d:ed:91:57:af:5e:41:89:27:36:a4:d6: cf:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D5:BA:2C:1B:B4:20:9F:A1:78:22:36:B3:6D:F2:D5:2A:C3:61:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30239a83-6e52-3eab-9e78-79cd306a383e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:96:51:18:bb:29:a4:e8:72:0d:ed:cd:f9:c8:31:e2:65:0a: 76:98:f5:6a:62:32:6f:bb:a3:fe:7c:13:c7:27:08:3c:2a:37: 3d:74:cb:73:44:68:6f:c1:bc:3c:b3:28:b8:13:dc:3a:dc:71: b2:31:60:6c:24:02:90:dd:0a:2f:24:bc:a9:86:cd:68:57:f3: 43:7b:c9:48:e1:2b:2b:61:2f:e7:c7:4f:b6:21:12:af:93:8a: d5:0d:3d:05:ed:b1:be:31:a1:c0:bc:77:35:cf:8e:55:dd:4f: 81:f4:3b:21:77:b2:2e:83:e0:57:da:cb:69:c7:70:ac:f8:8c: 25:3d:ca:59:2d:44:f1:4b:d6:6c:33:fd:7c:84:48:cb:76:b5: 72:92:5a:44:48:39:2e:e7:10:97:52:09:77:99:81:bc:76:1e: 31:9f:6f:0a:c8:bf:d3:86:46:16:8d:87:55:7d:d7:75:55:bc: a6:77:10:54:1d:db:f4:14:a3:16:24:83:88:8e:4e:ab:49:0d: 1a:81:c8:e3:48:a9:bb:42:fc:e8:96:22:30:38:06:d4:18:76: 81:df:24:0c:ce:69:4b:a9:04:da:35:d5:79:e4:b5:67:17:c5: 88:4d:fa:d1:1f:9d:ca:79:07:a8:c3:35:8f:8b:86:27:62:5c: 37:8f:5c:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pJ+AP8nXpqj43YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MjdjMjFiMDktN2JlYy00MWE2LWI4NGUtYjBiMjYwOGVmN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3LOBBe5GzK+NS93r+BIEIv11evUQM1qofIr grbmjFyssBYPBfGb679B04ArpXnyIes7UpwvaHt7e+O5zSk0lqGbV+iJ6x7D4WCk Zk9S/GkSAN/ZdGxEwUlFJjPpn5hPrm0iGDLvw5O7mSAw8Is3mFOlvZJiIk4WNSW2 uq7WrTtHqRZJJKba1thtzvQDAD7j2OEVxZ2hiKXXlcc050MVI+xSaPE5ZlimUyg0 V1S/xSzZSW2kQw2IfJIq481F0fxGct0jSAnE7aHS2Cw7+QGstUS3Z0EipaVynplu pQHqSvWmi0fSiWScS6bhuk9SaZYghTcd7ZFXr15BiSc2pNbP9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTVuiwbtCCfoXgiNrNt8tUqw2GgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzAyMzlhODMtNmU1Mi0z ZWFiLTllNzgtNzljZDMwNmEzODNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYigDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaWURi7KaTocg3tzfnIMeJlCnaY9WpiMm+7o/58E8cnCDwqNz10y3NE aG/BvDyzKLgT3DrccbIxYGwkApDdCi8kvKmGzWhX80N7yUjhKythL+fHT7YhEq+T itUNPQXtsb4xocC8dzXPjlXdT4H0OyF3si6D4Ffay2nHcKz4jCU9ylktRPFL1mwz /XyESMt2tXKSWkRIOS7nEJdSCXeZgbx2HjGfbwrIv9OGRhaNh1V913VVvKZ3EFQd 2/QUoxYkg4iOTqtJDRqByONIqbtC/OiWIjA4BtQYdoHfJAzOaUupBNo11XnktWcX xYhN+tEfncp5B6jDNY+LhidiXDePXK8= -----END CERTIFICATE-----Generated at Mon Apr 28 03:22:32 2025 by rpki-client