$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/367444e8-5132-33df-bab8-b7a8e3b09f0c.roa File: 367444e8-5132-33df-bab8-b7a8e3b09f0c.roa (raw, json) Hash identifier: dpsSThtU4bpsR1kJt/U9H8qPrvPo2imKZI4Yl3zpqcA= Subject key identifier: D6:04:F7:E0:B1:D4:88:4D:16:8A:11:29:55:93:3C:92:48:79:CC:C8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849929486EE9C62059D9EB07400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/367444e8-5132-33df-bab8-b7a8e3b09f0c.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 98.253.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:86:ee:9c:62:05:9d:9e:b0:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=3253d660-3bac-4b12-8471-09cd6ca0f724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:36:21:9c:22:33:76:68:eb:28:b5:bf:a3:89: 45:64:6b:f5:56:90:78:27:c0:0b:ff:84:33:cc:bf: 1b:b6:30:cb:ac:b3:87:ac:ce:4e:56:9c:bf:b0:8b: 07:dd:40:6a:e0:80:60:c3:b6:98:e4:bd:36:db:86: 27:6a:f0:c0:9f:12:db:e6:47:b0:33:05:45:0d:61: 06:22:15:04:5e:24:fc:3f:fd:da:e8:e1:1c:9b:e9: 0d:b3:49:9a:e7:e6:9b:f6:7a:6c:e2:0c:3d:15:54: 2a:06:b1:46:8c:d7:83:35:b8:cb:a4:f9:1a:5a:45: 00:96:8d:74:14:7d:cd:cb:c8:15:d8:b8:33:1a:89: 73:8f:56:bd:ec:90:e7:44:54:e8:95:6d:eb:8d:7a: 99:60:0e:cd:2b:58:1c:95:59:25:6b:14:80:39:cd: 94:2f:8c:db:af:88:bb:65:23:5b:1f:df:d8:1a:75: c5:f5:ce:a4:be:b9:15:43:d7:33:f3:24:32:26:94: 62:f5:6f:0a:db:e6:26:39:17:60:e1:d8:1f:fb:a6: a1:f6:cd:af:76:27:3d:44:0a:ba:e9:e3:52:11:f4: 81:8c:36:c0:13:4e:78:9a:25:08:b3:55:05:fe:33: d0:e8:88:3c:eb:c6:32:c6:ca:12:d6:82:0f:86:cb: 23:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:04:F7:E0:B1:D4:88:4D:16:8A:11:29:55:93:3C:92:48:79:CC:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/367444e8-5132-33df-bab8-b7a8e3b09f0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:b6:17:1c:1e:5f:15:35:72:eb:b3:db:2e:cb:02:0a:51:c3: b8:5c:cf:91:a1:72:ef:87:e3:a7:61:d0:72:57:ff:9b:16:8f: b9:dd:67:4a:69:11:1d:0c:63:95:57:de:23:c5:10:3a:fc:bb: 71:c8:95:9e:c4:4d:33:df:c4:c1:90:27:d1:d4:cc:12:55:4f: a7:a2:63:23:0f:a6:ff:c3:72:12:7c:aa:bd:7e:75:d4:35:ce: 06:a3:a3:ea:24:16:22:49:b4:47:19:57:9f:50:a2:ec:e0:c7: 58:aa:f4:ec:76:17:a4:73:e5:e5:cd:54:72:80:02:53:39:85: 1b:2c:dd:00:a0:7a:7e:7b:f9:36:e6:ca:c7:b0:1e:0e:92:2c: 94:0f:29:0e:08:30:d8:7a:ec:55:97:d5:c1:18:52:f4:33:74: c0:44:36:12:38:93:0f:d8:a9:08:6e:db:a3:d8:a9:fc:a2:24: 19:10:aa:20:1f:26:9b:19:db:3c:f0:e7:3f:99:ed:65:d2:cd: 83:c0:d1:d3:a1:51:f5:db:8f:3d:d6:f2:af:95:a6:78:5c:36: 21:81:26:5b:55:3e:63:dc:90:ae:e0:c0:ac:45:a2:cc:fa:a5: 17:79:a0:54:5e:7d:a0:5d:23:0d:99:f6:0d:e7:91:4b:0a:f3: 6f:7d:38:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIbunGIFnZ6wdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MzI1M2Q2NjAtM2JhYy00YjEyLTg0NzEtMDljZDZjYTBmNzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjYhnCIzdmjrKLW/o4lFZGv1VpB4J8AL/4Qz zL8btjDLrLOHrM5OVpy/sIsH3UBq4IBgw7aY5L0224YnavDAnxLb5kewMwVFDWEG IhUEXiT8P/3a6OEcm+kNs0ma5+ab9nps4gw9FVQqBrFGjNeDNbjLpPkaWkUAlo10 FH3Ny8gV2LgzGolzj1a97JDnRFTolW3rjXqZYA7NK1gclVklaxSAOc2UL4zbr4i7 ZSNbH9/YGnXF9c6kvrkVQ9cz8yQyJpRi9W8K2+YmORdg4dgf+6ah9s2vdic9RAq6 6eNSEfSBjDbAE054miUIs1UF/jPQ6Ig868YyxsoS1oIPhssj4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYE9+Cx1IhNFooRKVWTPJJIeczIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzY3NDQ0ZTgtNTEzMi0z M2RmLWJhYjgtYjdhOGUzYjA5ZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYv3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKW2FxweXxU1cuuz2y7LAgpRw7hcz5Ghcu+H46dh0HJX/5sWj7ndZ0pp ER0MY5VX3iPFEDr8u3HIlZ7ETTPfxMGQJ9HUzBJVT6eiYyMPpv/DchJ8qr1+ddQ1 zgajo+okFiJJtEcZV59Qouzgx1iq9Ox2F6Rz5eXNVHKAAlM5hRss3QCgen57+Tbm ysewHg6SLJQPKQ4IMNh67FWX1cEYUvQzdMBENhI4kw/YqQhu26PYqfyiJBkQqiAf JpsZ2zzw5z+Z7WXSzYPA0dOhUfXbjz3W8q+VpnhcNiGBJltVPmPckK7gwKxFosz6 pRd5oFRefaBdIw2Z9g3nkUsK8299OA0= -----END CERTIFICATE-----Generated at Sun Apr 27 10:30:22 2025 by rpki-client