$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3830ec24-cd21-39c1-8e94-63168dac9f5a.roa File: 3830ec24-cd21-39c1-8e94-63168dac9f5a.roa (raw, json) Hash identifier: dJFMKfu1fpNZ0CnGi5g98lmAiyuUFZurKLsp8YUQNQc= Subject key identifier: F6:84:36:DF:62:41:7C:DB:30:D7:71:A7:EF:3D:DD:0A:B9:90:F0:FA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584A0C05D4F1D2AA8C3C37D97440 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3830ec24-cd21-39c1-8e94-63168dac9f5a.roa Signing time: Sun 01 Jun 2025 13:01:03 +0000 ROA not before: Sun 01 Jun 2025 13:01:03 +0000 ROA not after: Sat 30 Aug 2025 13:01:03 +0000 asID: 33659 IP address blocks: 98.221.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0c:05:d4:f1:d2:aa:8c:3c:37:d9:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Jun 1 13:01:03 2025 GMT Not After : Aug 30 13:01:03 2025 GMT Subject: CN=b6bfe204-ba7b-4d4a-8d8d-f99a1ffc4a3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:89:8b:d2:94:83:d8:12:19:9d:66:ec:71:c5: e1:4f:95:59:f0:55:eb:a4:2e:28:6a:34:d9:1a:75: 39:5e:e4:cc:0e:ff:a9:5c:a3:06:6a:8b:1c:22:e8: 74:c3:ff:83:8c:14:7c:f4:5e:e1:64:fa:25:5d:12: ed:56:e7:e2:ce:6a:37:2e:91:aa:52:5f:78:83:d3: e8:65:71:ec:0e:5e:22:d2:fb:2c:01:ce:d5:ca:9e: 6a:ac:f0:21:35:c8:61:15:70:1b:dc:5a:58:7d:aa: 0e:da:e6:03:f7:f0:cc:ab:74:ac:0d:25:35:1a:7b: 63:00:ef:67:9c:1a:d3:65:1b:b8:f4:49:ba:ea:9b: c2:d0:5a:f7:f9:09:c0:11:51:5d:aa:8e:ab:06:2a: 88:79:52:f9:5d:58:ab:32:38:76:b6:93:15:6e:78: 31:43:25:6d:32:46:61:0b:ee:e9:df:51:0d:b0:06: a3:24:85:c3:d6:32:e1:37:21:1d:67:2e:06:01:7c: 35:1e:e1:f1:50:f5:d8:3c:64:1b:ec:26:5a:59:e1: d8:ff:a2:bd:e2:24:7b:cb:f1:5a:43:c6:1c:34:84: 8b:0a:97:c1:5a:e7:0b:74:60:fe:6c:38:d0:34:c7: 4e:87:bf:c6:71:52:1b:6e:84:73:a6:17:d9:9b:40: ef:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:84:36:DF:62:41:7C:DB:30:D7:71:A7:EF:3D:DD:0A:B9:90:F0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3830ec24-cd21-39c1-8e94-63168dac9f5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c4:a1:3b:16:0b:f2:76:52:2b:13:48:4d:f8:1f:c3:c6:0c: 17:b0:15:e1:af:dd:ba:2f:24:00:e1:54:de:f5:38:b2:e6:cc: ba:66:02:1a:46:2a:d0:45:7f:30:a7:f5:94:d6:02:57:18:fb: 58:80:79:2f:9a:80:53:eb:ef:30:5b:b4:4d:24:2d:61:91:e3: 54:1c:66:af:d2:3d:ff:c2:b1:00:be:ad:db:09:f5:81:50:8b: 75:3e:a7:1c:ed:59:47:0f:40:23:44:8a:67:65:b2:6a:59:74: 07:d6:79:02:12:74:c4:ef:5e:80:d3:7c:d0:e8:d5:28:ed:df: 9e:27:23:8e:fa:a6:4d:f0:7c:10:7f:54:e8:35:32:34:2f:14: 34:5f:1c:48:ff:46:47:5a:df:68:58:fe:e3:3c:a1:44:e6:f6: a0:93:5c:99:ac:de:59:14:0c:0c:72:38:ca:ad:f7:cb:66:18: cf:ad:55:b9:b6:53:3f:20:d8:f3:a0:e7:73:29:16:66:91:99: f2:d0:48:55:b4:1e:29:2b:58:f9:e6:33:e6:52:4b:24:23:a1: 49:2b:5c:14:58:9d:00:8f:a5:38:fe:37:f9:02:2e:7c:28:e1: 1d:bb:1e:63:ab:bd:e2:1c:0e:97:4f:3d:da:24:32:54:10:73: 66:c8:f7:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBdTx0qqMPDfZdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk YjZiZmUyMDQtYmE3Yi00ZDRhLThkOGQtZjk5YTFmZmM0YTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YmL0pSD2BIZnWbsccXhT5VZ8FXrpC4oajTZ GnU5XuTMDv+pXKMGaoscIuh0w/+DjBR89F7hZPolXRLtVufizmo3LpGqUl94g9Po ZXHsDl4i0vssAc7Vyp5qrPAhNchhFXAb3FpYfaoO2uYD9/DMq3SsDSU1GntjAO9n nBrTZRu49Em66pvC0Fr3+QnAEVFdqo6rBiqIeVL5XVirMjh2tpMVbngxQyVtMkZh C+7p31ENsAajJIXD1jLhNyEdZy4GAXw1HuHxUPXYPGQb7CZaWeHY/6K94iR7y/Fa Q8YcNISLCpfBWucLdGD+bDjQNMdOh7/GcVIbboRzphfZm0DvMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaENt9iQXzbMNdxp+893Qq5kPD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzgzMGVjMjQtY2QyMS0z OWMxLThlOTQtNjMxNjhkYWM5ZjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYt3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7EoTsWC/J2UisTSE34H8PGDBewFeGv3bovJADhVN71OLLmzLpmAhpG KtBFfzCn9ZTWAlcY+1iAeS+agFPr7zBbtE0kLWGR41QcZq/SPf/CsQC+rdsJ9YFQ i3U+pxztWUcPQCNEimdlsmpZdAfWeQISdMTvXoDTfNDo1Sjt354nI476pk3wfBB/ VOg1MjQvFDRfHEj/Rkda32hY/uM8oUTm9qCTXJms3lkUDAxyOMqt98tmGM+tVbm2 Uz8g2POg53MpFmaRmfLQSFW0HikrWPnmM+ZSSyQjoUkrXBRYnQCPpTj+N/kCLnwo 4R27HmOrveIcDpdPPdokMlQQc2bI9wU= -----END CERTIFICATE-----Generated at Mon Jun 16 23:48:21 2025 by rpki-client