$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa File: 4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa (raw, json) Hash identifier: oNGOXeX6iAhkCN8NDF9jz2RnF3nIY+RNptvlEpr/m6Y= Subject key identifier: 59:9A:FE:D4:E4:07:BB:C4:84:86:02:AB:FF:66:61:BC:31:22:60:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1CFABF2D8F39A8421F600 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.207.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:cf:ab:f2:d8:f3:9a:84:21:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=09efa1c3-ec3f-4111-b8dc-c1dbaffb995d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:05:59:45:b9:b9:d7:2b:58:13:45:e4:b1:ae: 34:bd:34:05:9d:00:bd:38:eb:db:fc:5e:03:d5:7f: 44:3e:cb:a5:85:14:bb:ad:89:97:73:55:2b:6b:c3: f9:39:ba:83:74:eb:08:2d:e1:70:9c:b9:d3:c3:42: fd:99:85:ce:2c:3a:4b:a9:57:b3:3b:76:3d:de:56: 69:64:60:0b:56:57:ec:b7:10:4a:4c:fd:f5:5e:dc: a0:06:45:95:72:f8:5d:9f:56:52:a5:bb:c8:43:fc: 4e:6a:89:f5:12:46:1c:a9:7c:2d:d5:da:c3:61:cd: e7:64:c1:9b:46:15:fe:bd:9e:65:5c:c7:00:61:d2: e9:e2:74:fb:8c:ea:3c:e1:07:84:64:47:bb:95:65: 44:09:40:d3:a6:d5:d9:01:ef:79:d6:39:6e:70:82: 05:8b:e8:9b:97:89:ed:d8:24:d0:92:e7:66:bc:f0: 17:ca:70:50:8a:b6:6f:da:45:a5:45:54:c5:50:97: 55:12:76:5d:77:52:49:33:62:d0:1b:33:67:de:de: b2:3c:26:69:9b:b9:3a:c6:f9:b5:d5:96:99:c1:54: a3:50:4c:9f:74:93:81:f2:d0:97:ed:31:4d:3f:34: 24:08:a2:ab:6a:41:e7:59:48:01:a5:0e:a4:02:32: 77:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9A:FE:D4:E4:07:BB:C4:84:86:02:AB:FF:66:61:BC:31:22:60:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4af6b0a1-1b60-3ed8-ab80-841945ca81f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.207.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:7e:be:c3:c3:cb:8f:44:f7:73:d6:35:a1:b8:aa:53:81:ea: d4:87:85:42:35:67:74:47:75:56:09:89:53:0b:a4:3c:a6:7f: 69:69:70:15:3b:9e:fa:00:26:35:24:80:f9:93:eb:82:c6:de: 0b:64:64:57:0a:93:5c:74:c4:f2:41:17:6b:b9:2d:a7:90:0d: 01:04:d4:d2:d6:cf:91:35:12:9a:5d:55:0a:86:78:b3:32:bb: 75:8c:3a:f5:e9:1e:63:96:27:73:98:16:4f:08:29:6f:69:9e: 56:19:2d:01:ff:ff:e0:c9:da:18:34:ed:78:56:07:e0:6e:f1: 78:a6:87:eb:b3:8b:cc:47:1e:58:e5:11:01:5b:8e:0b:40:f3: 1b:b0:54:57:15:93:9e:7c:a5:1a:9a:7d:5c:1c:e8:b6:e8:f6: 82:4f:90:10:6a:ea:3b:c6:e8:84:73:24:e8:ce:eb:bf:ad:d9: 75:ae:0e:54:b2:21:c5:37:35:46:51:9c:d1:56:c7:cc:cb:4b: cf:c0:35:c6:31:39:b7:04:21:c1:e1:23:be:78:b8:dd:69:23: fb:ab:b8:4b:94:8c:42:58:e7:2e:33:65:82:15:b9:b5:49:25: a0:c3:e0:f1:4b:59:a0:53:e1:6e:35:34:eb:2b:9e:b6:91:8d: ab:1b:57:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssc+r8tjzmoQh9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MDllZmExYzMtZWMzZi00MTExLWI4ZGMtYzFkYmFmZmI5OTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAVZRbm51ytYE0Xksa40vTQFnQC9OOvb/F4D 1X9EPsulhRS7rYmXc1Ura8P5ObqDdOsILeFwnLnTw0L9mYXOLDpLqVezO3Y93lZp ZGALVlfstxBKTP31XtygBkWVcvhdn1ZSpbvIQ/xOaon1EkYcqXwt1drDYc3nZMGb RhX+vZ5lXMcAYdLp4nT7jOo84QeEZEe7lWVECUDTptXZAe951jlucIIFi+ibl4nt 2CTQkudmvPAXynBQirZv2kWlRVTFUJdVEnZdd1JJM2LQGzNn3t6yPCZpm7k6xvm1 1ZaZwVSjUEyfdJOB8tCX7TFNPzQkCKKrakHnWUgBpQ6kAjJ3bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFma/tTkB7vEhIYCq/9mYbwxImCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGFmNmIwYTEtMWI2MC0z ZWQ4LWFiODAtODQxOTQ1Y2E4MWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYs+MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5+vsPDy49E93PWNaG4qlOB6tSHhUI1Z3RHdVYJiVMLpDymf2lpcBU7 nvoAJjUkgPmT64LG3gtkZFcKk1x0xPJBF2u5LaeQDQEE1NLWz5E1EppdVQqGeLMy u3WMOvXpHmOWJ3OYFk8IKW9pnlYZLQH//+DJ2hg07XhWB+Bu8Ximh+uzi8xHHljl EQFbjgtA8xuwVFcVk558pRqafVwc6Lbo9oJPkBBq6jvG6IRzJOjO67+t2XWuDlSy IcU3NUZRnNFWx8zLS8/ANcYxObcEIcHhI754uN1pI/uruEuUjEJY5y4zZYIVubVJ JaDD4PFLWaBT4W41NOsrnraRjasbV1c= -----END CERTIFICATE-----Generated at Sun Apr 27 10:19:28 2025 by rpki-client