$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f3b537a-e24c-301e-9230-9cd860cfa209.roa File: 4f3b537a-e24c-301e-9230-9cd860cfa209.roa (raw, json) Hash identifier: xTXs4SGNuam/d1xih0FxDFQI6iOHRBCX4orjZeRm8OY= Subject key identifier: 8C:71:9A:08:43:2E:DC:33:03:2D:61:32:DB:E1:A9:3E:E0:F1:DE:4C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D43283A787BE82FD7FC5F940 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f3b537a-e24c-301e-9230-9cd860cfa209.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.40.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:83:a7:87:be:82:fd:7f:c5:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=4dc6d56a-7b7f-4d56-8681-5e3af2508f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0b:81:f6:fc:ea:a0:00:70:24:db:ea:ac:58: 6e:c7:de:af:0d:e9:22:3d:ba:02:2e:7b:ef:b7:bc: 36:2e:70:86:79:a2:da:cb:5a:12:eb:87:79:11:42: 28:9d:08:29:d2:73:c1:00:2a:48:80:97:38:e1:98: d9:88:6d:b0:5f:33:43:09:2f:6c:cc:eb:af:b4:0e: 5b:26:24:d3:9c:6b:96:f0:7e:49:18:6c:6b:b9:87: 41:7f:b6:98:34:2a:9e:3f:44:e9:59:cf:90:c5:d8: 22:73:69:75:63:8d:24:02:3c:49:4d:a6:40:8b:18: 74:b2:9e:ae:5b:6c:48:34:ab:be:6e:ba:e2:32:f8: c8:a0:f0:12:c1:67:8c:ca:ff:59:0e:4e:f2:e1:8c: 48:fe:08:b2:ed:e2:33:52:5f:4a:f4:df:2d:46:6a: f3:65:fd:67:6e:a2:5e:e5:85:42:32:14:b4:b6:21: e3:ed:e5:df:1e:65:7a:c3:ff:08:db:30:b6:3b:55: 7e:fa:54:71:40:87:60:2f:f0:dd:68:b4:4d:2c:0b: 0d:01:cf:30:4b:2d:a0:54:17:61:6a:87:7e:a1:ff: 13:b2:54:65:65:61:e3:70:0a:be:f4:25:3d:d8:84: 5c:3d:54:d6:98:b7:d0:3f:75:d9:93:64:06:ba:92: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:71:9A:08:43:2E:DC:33:03:2D:61:32:DB:E1:A9:3E:E0:F1:DE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f3b537a-e24c-301e-9230-9cd860cfa209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.40.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:72:00:e6:3e:ac:65:44:34:3a:f9:f4:69:2a:ef:03:00:95: a3:52:11:a5:9d:cb:86:b3:f7:95:43:5c:0c:1c:8f:65:a2:09: 3f:41:45:1c:54:4a:55:41:7a:c3:5a:67:90:f3:fa:3f:53:84: 37:5a:49:28:cb:d5:83:30:77:4f:dd:f0:7d:78:bd:a2:72:34: e4:83:fd:19:68:f4:0b:d9:06:9c:78:bf:10:c2:e4:0d:a4:9a: 53:ba:15:da:97:1a:d5:61:a0:c8:e3:ae:fb:ca:3d:07:2d:f7: 00:a6:4d:8b:51:36:0b:99:27:8d:3e:34:34:0b:94:f7:0b:41: 75:ef:81:23:89:55:bd:a3:2b:f8:35:89:bd:b7:14:74:02:39: 17:f4:fe:3c:fe:5e:8b:25:84:f3:6a:d1:39:b7:b5:76:dc:76: 2b:ca:6b:24:c6:ec:14:b2:fd:27:8c:73:17:e5:d2:32:6c:cf: a3:de:a2:86:eb:5b:17:8c:9c:7a:57:e7:3b:ed:71:96:d2:0c: 15:7d:00:ce:d3:29:52:1f:42:26:24:bb:84:ce:4b:60:7f:6e: c3:92:b2:db:c4:7b:9b:97:44:77:63:34:58:b5:e3:15:ce:34: cd:d8:53:bb:7d:f5:54:e3:d7:3e:da:4e:af:69:d2:34:35:36: 1c:ac:28:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMoOnh76C/X/F+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NGRjNmQ1NmEtN2I3Zi00ZDU2LTg2ODEtNWUzYWYyNTA4ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwuB9vzqoABwJNvqrFhux96vDekiPboCLnvv t7w2LnCGeaLay1oS64d5EUIonQgp0nPBACpIgJc44ZjZiG2wXzNDCS9szOuvtA5b JiTTnGuW8H5JGGxruYdBf7aYNCqeP0TpWc+Qxdgic2l1Y40kAjxJTaZAixh0sp6u W2xINKu+brriMvjIoPASwWeMyv9ZDk7y4YxI/giy7eIzUl9K9N8tRmrzZf1nbqJe 5YVCMhS0tiHj7eXfHmV6w/8I2zC2O1V++lRxQIdgL/DdaLRNLAsNAc8wSy2gVBdh aod+of8TslRlZWHjcAq+9CU92IRcPVTWmLfQP3XZk2QGupIhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxxmghDLtwzAy1hMtvhqT7g8d5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGYzYjUzN2EtZTI0Yy0z MDFlLTkyMzAtOWNkODYwY2ZhMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYijvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGByAOY+rGVENDr59Gkq7wMAlaNSEaWdy4az95VDXAwcj2WiCT9BRRxU SlVBesNaZ5Dz+j9ThDdaSSjL1YMwd0/d8H14vaJyNOSD/Rlo9AvZBpx4vxDC5A2k mlO6FdqXGtVhoMjjrvvKPQct9wCmTYtRNguZJ40+NDQLlPcLQXXvgSOJVb2jK/g1 ib23FHQCORf0/jz+XoslhPNq0Tm3tXbcdivKayTG7BSy/SeMcxfl0jJsz6Peoobr WxeMnHpX5zvtcZbSDBV9AM7TKVIfQiYku4TOS2B/bsOSstvEe5uXRHdjNFi14xXO NM3YU7t99VTj1z7aTq9p0jQ1NhysKFY= -----END CERTIFICATE-----Generated at Mon Jun 16 21:33:29 2025 by rpki-client