$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f873178-9d10-3d38-b608-cd3047ad83a4.roa File: 4f873178-9d10-3d38-b608-cd3047ad83a4.roa (raw, json) Hash identifier: PfBHCMiVlJXt3hmuVaEwumbi+zASduQC8AzdjG+878c= Subject key identifier: DB:87:F8:F9:1D:B2:E0:96:40:34:EC:40:7E:29:ED:7D:E5:21:A6:59 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB1D67084736EF162D4FE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f873178-9d10-3d38-b608-cd3047ad83a4.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33651 IP address blocks: 98.210.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:d6:70:84:73:6e:f1:62:d4:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=633bc86d-2043-48df-b670-4246fd842aa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a0:f3:ab:c9:fb:3a:96:a8:1b:5c:87:26:b2: 51:ff:54:2c:5f:af:42:11:58:08:57:99:08:0b:44: 22:58:f3:08:b6:ae:ab:48:cd:90:87:d8:ea:19:4b: e4:9c:c5:20:d1:a2:fe:74:81:e3:97:73:7d:e1:08: 84:1d:68:9b:46:57:41:48:f0:20:6d:32:a7:a7:f1: 4d:9d:11:a2:93:b4:b6:bd:31:42:e0:b4:fb:03:f6: 62:05:d4:32:8f:c9:d5:e6:6a:7b:e2:f5:f9:ce:15: 82:21:cb:e6:1e:fe:e4:3f:c7:50:34:20:60:1b:43: 00:74:f1:8b:48:6e:ad:09:39:c7:51:b2:76:1e:92: 72:a1:c7:a9:3e:39:75:e6:a0:c1:91:59:f0:1f:3c: 1f:32:5b:e0:bb:4c:07:41:64:4e:7f:b9:6f:aa:63: 50:3a:d5:13:55:4f:ca:b5:e2:89:20:9c:ca:bf:17: 70:1e:a3:6e:35:fa:cb:a7:7f:d5:37:d1:ab:8b:ab: 7c:0d:b9:1e:c6:0c:f1:6a:f3:4b:ef:bd:0f:3a:e9: b9:a6:3b:05:8e:e8:74:fa:5d:45:46:e1:f4:cb:2e: fe:a1:1a:81:a4:d0:63:c8:83:2b:75:84:fa:fc:c6: b6:da:b2:0d:4b:7a:20:72:d7:88:a6:fb:21:25:9b: 52:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:87:F8:F9:1D:B2:E0:96:40:34:EC:40:7E:29:ED:7D:E5:21:A6:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4f873178-9d10-3d38-b608-cd3047ad83a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.210.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:e3:2f:96:f3:fb:14:10:52:48:c0:0c:09:e9:4c:05:01:bd: 32:ae:42:3c:f5:91:65:0f:25:ba:b3:21:4d:9f:35:1c:fa:49: 72:29:f1:12:11:41:63:7a:f1:7f:f8:68:50:e3:12:2b:6a:0f: 16:50:64:0b:41:56:b6:c6:9c:28:ef:cf:e2:af:bf:8d:24:95: d2:03:32:b5:f3:03:2d:93:e0:90:7b:8c:8c:b7:3e:69:a8:d8: ba:4b:67:6d:cc:fa:ab:67:7f:76:e5:9a:8f:83:ef:e8:21:6e: 7f:ef:14:f9:4e:d3:f9:1b:bc:ca:3a:a0:37:c6:3b:1b:20:14: 86:fb:78:00:2e:36:6f:33:a2:74:f0:c4:e1:7c:22:9a:58:c0: fa:93:31:bb:16:0a:27:19:41:3a:95:b5:b9:4b:a3:c9:98:dc: da:d1:98:8b:02:a3:4e:47:1f:7a:cd:e9:ba:f8:dc:d9:98:1f: b3:97:d3:d7:6d:f7:52:a8:26:68:1e:2a:3a:b2:ac:2a:86:4e: 8e:cd:6a:c5:a9:88:bf:58:c1:b6:a2:5b:97:6c:eb:0c:3d:b0: 32:e5:1f:de:14:aa:9c:22:58:4c:2f:56:bd:0d:39:c8:dd:03: 31:94:df:d8:ab:ce:25:e6:0a:b6:12:49:2b:18:42:b6:24:79: 94:92:98:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssdZwhHNu8WLU/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NjMzYmM4NmQtMjA0My00OGRmLWI2NzAtNDI0NmZkODQyYWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKDzq8n7OpaoG1yHJrJR/1QsX69CEVgIV5kI C0QiWPMItq6rSM2Qh9jqGUvknMUg0aL+dIHjl3N94QiEHWibRldBSPAgbTKnp/FN nRGik7S2vTFC4LT7A/ZiBdQyj8nV5mp74vX5zhWCIcvmHv7kP8dQNCBgG0MAdPGL SG6tCTnHUbJ2HpJyocepPjl15qDBkVnwHzwfMlvgu0wHQWROf7lvqmNQOtUTVU/K teKJIJzKvxdwHqNuNfrLp3/VN9Gri6t8DbkexgzxavNL770POum5pjsFjuh0+l1F RuH0yy7+oRqBpNBjyIMrdYT6/Ma22rINS3ogcteIpvshJZtSWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuH+PkdsuCWQDTsQH4p7X3lIaZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGY4NzMxNzgtOWQxMC0z ZDM4LWI2MDgtY2QzMDQ3YWQ4M2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtJsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALnjL5bz+xQQUkjADAnpTAUBvTKuQjz1kWUPJbqzIU2fNRz6SXIp8RIR QWN68X/4aFDjEitqDxZQZAtBVrbGnCjvz+Kvv40kldIDMrXzAy2T4JB7jIy3Pmmo 2LpLZ23M+qtnf3blmo+D7+ghbn/vFPlO0/kbvMo6oDfGOxsgFIb7eAAuNm8zonTw xOF8IppYwPqTMbsWCicZQTqVtblLo8mY3NrRmIsCo05HH3rN6br43NmYH7OX09dt 91KoJmgeKjqyrCqGTo7NasWpiL9YwbaiW5ds6ww9sDLlH94UqpwiWEwvVr0NOcjd AzGU39irziXmCrYSSSsYQrYkeZSSmJs= -----END CERTIFICATE-----Generated at Mon Apr 28 07:18:10 2025 by rpki-client