$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6110f40f-c0a2-3b30-a901-f84714b08d89.roa File: 6110f40f-c0a2-3b30-a901-f84714b08d89.roa (raw, json) Hash identifier: S6mCGXLHNLfAY8JJmOhFF4xy+qiaJXd9BkQ9l7TWgiQ= Subject key identifier: 58:37:3E:8C:45:D8:FA:F9:D9:56:B0:45:EE:95:35:ED:27:47:A6:D8 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584992948349ACC814DB09208580 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6110f40f-c0a2-3b30-a901-f84714b08d89.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 98.220.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:83:49:ac:c8:14:db:09:20:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=cac215ab-de79-4d07-8b48-f2c4c7f089c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:58:1f:8c:3f:b2:7f:4b:00:5f:23:2a:09:37: 2a:43:37:26:62:dc:2a:15:e0:0f:8b:7d:d2:7c:4c: c2:d7:57:0e:75:47:d4:39:67:ce:eb:de:5f:b4:cc: e4:04:a0:de:a9:84:95:b0:bd:e2:d8:8f:3e:4d:b8: e0:3a:0e:a0:09:b9:e9:00:cb:0f:e8:50:42:c9:1d: 24:47:53:e3:73:7e:7e:d9:38:43:d9:4c:4c:b0:d3: 2e:ca:9a:f9:28:21:18:0e:5a:5b:dd:f0:3e:31:41: ac:84:54:c1:c1:f6:fe:f8:d0:36:ce:fd:c0:c8:7f: 18:c4:e3:5d:dc:e8:a7:53:fe:3b:d9:ae:86:5b:f1: 5e:6c:79:21:c1:98:6a:3f:4e:d8:13:e9:be:24:35: 92:25:a7:4b:00:b6:48:55:b8:e6:43:82:db:be:e0: 5e:2c:54:32:ec:da:e1:02:9d:c8:7e:28:c2:1c:78: 7e:af:50:88:0d:c2:b3:cd:d1:61:ea:74:44:d7:f6: e8:8d:a4:fe:07:27:ef:1c:31:f8:09:06:00:a2:a9: 6d:48:8e:53:7d:15:86:92:bf:58:b0:2f:6c:8f:3e: ab:93:33:78:f6:84:8b:16:63:2b:a1:d9:36:a4:8f: 50:0c:60:5c:ab:c1:b0:1a:63:72:c9:fd:ee:b2:cc: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:37:3E:8C:45:D8:FA:F9:D9:56:B0:45:EE:95:35:ED:27:47:A6:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6110f40f-c0a2-3b30-a901-f84714b08d89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.220.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f5:ae:20:8d:23:12:cd:25:a5:99:b6:72:9f:42:fe:ce:af: 3c:81:58:82:12:27:bf:2f:b8:1a:ba:98:41:30:a9:59:fa:e3: 37:f6:3f:df:c8:83:d6:47:0b:64:f3:bd:11:63:50:e6:ae:e4: 06:01:76:18:76:f7:cb:cf:84:6b:93:da:30:79:d0:4e:59:f5: 97:d8:98:df:12:e7:56:af:cd:0f:e5:a3:20:df:0a:73:00:70: ad:de:dd:db:60:d4:52:db:7a:96:35:25:83:d5:13:fe:67:90: 11:cf:a3:e2:48:1d:9f:78:4a:a6:88:dd:a4:cb:7b:cc:b6:6c: f7:03:b4:32:77:c0:aa:95:69:7c:e6:d3:75:2a:89:93:08:b6: b9:74:85:fd:46:db:94:d5:57:5d:ba:08:21:d8:c1:a0:85:78: 25:3d:53:09:b6:bc:5e:99:23:ae:a3:bc:42:75:54:6a:ea:6a: 07:63:1e:d3:47:bf:22:9f:d8:54:4e:55:ee:9d:de:5b:bb:75: e6:04:0f:db:93:bf:2f:72:68:1d:bb:e9:aa:50:06:3e:25:02: 34:a0:64:05:2f:a8:ec:5f:22:0a:a6:97:d6:13:49:54:62:b1: 51:b0:22:eb:b9:88:d7:31:b2:c7:a4:fe:b0:8d:0e:0b:63:4f: f9:91:f5:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlINJrMgU2wkghYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk Y2FjMjE1YWItZGU3OS00ZDA3LThiNDgtZjJjNGM3ZjA4OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1gfjD+yf0sAXyMqCTcqQzcmYtwqFeAPi33S fEzC11cOdUfUOWfO695ftMzkBKDeqYSVsL3i2I8+TbjgOg6gCbnpAMsP6FBCyR0k R1Pjc35+2ThD2UxMsNMuypr5KCEYDlpb3fA+MUGshFTBwfb++NA2zv3AyH8YxONd 3OinU/472a6GW/FebHkhwZhqP07YE+m+JDWSJadLALZIVbjmQ4LbvuBeLFQy7Nrh Ap3IfijCHHh+r1CIDcKzzdFh6nRE1/bojaT+ByfvHDH4CQYAoqltSI5TfRWGkr9Y sC9sjz6rkzN49oSLFmMrodk2pI9QDGBcq8GwGmNyyf3ussxuMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFg3PoxF2Pr52VawRe6VNe0nR6bYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjExMGY0MGYtYzBhMi0z YjMwLWE5MDEtZjg0NzE0YjA4ZDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYtxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH1riCNIxLNJaWZtnKfQv7OrzyBWIISJ78vuBq6mEEwqVn64zf2P9/I g9ZHC2TzvRFjUOau5AYBdhh298vPhGuT2jB50E5Z9ZfYmN8S51avzQ/loyDfCnMA cK3e3dtg1FLbepY1JYPVE/5nkBHPo+JIHZ94SqaI3aTLe8y2bPcDtDJ3wKqVaXzm 03UqiZMItrl0hf1G25TVV126CCHYwaCFeCU9Uwm2vF6ZI66jvEJ1VGrqagdjHtNH vyKf2FROVe6d3lu7deYED9uTvy9yaB276apQBj4lAjSgZAUvqOxfIgqml9YTSVRi sVGwIuu5iNcxssek/rCNDgtjT/mR9ZA= -----END CERTIFICATE-----Generated at Sun Apr 27 18:30:49 2025 by rpki-client