$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/640de64f-08b5-359d-a5f8-ad38e84de0ed.roa File: 640de64f-08b5-359d-a5f8-ad38e84de0ed.roa (raw, json) Hash identifier: TB4+DTPU+lMC0sfNYVY0Gi9cEHK8xcY6xHJgS1TjyKQ= Subject key identifier: 79:7A:70:D7:9F:1F:D0:31:9B:0A:08:50:B4:86:AF:9D:99:A5:8E:52 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F956D69D9731F264CC4DC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/640de64f-08b5-359d-a5f8-ad38e84de0ed.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.195.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f9:56:d6:9d:97:31:f2:64:cc:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=cc886bc7-12c7-40d4-a44d-2fb7c06423e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:80:6c:5a:b2:41:48:c9:3e:a4:34:35:e3:ff: 34:a0:19:c5:b1:54:a4:4c:34:c6:12:71:1e:b2:9d: 80:ce:a5:53:53:fb:f2:16:a6:6a:27:f2:86:93:81: e0:98:cd:10:5c:cc:50:05:0e:45:d5:2c:bf:0f:6a: f1:31:11:ef:e6:cd:f3:6e:2c:d2:57:4b:ec:ef:4a: b4:e1:6f:dd:1c:9b:07:e5:61:20:9a:0a:9a:23:c1: 58:0c:fb:4f:6e:3c:6b:3c:63:60:79:b2:3d:58:ca: e5:11:28:1d:df:22:b1:a3:b5:c6:dd:ba:4e:03:85: 69:41:29:35:ac:19:ff:e7:72:b7:b2:a9:a2:92:9e: ab:ee:5d:f8:60:25:84:89:08:1a:5b:62:41:6e:ae: 47:7c:92:bf:3d:c2:1e:06:25:11:3e:c5:e4:96:e4: 5d:fd:e2:02:3e:3f:c6:81:83:d5:95:97:84:bb:d2: 38:b6:ce:d9:50:ac:ad:8a:0b:7e:02:d2:8f:59:ce: 15:21:91:34:4a:cf:c8:bb:41:7b:69:3e:ac:46:29: bd:42:71:8d:63:90:8f:7c:39:be:d6:97:5b:d3:cb: 61:51:1c:63:27:66:a9:3c:ba:f7:a1:76:56:3a:c2: bb:9f:fa:bb:7a:b7:3e:cf:19:e5:d1:49:82:65:0c: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7A:70:D7:9F:1F:D0:31:9B:0A:08:50:B4:86:AF:9D:99:A5:8E:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/640de64f-08b5-359d-a5f8-ad38e84de0ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:40:c4:10:b7:09:8d:7c:bd:0c:9e:84:c6:bd:39:e4:1d:3e: 05:45:74:e0:7e:f2:ff:24:a7:6a:c1:39:1f:59:ec:19:23:76: ad:37:e0:97:87:5e:c2:c7:62:22:9a:6d:0d:32:f4:09:f9:cc: d3:8f:98:d5:32:d5:49:a9:8e:40:23:b7:e5:13:ec:bb:c3:51: 16:13:f8:da:68:8d:63:10:3f:bf:02:c6:30:0b:ff:01:ca:83: d2:68:5f:7c:41:43:1a:e3:cf:46:3e:aa:ed:c7:91:54:87:53: 42:bc:be:8e:0f:47:fb:fe:22:b8:bb:b7:88:06:c4:da:c7:ca: a4:e7:38:3e:4f:64:93:3f:96:d9:a2:b6:ed:99:12:78:53:82: 22:e2:50:6f:a2:1c:38:19:44:f4:3e:1b:d6:30:1a:c0:be:7c: de:f7:fc:73:a9:71:26:88:02:a9:b3:23:45:a3:3f:21:6a:88: 05:7c:b3:cb:03:17:c9:3a:fa:95:1e:ef:6b:9f:57:39:ba:20: 90:7e:77:32:14:b9:0b:70:2f:73:57:18:32:30:a9:7b:8d:bc: 32:ee:ae:99:73:53:bf:f8:c9:67:dc:ec:30:2c:3f:f4:ee:6a: 20:9b:27:d3:3e:85:ef:fa:86:a8:69:1a:85:0b:0e:7f:b4:87: a0:ab:5f:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+VbWnZcx8mTMTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk Y2M4ODZiYzctMTJjNy00MGQ0LWE0NGQtMmZiN2MwNjQyM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYBsWrJBSMk+pDQ14/80oBnFsVSkTDTGEnEe sp2AzqVTU/vyFqZqJ/KGk4HgmM0QXMxQBQ5F1Sy/D2rxMRHv5s3zbizSV0vs70q0 4W/dHJsH5WEgmgqaI8FYDPtPbjxrPGNgebI9WMrlESgd3yKxo7XG3bpOA4VpQSk1 rBn/53K3sqmikp6r7l34YCWEiQgaW2JBbq5HfJK/PcIeBiURPsXkluRd/eICPj/G gYPVlZeEu9I4ts7ZUKytigt+AtKPWc4VIZE0Ss/Iu0F7aT6sRim9QnGNY5CPfDm+ 1pdb08thURxjJ2apPLr3oXZWOsK7n/q7erc+zxnl0UmCZQz5BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHl6cNefH9AxmwoIULSGr52ZpY5SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjQwZGU2NGYtMDhiNS0z NTlkLWE1ZjgtYWQzOGU4NGRlMGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYsOsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFAxBC3CY18vQyehMa9OeQdPgVFdOB+8v8kp2rBOR9Z7Bkjdq034JeH XsLHYiKabQ0y9An5zNOPmNUy1UmpjkAjt+UT7LvDURYT+NpojWMQP78CxjAL/wHK g9JoX3xBQxrjz0Y+qu3HkVSHU0K8vo4PR/v+Iri7t4gGxNrHyqTnOD5PZJM/ltmi tu2ZEnhTgiLiUG+iHDgZRPQ+G9YwGsC+fN73/HOpcSaIAqmzI0WjPyFqiAV8s8sD F8k6+pUe72ufVzm6IJB+dzIUuQtwL3NXGDIwqXuNvDLurplzU7/4yWfc7DAsP/Tu aiCbJ9M+he/6hqhpGoULDn+0h6CrXyo= -----END CERTIFICATE-----Generated at Sun Apr 27 10:29:57 2025 by rpki-client