$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c5ed41-a359-3e5e-bb32-211a24cd7987.roa File: 89c5ed41-a359-3e5e-bb32-211a24cd7987.roa (raw, json) Hash identifier: r+KhtVgBBd5mnTbJFyu0YpXn24aCsGO7EFKLGcE80w4= Subject key identifier: D7:27:F9:2A:C8:03:C2:23:2A:DC:1F:23:8A:68:DC:0E:5A:AA:B3:5F Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAFCB447BE99E65EAD1F800 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c5ed41-a359-3e5e-bb32-211a24cd7987.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.227.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:cb:44:7b:e9:9e:65:ea:d1:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=713c668e-6256-4f55-9ebc-d907311ad6fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a6:1e:10:40:b5:d5:3a:55:77:25:85:76:bc: eb:d1:27:41:fd:6b:fc:81:76:ec:42:0d:37:d3:c7: fd:49:8e:0f:62:5f:4a:6e:b4:02:23:0b:95:b8:b0: db:68:19:8e:d1:e7:81:61:1b:0a:6f:57:44:a8:f5: 1d:44:dc:e3:c8:9d:1f:63:65:36:65:39:86:dc:c0: f4:21:2c:bf:03:77:9f:4f:3e:fe:bd:35:08:16:5f: a0:3c:70:eb:18:cc:f8:23:ef:02:f3:0f:60:c6:3a: a2:fb:b5:bb:99:2c:83:1e:bb:c0:10:e8:a7:23:9e: fa:c5:73:f5:1d:6c:d2:9d:c5:a0:40:13:6c:88:d8: 39:4b:55:2a:cd:a6:4d:3a:2c:78:f4:57:4d:89:b5: ba:4b:6e:18:9f:39:2f:ef:0f:b9:63:13:49:e1:db: 31:6d:a0:e6:bb:14:ae:a4:f9:91:c5:35:1a:9c:18: dc:60:a5:66:5f:15:bf:d2:f1:60:da:a0:ef:81:f1: 0a:79:23:0f:9f:41:1f:4d:01:a7:06:40:c5:08:67: 2b:02:1c:cf:40:b9:36:94:a3:37:42:15:47:68:f1: b7:c1:99:aa:ec:53:15:f9:73:df:5a:cc:65:bf:e4: e5:8e:93:8d:ea:1d:88:fc:fe:ed:33:c9:86:d8:04: 3f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:27:F9:2A:C8:03:C2:23:2A:DC:1F:23:8A:68:DC:0E:5A:AA:B3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89c5ed41-a359-3e5e-bb32-211a24cd7987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.227.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:c0:a6:9a:58:9b:18:f7:30:95:fc:81:9b:0e:b6:74:dd:50: 8a:be:f6:f4:29:ca:9a:4a:55:42:15:70:dc:db:49:28:57:73: d2:45:20:51:ad:aa:9a:bf:bb:b4:f2:f5:53:f5:5e:cf:56:f8: ed:7b:2e:47:0f:af:5e:c2:5f:91:9c:b3:e6:ad:0b:2a:f0:99: e7:21:dc:f8:5e:49:23:76:bf:ca:51:9e:cd:f3:2a:2a:86:14: 32:4b:fb:58:08:23:f7:72:ce:d0:56:ef:85:ff:91:e2:a9:10: 3b:7c:88:d6:d9:12:7c:d3:fc:78:03:c3:4f:98:e9:44:45:81: ce:11:ec:fa:02:6c:44:a0:ec:33:f7:69:b2:64:87:df:1c:bc: d6:09:bb:61:35:f3:92:9e:f9:12:1a:61:1d:55:07:48:4b:e5: e7:0c:ca:58:51:61:7d:0c:40:8e:c9:82:78:cc:12:cd:32:e0: db:4d:b4:9a:d7:e6:41:45:2b:6b:eb:f1:4c:2c:5d:95:b6:99: 1b:fb:be:7b:62:dc:97:5c:cc:31:1b:7c:70:4e:d6:4d:7d:4e: 5e:1f:17:ba:b7:91:c2:70:3f:e1:e8:5f:94:04:b7:42:2b:da: 08:4d:00:bf:8c:1e:4f:fe:ad:20:aa:6b:01:94:d4:8d:96:4b: 9f:a4:f5:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksr8tEe+meZerR+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk NzEzYzY2OGUtNjI1Ni00ZjU1LTllYmMtZDkwNzMxMWFkNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqYeEEC11TpVdyWFdrzr0SdB/Wv8gXbsQg03 08f9SY4PYl9KbrQCIwuVuLDbaBmO0eeBYRsKb1dEqPUdRNzjyJ0fY2U2ZTmG3MD0 ISy/A3efTz7+vTUIFl+gPHDrGMz4I+8C8w9gxjqi+7W7mSyDHrvAEOinI576xXP1 HWzSncWgQBNsiNg5S1UqzaZNOix49FdNibW6S24Ynzkv7w+5YxNJ4dsxbaDmuxSu pPmRxTUanBjcYKVmXxW/0vFg2qDvgfEKeSMPn0EfTQGnBkDFCGcrAhzPQLk2lKM3 QhVHaPG3wZmq7FMV+XPfWsxlv+TljpON6h2I/P7tM8mG2AQ/pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNcn+SrIA8IjKtwfI4po3A5aqrNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODljNWVkNDEtYTM1OS0z ZTVlLWJiMzItMjExYTI0Y2Q3OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYuPuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKXApppYmxj3MJX8gZsOtnTdUIq+9vQpyppKVUIVcNzbSShXc9JFIFGt qpq/u7Ty9VP1Xs9W+O17LkcPr17CX5Gcs+atCyrwmech3PheSSN2v8pRns3zKiqG FDJL+1gII/dyztBW74X/keKpEDt8iNbZEnzT/HgDw0+Y6URFgc4R7PoCbESg7DP3 abJkh98cvNYJu2E185Ke+RIaYR1VB0hL5ecMylhRYX0MQI7JgnjMEs0y4NtNtJrX 5kFFK2vr8UwsXZW2mRv7vnti3JdczDEbfHBO1k19Tl4fF7q3kcJwP+HoX5QEt0Ir 2ghNAL+MHk/+rSCqawGU1I2WS5+k9Us= -----END CERTIFICATE-----Generated at Mon Apr 28 01:21:56 2025 by rpki-client