$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9748b026-59ea-37b9-954c-daeea4080dc8.roa File: 9748b026-59ea-37b9-954c-daeea4080dc8.roa (raw, json) Hash identifier: 6ebHiScq9SkZo91FDtC4c3uFQxQ2loSxHbzIMSz8dAQ= Subject key identifier: 9F:F0:81:B2:0F:58:BF:C9:EC:28:F8:0D:9E:F2:86:81:9E:10:79:08 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB160C6A4B173C70D2BB740 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9748b026-59ea-37b9-954c-daeea4080dc8.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33491 IP address blocks: 98.32.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b1:60:c6:a4:b1:73:c7:0d:2b:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=1f389cc9-1a1a-4311-bcb1-ae9d59bff90d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:72:2a:2c:61:fd:18:3c:4c:c9:83:39:6e:95: ee:d2:bd:78:68:b3:44:09:70:4d:9c:6a:77:77:89: 0c:f0:c8:23:f0:e7:f7:73:03:09:d9:d1:33:74:fa: 4f:80:99:87:20:82:c0:cb:86:94:ab:86:4a:66:5d: e5:71:8e:cb:3e:7c:de:67:76:82:89:6f:41:0a:87: 95:f6:99:22:24:14:66:f7:c4:a8:34:fc:cd:71:90: e3:97:b6:71:aa:33:62:00:c4:a9:90:b2:95:44:53: e2:cd:14:f3:19:10:ed:58:7c:f1:cd:32:3d:10:3c: 24:37:e6:30:32:ff:c6:11:9e:77:92:91:14:ec:f5: 8e:74:8b:0c:cc:4b:21:2a:3d:1a:06:38:dd:cf:e1: a9:55:fc:6d:c5:64:64:be:2c:ad:ad:3f:f1:1a:ba: 21:26:fd:90:0c:ef:9d:f7:77:af:b8:fd:d0:78:d4: 56:b5:5b:12:cb:1e:96:ac:d5:03:54:1e:63:1b:7a: bc:82:2e:5b:3e:53:ad:37:d6:1f:04:7e:1f:a9:c6: 0e:21:86:43:40:65:2f:dc:fc:5f:73:50:da:6f:94: 9b:89:d5:5e:49:72:59:9e:f0:2b:c2:56:54:a9:e6: b9:bb:aa:c3:30:eb:79:52:fc:87:84:26:c1:7f:3b: f7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:81:B2:0F:58:BF:C9:EC:28:F8:0D:9E:F2:86:81:9E:10:79:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9748b026-59ea-37b9-954c-daeea4080dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.32.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9c:23:55:a7:c2:aa:d7:1f:25:cf:cd:82:84:96:55:fa:da: c2:8e:c8:2d:f3:ae:fc:d1:27:9f:46:87:ef:ae:ce:31:f6:c1: cd:33:0b:02:5a:e1:80:27:4a:85:eb:87:fd:94:e6:ac:78:d9: 0a:ca:f0:4a:1d:9c:99:b3:d3:3a:29:c1:4c:5e:27:4c:42:27: 85:59:36:24:80:24:57:6a:db:ad:eb:57:06:03:cf:a2:af:0a: 7f:b0:39:b7:ff:25:79:8f:f4:a5:6a:9e:48:d2:6a:82:fe:f9: 2f:90:01:e2:0a:86:05:72:14:35:9b:f2:b3:11:02:55:5e:1d: 19:86:3e:47:04:b9:a5:c1:05:20:8c:da:2e:80:84:0f:26:07: 38:a1:4d:db:24:c7:af:7e:20:47:b9:ed:b9:bd:60:98:c3:fb: 31:79:5d:a3:a0:5a:00:71:20:85:3e:d9:ef:a7:1c:22:54:1a: 89:f5:fb:f7:16:40:ac:ca:ea:42:3f:22:b0:d8:b8:d2:6e:8e: b8:c4:71:6c:ce:96:7c:f3:72:24:72:7e:e4:9c:40:66:c0:b5: 69:85:5b:4e:54:e8:74:aa:37:cb:bf:d9:6a:cd:96:3d:7c:66: b3:28:07:93:c6:56:6f:ed:88:ed:8a:a2:ce:e1:5e:f5:c7:1f: 1c:70:c4:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssWDGpLFzxw0rt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWYzODljYzktMWExYS00MzExLWJjYjEtYWU5ZDU5YmZmOTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHIqLGH9GDxMyYM5bpXu0r14aLNECXBNnGp3 d4kM8Mgj8Of3cwMJ2dEzdPpPgJmHIILAy4aUq4ZKZl3lcY7LPnzeZ3aCiW9BCoeV 9pkiJBRm98SoNPzNcZDjl7ZxqjNiAMSpkLKVRFPizRTzGRDtWHzxzTI9EDwkN+Yw Mv/GEZ53kpEU7PWOdIsMzEshKj0aBjjdz+GpVfxtxWRkviytrT/xGrohJv2QDO+d 93evuP3QeNRWtVsSyx6WrNUDVB5jG3q8gi5bPlOtN9YfBH4fqcYOIYZDQGUv3Pxf c1Dab5SbidVeSXJZnvArwlZUqea5u6rDMOt5UvyHhCbBfzv3ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/wgbIPWL/J7Cj4DZ7yhoGeEHkIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTc0OGIwMjYtNTllYS0z N2I5LTk1NGMtZGFlZWE0MDgwZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYiCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACycI1WnwqrXHyXPzYKEllX62sKOyC3zrvzRJ59Gh++uzjH2wc0zCwJa 4YAnSoXrh/2U5qx42QrK8EodnJmz0zopwUxeJ0xCJ4VZNiSAJFdq263rVwYDz6Kv Cn+wObf/JXmP9KVqnkjSaoL++S+QAeIKhgVyFDWb8rMRAlVeHRmGPkcEuaXBBSCM 2i6AhA8mBzihTdskx69+IEe57bm9YJjD+zF5XaOgWgBxIIU+2e+nHCJUGon1+/cW QKzK6kI/IrDYuNJujrjEcWzOlnzzciRyfuScQGbAtWmFW05U6HSqN8u/2WrNlj18 ZrMoB5PGVm/tiO2Kos7hXvXHHxxwxPE= -----END CERTIFICATE-----Generated at Tue Apr 29 09:43:44 2025 by rpki-client