$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ffeb42b-2626-30f1-8cee-bcd5bd3a8813.roa File: 9ffeb42b-2626-30f1-8cee-bcd5bd3a8813.roa (raw, json) Hash identifier: A3S2WA1ej29HbdSda/C7yBfDDrmACLvcLGW9CjJi91A= Subject key identifier: 7F:28:26:79:C0:10:BD:18:ED:4C:F4:91:0F:2D:9A:3D:DC:19:FC:66 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584992948629CBF4F0C046ECBB0C Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ffeb42b-2626-30f1-8cee-bcd5bd3a8813.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 98.228.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:86:29:cb:f4:f0:c0:46:ec:bb:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=01720b5f-0a34-4fd1-a68f-160af6b8ae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b2:30:e7:89:d0:be:aa:72:60:28:8c:43:b7: f2:2d:d0:7f:95:0b:cb:b3:45:87:2d:db:ad:75:18: e9:38:1b:27:4e:6a:05:52:3c:2d:85:43:fc:12:a2: 06:39:dd:d9:28:28:4c:6c:39:48:2d:32:7e:aa:58: c3:04:03:26:e0:20:a1:5e:55:e6:ad:93:86:26:76: a9:b2:4c:5c:f1:8b:64:67:98:92:11:98:fe:12:c2: 8d:ed:8c:15:bd:1d:98:0e:5d:c0:0b:a2:7e:eb:d8: 52:2e:bf:0b:47:e8:fb:ec:45:2e:93:03:8d:48:ab: 20:a4:3c:c5:b0:ba:34:37:0e:2c:c2:fd:4f:07:47: 7f:43:d6:d2:91:7a:40:80:68:c2:78:5f:8d:f7:be: 24:02:6d:4c:f2:7f:c9:f9:b4:fc:56:88:f8:53:b0: 5f:a8:18:a4:28:a6:d4:18:22:ad:5e:42:a5:f2:4b: 59:72:3f:dc:ea:2f:09:6c:58:7e:8c:d8:f1:82:02: 4b:3f:c3:f4:67:c5:19:86:a5:67:13:df:51:a2:75: 26:96:78:ed:7a:01:fc:cb:0f:e1:fa:1f:b9:7a:89: 90:a5:36:b9:ac:48:3f:ec:32:e8:37:81:ed:ef:b5: 63:65:e7:4c:47:13:3b:0f:91:d9:be:0d:61:93:27: 57:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:28:26:79:C0:10:BD:18:ED:4C:F4:91:0F:2D:9A:3D:DC:19:FC:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ffeb42b-2626-30f1-8cee-bcd5bd3a8813.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.228.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:7b:13:52:0c:e9:2e:1c:8a:ac:fc:a6:ff:a0:59:0f:14:fc: f2:5b:d6:64:41:fd:5d:00:10:06:0a:d6:a4:ea:f7:70:31:3a: 5b:3d:d9:73:84:82:ab:4d:92:de:35:b4:2e:3c:ae:29:0d:c4: f5:73:d2:98:eb:bf:fc:52:af:e6:1c:40:c5:5d:29:74:b5:60: 09:51:dd:f5:aa:14:6c:f4:12:2a:7c:bb:6a:63:e8:6c:45:ed: 8d:60:d9:c9:63:db:2d:bc:68:d2:a4:5a:a4:7b:15:fc:e1:f1: f6:7e:4e:47:df:f5:ff:7b:47:da:56:b6:aa:1b:b1:73:ca:e7: 88:3a:6d:86:74:6d:b1:35:67:f3:d1:99:76:aa:47:4a:4c:a8: 03:86:e5:eb:e1:b5:ad:c3:4f:2b:36:05:9a:57:97:61:5b:c8: ca:1a:d6:53:84:ca:5a:ed:7d:71:ac:36:12:16:97:43:a0:1a: c3:75:3b:c7:5e:28:49:8d:47:1d:d2:88:c0:62:67:0b:6f:62: 2b:01:51:56:0f:a7:1d:30:cb:3a:1c:72:3b:e3:7c:f9:d8:82: 15:7b:0a:d7:c3:8b:18:21:ba:ee:15:fe:97:d1:95:dd:dd:1f: 95:4e:3a:83:19:f1:ff:2c:22:63:bf:a5:ee:b8:8a:6c:e8:9f: c2:2d:d1:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIYpy/TwwEbsuwwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MDE3MjBiNWYtMGEzNC00ZmQxLWE2OGYtMTYwYWY2YjhhZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7Iw54nQvqpyYCiMQ7fyLdB/lQvLs0WHLdut dRjpOBsnTmoFUjwthUP8EqIGOd3ZKChMbDlILTJ+qljDBAMm4CChXlXmrZOGJnap skxc8YtkZ5iSEZj+EsKN7YwVvR2YDl3AC6J+69hSLr8LR+j77EUukwONSKsgpDzF sLo0Nw4swv1PB0d/Q9bSkXpAgGjCeF+N974kAm1M8n/J+bT8Voj4U7BfqBikKKbU GCKtXkKl8ktZcj/c6i8JbFh+jNjxggJLP8P0Z8UZhqVnE99RonUmlnjtegH8yw/h +h+5eomQpTa5rEg/7DLoN4Ht77VjZedMRxM7D5HZvg1hkydXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8oJnnAEL0Y7Uz0kQ8tmj3cGfxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWZmZWI0MmItMjYyNi0z MGYxLThjZWUtYmNkNWJkM2E4ODEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYuR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM97E1IM6S4ciqz8pv+gWQ8U/PJb1mRB/V0AEAYK1qTq93AxOls92XOE gqtNkt41tC48rikNxPVz0pjrv/xSr+YcQMVdKXS1YAlR3fWqFGz0Eip8u2pj6GxF 7Y1g2clj2y28aNKkWqR7Ffzh8fZ+Tkff9f97R9pWtqobsXPK54g6bYZ0bbE1Z/PR mXaqR0pMqAOG5evhta3DTys2BZpXl2FbyMoa1lOEylrtfXGsNhIWl0OgGsN1O8de KEmNRx3SiMBiZwtvYisBUVYPpx0wyzoccjvjfPnYghV7CtfDixghuu4V/pfRld3d H5VOOoMZ8f8sImO/pe64imzon8It0TQ= -----END CERTIFICATE-----Generated at Mon Apr 28 18:38:30 2025 by rpki-client