$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a07a3328-7794-3a6f-a98c-bf1148e957a7.roa File: a07a3328-7794-3a6f-a98c-bf1148e957a7.roa (raw, json) Hash identifier: +3WQZzB+60TX6MK3FR9woAzw/c/kPHth64AIj/YJeuc= Subject key identifier: 21:F4:AE:28:A6:B4:B1:53:6B:4D:E1:40:0C:7B:6A:DB:F0:82:75:C6 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4311B377639C00912259900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a07a3328-7794-3a6f-a98c-bf1148e957a7.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.199.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:1b:37:76:39:c0:09:12:25:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=98970cd9-f645-4a7d-a1c3-258073707932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:2a:a2:95:2d:5e:37:a6:15:c5:29:67:82: c1:de:aa:4f:97:8d:b7:10:f8:94:34:af:09:19:a7: 4c:b4:a7:27:9a:91:4c:5b:2f:f3:14:59:ed:71:61: 84:a9:d1:a7:bf:7d:ac:ab:3c:16:cd:f7:0f:24:93: 33:a7:8f:05:25:d8:1f:cd:c7:08:22:82:b6:6f:66: b0:02:d4:ba:5b:bc:dc:ba:fc:07:ec:2e:09:fb:6f: 4d:98:b1:36:15:97:85:c2:21:3c:4a:cd:5a:6f:78: 2d:00:0e:06:d0:af:8e:2d:d5:41:19:c8:08:84:bf: 7d:e1:f6:85:a0:bc:9f:32:d5:e5:e2:41:77:c6:a1: d7:c3:cf:e0:68:03:b0:b9:4a:d5:8f:ec:00:89:6f: cb:47:8a:fa:7e:47:57:9c:23:d4:3d:98:6c:39:f3: e5:a0:f5:12:d4:cd:96:c3:a9:ca:d6:c7:1a:58:22: 1e:37:f6:e4:f6:06:1f:12:4c:28:e0:80:80:f7:19: bd:5a:da:66:ef:4a:6b:89:d0:c5:af:c8:eb:3e:76: c8:8e:ec:19:84:0d:59:cd:6a:72:84:b9:64:e9:31: c5:35:15:0d:7f:fc:01:c2:91:3f:44:41:34:14:97: 7e:34:c7:eb:1e:d4:8f:52:31:8a:a6:41:38:35:a3: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F4:AE:28:A6:B4:B1:53:6B:4D:E1:40:0C:7B:6A:DB:F0:82:75:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a07a3328-7794-3a6f-a98c-bf1148e957a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.199.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:08:cd:8a:46:cb:f7:bd:88:84:09:4d:13:1d:6d:d2:d8:e6: 2b:80:2f:2c:49:e1:a0:1c:b3:60:46:0b:a5:12:21:1c:e6:b8: a9:e7:57:9f:39:3a:17:25:fa:f4:a9:81:8f:77:5f:24:73:b7: db:68:57:d5:05:cd:ea:99:e4:90:e3:43:b0:f9:32:ad:d5:bc: ab:e4:77:43:2d:16:21:27:73:95:4d:d8:11:62:3b:77:25:91: 57:7d:7d:c4:1e:c0:90:77:25:00:6f:d5:43:52:94:1a:9b:ee: 46:c9:d2:ca:aa:3b:ab:4e:2d:14:bc:c4:35:98:ca:9f:f3:bb: 11:85:b4:17:dc:cc:a3:b1:fc:fd:7b:04:39:0c:34:61:a7:85: fb:b0:78:d2:6b:53:bc:ca:c9:fe:36:15:85:62:9b:a8:de:64: be:2b:f2:75:09:44:ca:aa:e2:ba:51:33:03:77:21:c4:2a:7c: 11:9e:9a:a7:09:c7:92:6d:c3:9b:9e:c4:f4:13:f9:6b:57:75: 88:b5:2b:c8:d0:96:b5:e6:02:88:4a:a8:41:22:1c:3a:fb:5f: fc:cf:ff:03:85:9c:ae:73:d4:20:ad:d7:cf:8a:8d:29:04:43: fe:09:ea:ca:c3:c3:87:b7:ba:34:18:77:c9:ba:7e:b9:0e:92: 7c:ad:fb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMRs3djnACRIlmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTg5NzBjZDktZjY0NS00YTdkLWExYzMtMjU4MDczNzA3OTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFoqopUtXjemFcUpZ4LB3qpPl423EPiUNK8J GadMtKcnmpFMWy/zFFntcWGEqdGnv32sqzwWzfcPJJMzp48FJdgfzccIIoK2b2aw AtS6W7zcuvwH7C4J+29NmLE2FZeFwiE8Ss1ab3gtAA4G0K+OLdVBGcgIhL994faF oLyfMtXl4kF3xqHXw8/gaAOwuUrVj+wAiW/LR4r6fkdXnCPUPZhsOfPloPUS1M2W w6nK1scaWCIeN/bk9gYfEkwo4ICA9xm9Wtpm70pridDFr8jrPnbIjuwZhA1ZzWpy hLlk6THFNRUNf/wBwpE/REE0FJd+NMfrHtSPUjGKpkE4NaPdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH0riimtLFTa03hQAx7atvwgnXGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTA3YTMzMjgtNzc5NC0z YTZmLWE5OGMtYmYxMTQ4ZTk1N2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYIzYpGy/e9iIQJTRMdbdLY5iuALyxJ4aAcs2BGC6USIRzmuKnnV585 Ohcl+vSpgY93XyRzt9toV9UFzeqZ5JDjQ7D5Mq3VvKvkd0MtFiEnc5VN2BFiO3cl kVd9fcQewJB3JQBv1UNSlBqb7kbJ0sqqO6tOLRS8xDWYyp/zuxGFtBfczKOx/P17 BDkMNGGnhfuweNJrU7zKyf42FYVim6jeZL4r8nUJRMqq4rpRMwN3IcQqfBGemqcJ x5Jtw5uexPQT+WtXdYi1K8jQlrXmAohKqEEiHDr7X/zP/wOFnK5z1CCt18+KjSkE Q/4J6srDw4e3ujQYd8m6frkOknyt+1E= -----END CERTIFICATE-----Generated at Mon Jun 16 21:01:43 2025 by rpki-client