$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa File: a3112e5e-c049-3664-bd63-a89430e5c577.roa (raw, json) Hash identifier: YUu1LGKgK9o1POWkBoHztRRHm6/CBUBYKy6jxlE5Ebw= Subject key identifier: F5:1B:8D:CA:2F:24:1A:22:49:27:49:6C:72:87:F9:13:EE:0C:C1:0C Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CB0B0B4907EFE39A9E83200 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 98.221.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b0:b0:b4:90:7e:fe:39:a9:e8:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=37e626e4-1226-4262-a62f-7ab471952b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b1:2e:86:8e:09:02:e1:95:85:a7:02:fb:61: ea:4c:d0:22:e4:72:f0:30:5e:a6:1c:d3:c9:46:06: 14:50:9a:c8:8b:d5:3a:03:61:6b:5d:06:c9:5b:20: 65:59:bc:6e:e1:aa:fb:a3:6a:93:02:33:91:bf:dc: cd:03:47:23:b3:eb:48:e5:f3:28:c7:b1:97:79:ae: b7:a4:00:b3:90:d0:46:59:b5:a9:c7:19:a2:ae:04: d7:cd:36:cc:87:de:6e:5f:a7:4d:6e:ce:e2:a4:15: a6:ee:da:e6:1d:73:2a:fa:76:cd:e4:18:d7:eb:3e: 8b:35:bf:46:ee:a1:71:eb:14:e3:ef:3c:b0:ec:d1: 77:1f:85:9e:34:33:36:7d:42:e0:a8:ab:dc:87:d2: df:26:63:de:95:32:b5:9c:a1:30:79:b9:ea:40:05: a7:65:29:75:84:2d:68:a3:65:56:ab:7a:97:b2:66: 52:d7:7d:e3:8d:57:66:2a:e7:14:d8:72:b6:05:f9: 8b:c9:22:c8:56:bc:e3:3f:22:56:2f:75:3e:0e:4b: 8e:83:96:ea:c7:a2:b3:0f:c3:9e:7d:db:c3:94:31: b6:c7:6f:dd:85:67:80:48:06:33:9a:d1:91:08:d7: 5e:ee:b6:52:c7:fa:cb:4f:73:45:fe:6c:61:90:0c: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1B:8D:CA:2F:24:1A:22:49:27:49:6C:72:87:F9:13:EE:0C:C1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3112e5e-c049-3664-bd63-a89430e5c577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d1:a6:6f:71:35:d2:ab:d9:f9:06:42:ab:1a:b6:a4:d1:2a: 02:b9:e5:7c:28:57:90:e7:69:0f:1d:f9:82:0d:c6:60:f0:f9: 53:8b:fc:ef:53:79:88:0d:41:bd:d8:4b:41:46:d5:81:3b:f6: 5e:02:f8:c8:3a:c2:af:0a:08:1b:7d:b1:b8:26:73:f9:2b:8a: 35:3c:96:b4:0c:14:a6:af:10:99:52:28:c0:36:b1:0d:94:6e: 23:9c:1a:44:67:60:f0:56:9f:1e:b5:e4:48:d1:28:22:6e:4e: d6:23:fa:d8:dc:4f:46:20:1a:f1:f9:42:82:3d:fe:5f:f6:a7: 0f:9d:e6:2f:74:11:6d:53:db:40:3e:89:f2:42:03:92:af:a3: 95:b4:4a:67:25:80:21:c3:95:16:2b:5b:5e:8f:d7:1a:93:0e: 73:e6:a1:af:98:e8:48:4e:24:cc:0c:79:02:0c:65:06:15:64: 2a:23:ba:3d:c3:1d:5f:38:85:e1:23:53:4b:87:c4:5e:82:8a: 9b:79:db:a8:e3:72:52:b1:73:69:82:d8:79:0c:cc:71:1a:c7: 74:a9:ec:f0:45:49:01:99:cf:c4:a8:d0:9d:a0:10:93:c8:cb: e0:48:90:a3:a6:08:13:60:ed:74:ee:31:de:11:89:00:e4:fc: 8b:50:2c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkssLC0kH7+OanoMgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzdlNjI2ZTQtMTIyNi00MjYyLWE2MmYtN2FiNDcxOTUyYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bEuho4JAuGVhacC+2HqTNAi5HLwMF6mHNPJ RgYUUJrIi9U6A2FrXQbJWyBlWbxu4ar7o2qTAjORv9zNA0cjs+tI5fMox7GXea63 pACzkNBGWbWpxxmirgTXzTbMh95uX6dNbs7ipBWm7trmHXMq+nbN5BjX6z6LNb9G 7qFx6xTj7zyw7NF3H4WeNDM2fULgqKvch9LfJmPelTK1nKEwebnqQAWnZSl1hC1o o2VWq3qXsmZS133jjVdmKucU2HK2BfmLySLIVrzjPyJWL3U+DkuOg5bqx6KzD8Oe fdvDlDG2x2/dhWeASAYzmtGRCNde7rZSx/rLT3NF/mxhkAxIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUbjcovJBoiSSdJbHKH+RPuDMEMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTMxMTJlNWUtYzA0OS0z NjY0LWJkNjMtYTg5NDMwZTVjNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/Rpm9xNdKr2fkGQqsatqTRKgK55XwoV5DnaQ8d+YINxmDw+VOL/O9T eYgNQb3YS0FG1YE79l4C+Mg6wq8KCBt9sbgmc/krijU8lrQMFKavEJlSKMA2sQ2U biOcGkRnYPBWnx615EjRKCJuTtYj+tjcT0YgGvH5QoI9/l/2pw+d5i90EW1T20A+ ifJCA5Kvo5W0SmclgCHDlRYrW16P1xqTDnPmoa+Y6EhOJMwMeQIMZQYVZCojuj3D HV84heEjU0uHxF6Cipt526jjclKxc2mC2HkMzHEax3Sp7PBFSQGZz8So0J2gEJPI y+BIkKOmCBNg7XTuMd4RiQDk/ItQLE4= -----END CERTIFICATE-----Generated at Mon Apr 28 10:01:35 2025 by rpki-client