$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a765f21a-3d58-308e-a7e9-da3ec8b75d98.roa File: a765f21a-3d58-308e-a7e9-da3ec8b75d98.roa (raw, json) Hash identifier: XHFLawUaRJ5xTMyCz4IzsDgLOSOzLc8fgJC71eRv40Y= Subject key identifier: 8F:73:46:44:38:83:61:BA:04:1C:75:E7:57:F0:3F:62:37:44:4D:FE Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8066C1C177D2619684400 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a765f21a-3d58-308e-a7e9-da3ec8b75d98.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.195.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:06:6c:1c:17:7d:26:19:68:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=2e5ea3b9-8b5a-4671-bded-27306eb6d2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:7b:27:14:98:04:3b:56:e7:c8:ab:59:f3: e0:87:ad:fd:14:06:3f:76:17:38:0c:f5:07:73:fc: 8d:40:ad:5b:0c:35:25:e5:ca:44:70:3a:d7:80:07: 52:54:b2:a9:2c:9b:bf:04:a2:6e:3f:f7:94:48:05: 28:f4:aa:20:64:a7:22:b1:2a:22:b1:51:c4:b4:7c: 6e:58:21:64:2f:11:8a:0d:a6:4e:fe:61:36:e5:d9: a3:6a:34:50:20:1c:00:fe:91:98:c5:1b:03:8d:7a: 46:c0:98:13:77:7e:76:15:8f:21:3b:f2:84:0f:18: 2f:fc:56:06:38:62:0d:6d:00:48:ab:ef:f5:6f:9a: 88:10:9d:81:21:94:15:4d:02:e4:28:f2:58:c0:db: 72:26:9a:21:76:ad:be:c1:19:7a:ef:3b:7a:30:1b: 29:55:1d:90:4e:91:c1:30:68:ba:3e:9f:f7:33:ab: 50:fb:29:89:a7:bd:a3:fe:c6:c3:f6:73:c1:23:03: 3f:c5:b3:31:8d:4f:b2:9a:3a:50:a2:5e:ef:90:99: 65:12:1e:42:b7:fe:f8:df:12:c5:73:9d:cf:1f:45: 38:e9:a8:4f:77:8c:b5:8f:f6:18:27:02:ef:03:2d: 7a:4c:b9:45:b2:c8:90:ee:f4:3a:6d:97:1e:73:fe: ff:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:73:46:44:38:83:61:BA:04:1C:75:E7:57:F0:3F:62:37:44:4D:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a765f21a-3d58-308e-a7e9-da3ec8b75d98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.195.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:ab:25:a6:28:bb:95:86:de:02:32:5b:67:4e:45:4f:93:1b: 9a:4a:a9:25:d6:7d:3c:08:f7:21:8d:5d:5b:cb:7f:f3:71:4d: 30:c1:53:f6:ff:91:3e:1c:2d:d2:f5:a6:6a:7d:71:80:5a:99: 07:fa:62:d9:dc:e8:1d:7b:5c:21:71:b9:fe:7b:6f:e0:69:15: 11:53:71:d3:09:4a:a6:05:a0:5d:b6:6d:85:56:f1:03:20:9e: fc:1f:98:11:5a:ac:79:98:64:1b:93:61:8a:4e:cd:42:a0:3c: ec:e3:d9:e5:9d:fa:bb:81:86:8e:5e:8d:86:dc:de:67:b2:bb: 38:98:f9:f3:84:8e:ec:7e:13:98:2f:88:03:c5:c8:05:ad:43: 21:60:f0:6e:4d:2f:b7:91:6b:4a:f4:8a:98:ce:36:89:f2:c9: 6b:b3:6c:8d:02:f9:d2:43:83:b0:bc:ff:ee:bb:83:40:28:cc: 8d:79:87:2d:51:57:89:de:9f:16:32:a9:1c:d7:95:8a:0c:60: f0:d1:a4:db:30:3b:26:af:21:b0:1f:a0:53:3f:d7:70:ab:da: e9:50:79:96:62:62:b2:d6:8f:29:f9:d9:54:d7:a3:54:2b:38: 56:da:d1:5e:d7:18:e9:b1:69:72:a3:82:3c:c5:b0:b1:f0:ef: 62:de:c5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+AZsHBd9JhloRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MmU1ZWEzYjktOGI1YS00NjcxLWJkZWQtMjczMDZlYjZkMmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPV7JxSYBDtW58irWfPgh639FAY/dhc4DPUH c/yNQK1bDDUl5cpEcDrXgAdSVLKpLJu/BKJuP/eUSAUo9KogZKcisSoisVHEtHxu WCFkLxGKDaZO/mE25dmjajRQIBwA/pGYxRsDjXpGwJgTd352FY8hO/KEDxgv/FYG OGINbQBIq+/1b5qIEJ2BIZQVTQLkKPJYwNtyJpohdq2+wRl67zt6MBspVR2QTpHB MGi6Pp/3M6tQ+ymJp72j/sbD9nPBIwM/xbMxjU+ymjpQol7vkJllEh5Ct/743xLF c53PH0U46ahPd4y1j/YYJwLvAy16TLlFssiQ7vQ6bZcec/7/jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9zRkQ4g2G6BBx151fwP2I3RE3+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTc2NWYyMWEtM2Q1OC0z MDhlLWE3ZTktZGEzZWM4Yjc1ZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYsPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANerJaYou5WG3gIyW2dORU+TG5pKqSXWfTwI9yGNXVvLf/NxTTDBU/b/ kT4cLdL1pmp9cYBamQf6Ytnc6B17XCFxuf57b+BpFRFTcdMJSqYFoF22bYVW8QMg nvwfmBFarHmYZBuTYYpOzUKgPOzj2eWd+ruBho5ejYbc3meyuziY+fOEjux+E5gv iAPFyAWtQyFg8G5NL7eRa0r0ipjONonyyWuzbI0C+dJDg7C8/+67g0AozI15hy1R V4nenxYyqRzXlYoMYPDRpNswOyavIbAfoFM/13Cr2ulQeZZiYrLWjyn52VTXo1Qr OFba0V7XGOmxaXKjgjzFsLHw72LexVY= -----END CERTIFICATE-----Generated at Sun Apr 27 23:00:56 2025 by rpki-client