$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ab9b64-d223-3fc5-ba30-44592add83e1.roa File: a7ab9b64-d223-3fc5-ba30-44592add83e1.roa (raw, json) Hash identifier: eyVcwpzGRmhNDdwIFx2zCORHWiWjBon+HWwzsamdAUI= Subject key identifier: 50:DC:F9:8E:A9:20:F3:81:E8:4C:39:EF:AF:3E:59:F3:64:36:74:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F7D3A59769BD6BE1C02000 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ab9b64-d223-3fc5-ba30-44592add83e1.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33668 IP address blocks: 98.250.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:d3:a5:97:69:bd:6b:e1:c0:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=1b3b807b-ea18-42c4-830e-37f1f13646e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:0a:86:47:4f:55:7b:82:49:bb:be:a8:c7: 93:94:a0:7d:3d:86:41:dd:85:61:3c:18:f3:ac:d8: af:fe:8c:78:eb:19:f5:9a:34:02:60:28:61:3b:42: af:a3:24:cd:ee:8c:e7:f6:02:d5:3e:48:7e:b4:d1: ab:2d:47:00:ed:a8:99:36:80:45:90:3a:3e:cb:26: f3:8b:39:53:04:52:d6:48:eb:7a:82:f8:eb:5a:e9: a5:ab:b3:01:59:f6:e0:0b:44:86:fb:3b:f7:d3:b3: e6:8c:ac:3a:5a:64:b7:c6:ed:b9:af:81:cb:11:09: e5:1e:ec:d3:09:f6:63:16:f1:df:01:55:a3:7e:39: b4:2e:0e:ef:2b:45:93:ef:5a:97:8f:7b:2d:bd:0e: 3e:a8:31:17:4d:e2:15:9f:c1:2e:47:c5:5d:40:b7: b7:0b:25:c9:82:03:4d:75:f5:b9:e5:de:01:db:dd: 88:ed:ae:f8:0b:3d:bd:1f:7f:74:7f:98:74:0b:89: ba:f9:df:7a:4d:07:52:7f:e4:fa:dc:90:6d:51:60: 79:c1:c6:9a:db:d0:58:12:cb:cc:7c:d3:64:89:f0: 00:43:99:1c:d3:4f:28:aa:e8:de:d0:1c:22:86:d3: ec:0c:45:70:15:b2:d2:9c:85:fe:25:bc:53:23:20: 43:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DC:F9:8E:A9:20:F3:81:E8:4C:39:EF:AF:3E:59:F3:64:36:74:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a7ab9b64-d223-3fc5-ba30-44592add83e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.250.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:fc:cc:9f:d8:95:15:d5:a6:1a:da:37:b8:06:cb:bd:6b:a1: 5a:49:8c:12:e4:a8:db:d3:01:b5:c8:ca:98:e6:1e:8f:f3:7e: ba:5d:de:b2:4e:5b:0a:3a:4b:f0:fe:22:60:7b:20:aa:39:ed: 6d:7f:a2:a0:ad:0a:c3:41:0f:57:43:97:a3:e3:34:7f:ae:47: b6:52:7c:ab:52:68:a0:75:28:dc:7e:64:28:79:50:d8:3d:b0: 7b:53:f1:25:7c:54:ac:97:4d:c1:54:b7:b9:e6:18:9c:22:f7: 29:4b:25:23:d4:25:58:aa:7f:fb:2f:52:93:47:37:e0:73:bb: e3:3f:4f:8c:fd:56:23:39:f9:8c:0a:4b:57:d6:44:7c:cc:be: 45:06:ff:da:3a:98:8e:ac:73:f2:d4:73:3a:af:b4:9c:cc:b6: 91:03:cb:e5:45:13:44:6d:28:50:9c:c2:33:95:71:77:f4:c6: 6e:8e:eb:8d:10:37:54:12:91:42:a0:83:fc:14:85:c3:b7:45: cb:ab:1e:e7:d8:24:1c:14:94:15:68:3b:8e:c5:06:fe:80:3a: 03:ee:ee:c8:f8:ac:35:6c:d0:bc:0c:be:35:5e:a7:ad:28:dd: b2:7e:ea:6f:1b:ea:b6:a5:48:b3:9e:73:9b:74:41:b8:c5:59: 37:e5:9f:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj099Oll2m9a+HAIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MWIzYjgwN2ItZWExOC00MmM0LTgzMGUtMzdmMWYxMzY0NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuoKhkdPVXuCSbu+qMeTlKB9PYZB3YVhPBjz rNiv/ox46xn1mjQCYChhO0KvoyTN7ozn9gLVPkh+tNGrLUcA7aiZNoBFkDo+yybz izlTBFLWSOt6gvjrWumlq7MBWfbgC0SG+zv307PmjKw6WmS3xu25r4HLEQnlHuzT CfZjFvHfAVWjfjm0Lg7vK0WT71qXj3stvQ4+qDEXTeIVn8EuR8VdQLe3CyXJggNN dfW55d4B292I7a74Cz29H390f5h0C4m6+d96TQdSf+T63JBtUWB5wcaa29BYEsvM fNNkifAAQ5kc008oquje0BwihtPsDEVwFbLSnIX+JbxTIyBDsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDc+Y6pIPOB6Ew5768+WfNkNnR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTdhYjliNjQtZDIyMy0z ZmM1LWJhMzAtNDQ1OTJhZGQ4M2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYvrcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJf8zJ/YlRXVphraN7gGy71roVpJjBLkqNvTAbXIypjmHo/zfrpd3rJO Wwo6S/D+ImB7IKo57W1/oqCtCsNBD1dDl6PjNH+uR7ZSfKtSaKB1KNx+ZCh5UNg9 sHtT8SV8VKyXTcFUt7nmGJwi9ylLJSPUJViqf/svUpNHN+Bzu+M/T4z9ViM5+YwK S1fWRHzMvkUG/9o6mI6sc/LUczqvtJzMtpEDy+VFE0RtKFCcwjOVcXf0xm6O640Q N1QSkUKgg/wUhcO3RcurHufYJBwUlBVoO47FBv6AOgPu7sj4rDVs0LwMvjVep60o 3bJ+6m8b6ralSLOec5t0QbjFWTfln7Q= -----END CERTIFICATE-----Generated at Sun Apr 27 17:57:09 2025 by rpki-client