$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baab61e0-fc7a-3999-8ab7-1ff698455b9e.roa File: baab61e0-fc7a-3999-8ab7-1ff698455b9e.roa (raw, json) Hash identifier: Kx4Q8yhIStOp4J8oxyUNG2YKdFxMUHkx0axbMQFh+7g= Subject key identifier: 40:E8:19:B6:A2:CA:46:2F:72:82:E5:47:9E:59:84:2A:43:95:4D:53 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D4327E528FB7CC16AA58C480 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baab61e0-fc7a-3999-8ab7-1ff698455b9e.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33662 IP address blocks: 98.201.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:32:7e:52:8f:b7:cc:16:aa:58:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9a302fd1-01ba-45a7-85ad-e5012de4a601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:36:c8:76:61:91:4c:3c:02:35:f7:54:ad:af: 61:a0:13:da:68:58:2b:71:4a:12:54:b1:bb:0f:16: c3:da:41:7f:d6:34:78:bd:2e:18:5b:41:ef:d3:f0: e7:25:00:a8:ea:45:7c:f7:0b:39:8c:e7:94:ca:26: e5:9e:19:f6:92:7f:ac:96:d9:8b:6e:77:0a:c5:ab: dd:1d:d6:2d:aa:a5:3a:1a:f7:4f:63:84:35:66:6e: 04:a7:a0:fa:7d:69:56:bd:1c:bf:6e:0e:29:2a:45: 5a:a4:2c:92:08:61:5d:ef:83:31:3e:91:b1:3f:de: 8c:4d:9f:e7:cf:91:92:0c:c7:10:ca:79:5e:0e:e3: c7:1e:9f:89:ed:fe:02:4e:6c:3c:bc:bf:fe:0c:c8: e0:c1:6b:09:6b:fd:07:1c:a0:74:9f:8a:57:31:93: 18:2a:f3:88:e1:7d:95:79:0b:ca:08:bc:71:e1:6d: 93:47:9f:57:6c:09:cc:49:d2:a9:b3:77:53:cd:d4: c7:ad:f4:d5:63:ef:4f:a4:75:fc:af:0b:29:8e:14: 2c:57:93:46:bc:9d:98:55:89:fd:e7:cb:a5:70:0a: ad:9b:fc:80:43:fe:b9:8e:6e:4b:02:ee:74:f1:82: a7:53:50:9d:a1:f8:85:03:e9:7b:3b:a7:01:52:5b: 12:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E8:19:B6:A2:CA:46:2F:72:82:E5:47:9E:59:84:2A:43:95:4D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/baab61e0-fc7a-3999-8ab7-1ff698455b9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.201.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:cd:d4:fd:37:9c:52:20:21:13:c2:34:09:53:b5:f2:7f:d2: 13:e8:d0:bd:d2:f9:7f:c7:b3:bd:a3:91:0e:27:89:9e:b8:13: 00:08:b1:5b:68:ce:82:3f:b6:76:4f:cf:8b:4c:2d:a8:62:c0: 61:ff:ed:ee:b2:8c:b7:23:f9:8c:40:b2:eb:b7:50:ad:c2:b0: 6b:03:58:a1:71:5f:76:77:d1:dd:b6:8d:0a:9e:50:78:db:3c: 71:3b:45:b9:1e:c0:83:0f:e2:1c:1d:88:ff:b4:96:f8:00:a6: d6:68:8d:ad:74:d9:81:13:a1:24:97:36:84:ec:c5:0e:81:4d: 35:c3:0a:bf:47:e6:d7:c8:22:67:6c:52:c4:aa:84:8e:eb:a7: 79:5d:5e:6e:68:3f:7a:e1:d5:70:d0:64:cc:9a:24:3e:c4:17: 8e:10:7f:78:13:eb:e1:13:53:d8:94:a7:9a:54:e6:d6:9f:12: 1c:44:2d:7b:56:b9:a9:ab:e3:03:a3:45:57:d0:76:cd:aa:36: 97:ce:98:0a:be:3d:18:07:21:34:b0:ae:a6:81:2a:45:42:29: 59:29:92:7d:c2:72:aa:38:d4:3d:1c:41:ae:18:fb:61:15:f0: e8:96:e8:97:5c:2e:f0:26:08:ed:ef:be:13:ae:fc:43:3e:38: 46:a1:33:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMn5Sj7fMFqpYxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OWEzMDJmZDEtMDFiYS00NWE3LTg1YWQtZTUwMTJkZTRhNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDbIdmGRTDwCNfdUra9hoBPaaFgrcUoSVLG7 DxbD2kF/1jR4vS4YW0Hv0/DnJQCo6kV89ws5jOeUyiblnhn2kn+sltmLbncKxavd HdYtqqU6GvdPY4Q1Zm4Ep6D6fWlWvRy/bg4pKkVapCySCGFd74MxPpGxP96MTZ/n z5GSDMcQynleDuPHHp+J7f4CTmw8vL/+DMjgwWsJa/0HHKB0n4pXMZMYKvOI4X2V eQvKCLxx4W2TR59XbAnMSdKps3dTzdTHrfTVY+9PpHX8rwspjhQsV5NGvJ2YVYn9 58ulcAqtm/yAQ/65jm5LAu508YKnU1CdofiFA+l7O6cBUlsS6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDoGbaiykYvcoLlR55ZhCpDlU1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmFhYjYxZTAtZmM3YS0z OTk5LThhYjctMWZmNjk4NDU1YjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYslVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrN1P03nFIgIRPCNAlTtfJ/0hPo0L3S+X/Hs72jkQ4niZ64EwAIsVto zoI/tnZPz4tMLahiwGH/7e6yjLcj+YxAsuu3UK3CsGsDWKFxX3Z30d22jQqeUHjb PHE7RbkewIMP4hwdiP+0lvgAptZoja102YEToSSXNoTsxQ6BTTXDCr9H5tfIImds UsSqhI7rp3ldXm5oP3rh1XDQZMyaJD7EF44Qf3gT6+ETU9iUp5pU5tafEhxELXtW uamr4wOjRVfQds2qNpfOmAq+PRgHITSwrqaBKkVCKVkpkn3Ccqo41D0cQa4Y+2EV 8OiW6JdcLvAmCO3vvhOu/EM+OEahM+Q= -----END CERTIFICATE-----Generated at Tue Jun 17 18:29:17 2025 by rpki-client