$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2d51299-2b5c-36ac-9c42-b014630e2676.roa File: c2d51299-2b5c-36ac-9c42-b014630e2676.roa (raw, json) Hash identifier: pE+wwFhmA7hSAk/f5MEGEhWY9MlsRk651FCGIrttS8g= Subject key identifier: D4:76:5E:10:92:80:E1:B7:47:83:00:60:53:6F:6B:24:14:19:DF:79 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285848F4F8168B1C406408482CFBC0 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2d51299-2b5c-36ac-9c42-b014630e2676.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 33662 IP address blocks: 98.39.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:16:8b:1c:40:64:08:48:2c:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=91a26808-f7f2-4936-ae66-21a3eb68e39e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e6:62:bc:18:6f:73:ae:e6:17:4f:7c:83:82: b0:30:65:3c:38:3e:84:56:92:7c:36:f1:93:d8:a3: ae:5c:9c:88:88:8e:c2:74:87:cf:76:ff:56:36:7b: 88:2d:4b:9f:97:fb:81:b4:61:96:b0:ab:7c:76:23: f1:99:a1:89:63:60:1a:29:6f:c4:84:73:b7:1c:7f: 22:7c:f6:68:2a:c9:0b:98:a0:5d:de:e7:28:31:69: 28:4a:2a:08:21:09:d7:7a:7b:5b:8d:34:89:ca:e2: 27:c8:a5:99:cd:8e:54:be:6f:52:a4:db:a7:6a:cc: 58:2d:82:16:6c:55:b4:11:04:d4:94:46:ec:1a:cb: 02:73:e2:07:27:11:fe:05:6e:6b:70:6f:b4:3b:cb: 68:68:ae:73:ff:51:02:3c:8b:5f:21:cd:23:17:a3: 6a:65:e3:c6:d9:90:44:c3:61:17:ab:2f:4e:ca:2b: 6e:46:00:5c:ed:65:16:b4:4e:58:43:65:0c:23:d4: 8c:c5:fc:f8:d5:1b:c7:21:13:2b:44:54:a8:7e:09: 68:e3:51:99:b1:5c:53:c4:b6:08:a9:e4:38:71:e3: 04:e6:22:ed:d2:56:45:6a:87:9e:1a:8e:5e:81:1f: 8a:a0:e2:d0:d2:6a:db:5b:e2:4b:83:0f:8d:76:8b: 80:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:76:5E:10:92:80:E1:B7:47:83:00:60:53:6F:6B:24:14:19:DF:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2d51299-2b5c-36ac-9c42-b014630e2676.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.39.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:89:b0:b1:2d:ea:58:a8:a1:61:b5:b2:13:fe:2a:8f:15:a3: 76:64:ee:ef:76:6e:f4:5c:a0:df:3e:60:61:95:8f:17:01:53: c1:54:f2:95:9a:69:6b:9e:2e:bf:03:24:f4:0c:43:54:ee:64: 46:f1:27:a6:36:38:ff:f5:5f:41:ad:0b:58:82:04:d0:c7:de: de:e4:47:77:e8:d2:ec:53:fb:04:e2:0a:74:a9:12:12:f7:a0: cc:e6:ea:6c:5b:9f:13:ce:b4:cc:ff:ff:c2:1e:2c:55:67:21: 07:ba:72:fb:28:09:00:54:d2:13:b7:14:87:92:9c:d9:fa:f7: 06:8e:d0:99:71:f5:a1:ed:ee:c2:11:94:fb:4d:4e:c0:a4:5d: bb:71:a5:9f:46:8a:3f:10:03:3c:e4:82:74:a9:34:ce:54:33: 0e:f3:a1:00:6e:85:73:80:2c:15:08:12:4a:c0:3d:8d:83:64: 3d:95:9b:a2:c3:ba:c0:1a:d7:3c:19:ac:5b:0b:34:64:45:63: 0a:22:0c:52:4a:4b:27:4e:04:8b:59:b1:db:17:04:30:7e:07: 37:30:48:50:69:dc:d6:ff:3b:17:3a:e2:97:6a:02:d7:d4:89: 22:f9:ed:82:17:42:45:04:39:2a:e9:07:5c:8c:d4:4c:a3:25: 99:54:9d:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+BaLHEBkCEgs+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OTFhMjY4MDgtZjdmMi00OTM2LWFlNjYtMjFhM2ViNjhlMzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOZivBhvc67mF098g4KwMGU8OD6EVpJ8NvGT 2KOuXJyIiI7CdIfPdv9WNnuILUufl/uBtGGWsKt8diPxmaGJY2AaKW/EhHO3HH8i fPZoKskLmKBd3ucoMWkoSioIIQnXentbjTSJyuInyKWZzY5Uvm9SpNunasxYLYIW bFW0EQTUlEbsGssCc+IHJxH+BW5rcG+0O8toaK5z/1ECPItfIc0jF6NqZePG2ZBE w2EXqy9OyituRgBc7WUWtE5YQ2UMI9SMxfz41RvHIRMrRFSofglo41GZsVxTxLYI qeQ4ceME5iLt0lZFaoeeGo5egR+KoOLQ0mrbW+JLgw+NdouAvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNR2XhCSgOG3R4MAYFNvayQUGd95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzJkNTEyOTktMmI1Yy0z NmFjLTljNDItYjAxNDYzMGUyNjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYifYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6JsLEt6liooWG1shP+Ko8Vo3Zk7u92bvRcoN8+YGGVjxcBU8FU8pWa aWueLr8DJPQMQ1TuZEbxJ6Y2OP/1X0GtC1iCBNDH3t7kR3fo0uxT+wTiCnSpEhL3 oMzm6mxbnxPOtMz//8IeLFVnIQe6cvsoCQBU0hO3FIeSnNn69waO0Jlx9aHt7sIR lPtNTsCkXbtxpZ9Gij8QAzzkgnSpNM5UMw7zoQBuhXOALBUIEkrAPY2DZD2Vm6LD usAa1zwZrFsLNGRFYwoiDFJKSydOBItZsdsXBDB+BzcwSFBp3Nb/Oxc64pdqAtfU iSL57YIXQkUEOSrpB1yM1EyjJZlUnbc= -----END CERTIFICATE-----Generated at Sun Apr 27 16:32:53 2025 by rpki-client