$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d78145d0-28b9-3426-b264-bb4ba91f0d02.roa File: d78145d0-28b9-3426-b264-bb4ba91f0d02.roa (raw, json) Hash identifier: LTplIbjDVGNGsXbjURbjLw8axemKrPMSzg/ZoIp0RWw= Subject key identifier: 58:FE:68:14:94:11:83:45:BB:47:5B:64:D4:CD:DA:41:60:47:E0:68 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849929486952CE50CA221A10B00 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d78145d0-28b9-3426-b264-bb4ba91f0d02.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 98.253.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:86:95:2c:e5:0c:a2:21:a1:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=ce50474a-991c-469d-aa98-0fc5f2ee0aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:73:0d:2d:94:1d:77:46:b9:4a:33:c3:97:c9: c1:45:ba:ba:dd:d0:b9:e8:77:65:18:49:55:bc:f8: 08:08:1c:3c:ed:dc:b1:38:04:9b:24:6e:7a:b9:78: 16:57:9a:21:7b:c6:8a:00:a8:d4:e7:15:2b:e2:37: 7e:58:17:e1:73:1b:98:70:bd:f2:63:4b:c1:3e:a1: da:ff:6e:c2:e2:3a:fc:40:d5:e6:69:ce:c3:c5:84: a2:39:ad:8e:b7:ac:ce:85:c3:2e:03:7d:66:95:db: a1:93:e9:d0:d7:15:c8:d6:fe:5a:ea:0e:96:46:44: af:4f:46:2c:78:6e:c7:d5:59:28:7e:36:a6:1d:23: f4:0b:44:3f:85:ff:b5:56:66:7b:7e:c3:2f:44:35: 0c:ad:47:3b:24:77:f3:ab:dc:e0:6b:4e:ef:13:0f: 96:c8:77:e5:f6:44:a9:83:8f:6d:10:58:d4:45:a3: 24:69:2e:e0:7c:cf:89:fe:fd:8d:3b:2b:79:b1:7b: 54:fb:c4:64:3e:88:2b:28:b5:71:16:cc:de:45:27: 94:21:c9:cc:8a:48:e9:59:de:a7:46:18:a2:d6:4d: 00:99:a9:04:a9:25:d3:b9:c7:db:26:67:c3:0f:04: 06:ec:f7:c4:42:f4:28:ab:10:6d:5e:21:bc:91:36: 3b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FE:68:14:94:11:83:45:BB:47:5B:64:D4:CD:DA:41:60:47:E0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d78145d0-28b9-3426-b264-bb4ba91f0d02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.253.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:c0:ca:d1:ae:3d:34:14:de:fc:f8:ee:eb:83:47:03:58:39: fc:68:6d:61:17:06:52:fd:7c:f6:5a:ce:a4:bd:e2:01:c8:ee: 87:34:30:fc:94:e7:89:10:35:0c:d6:d3:5b:21:a3:09:e8:56: f1:23:e8:3d:8d:c1:74:08:de:5e:cd:25:d0:02:9f:cf:09:d0: aa:e6:7e:fc:53:db:02:b9:47:c4:9e:a4:16:37:7e:db:f1:71: 26:ec:d9:c0:c4:81:0d:03:cd:4f:1f:8e:98:bb:b2:7d:7b:e3: 29:31:76:15:35:3e:89:86:4b:5d:8d:02:48:db:99:44:f3:ab: 5d:0e:12:b1:23:55:96:e5:bf:55:eb:ed:b2:83:75:a5:fe:53: 60:d1:bf:bd:2e:88:ac:b4:d8:5a:29:1a:98:25:03:13:2f:bc: d7:a1:d9:a8:98:18:ce:52:4d:06:5c:88:77:29:09:87:00:f0: 93:a9:f8:e4:07:95:02:d3:ac:1b:d6:3f:b4:22:97:b6:a7:aa: 9a:63:76:89:2c:97:f8:3a:c8:fc:77:88:fd:5c:57:88:08:83: c4:b6:cb:23:c6:4e:d4:24:6a:d2:08:09:18:4b:a9:c6:eb:9e: a0:75:dc:9c:4f:cb:6b:15:f7:32:4a:1f:62:8f:d1:d5:db:e0: ec:15:19:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIaVLOUMoiGhCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk Y2U1MDQ3NGEtOTkxYy00NjlkLWFhOTgtMGZjNWYyZWUwYWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHMNLZQdd0a5SjPDl8nBRbq63dC56HdlGElV vPgICBw87dyxOASbJG56uXgWV5ohe8aKAKjU5xUr4jd+WBfhcxuYcL3yY0vBPqHa /27C4jr8QNXmac7DxYSiOa2Ot6zOhcMuA31mlduhk+nQ1xXI1v5a6g6WRkSvT0Ys eG7H1VkofjamHSP0C0Q/hf+1VmZ7fsMvRDUMrUc7JHfzq9zga07vEw+WyHfl9kSp g49tEFjURaMkaS7gfM+J/v2NOyt5sXtU+8RkPogrKLVxFszeRSeUIcnMikjpWd6n Rhii1k0AmakEqSXTucfbJmfDDwQG7PfEQvQoqxBtXiG8kTY7IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj+aBSUEYNFu0dbZNTN2kFgR+BoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDc4MTQ1ZDAtMjhiOS0z NDI2LWIyNjQtYmI0YmE5MWYwZDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYv2IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvAytGuPTQU3vz47uuDRwNYOfxobWEXBlL9fPZazqS94gHI7oc0MPyU 54kQNQzW01shownoVvEj6D2NwXQI3l7NJdACn88J0KrmfvxT2wK5R8SepBY3ftvx cSbs2cDEgQ0DzU8fjpi7sn174ykxdhU1PomGS12NAkjbmUTzq10OErEjVZblv1Xr 7bKDdaX+U2DRv70uiKy02FopGpglAxMvvNeh2aiYGM5STQZciHcpCYcA8JOp+OQH lQLTrBvWP7Qil7anqppjdoksl/g6yPx3iP1cV4gIg8S2yyPGTtQkatIICRhLqcbr nqB13JxPy2sV9zJKH2KP0dXb4OwVGZ8= -----END CERTIFICATE-----Generated at Sun Apr 27 10:33:53 2025 by rpki-client