$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa File: f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa (raw, json) Hash identifier: mJ2BrJ8Mv1JMT2yyLpU7uoiVFkh0DnWX4rVzy5nZTfQ= Subject key identifier: 3F:40:2D:08:BD:78:F3:89:1F:EC:C8:44:CE:F5:80:EB:5B:6B:CF:DD Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858499294837AF5498823C3F2E470 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 98.222.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:83:7a:f5:49:88:23:c3:f2:e4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=56bd29e6-f8e4-4672-ae0a-13c115d594f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:31:cf:29:92:aa:8f:88:2f:71:a9:34:31: e5:87:2c:50:49:c9:b7:a8:ec:d4:19:b9:d7:82:2b: 13:2a:57:6c:75:75:f5:78:5c:e4:f1:4c:fa:c7:d7: 29:c2:b1:c7:69:ae:cf:0c:b7:f2:74:7c:ca:f4:1c: a6:af:9d:05:88:20:24:a5:5d:aa:cd:c5:e6:a3:2d: d9:72:33:85:55:d6:d4:7e:02:32:21:24:a6:3e:39: 3e:30:7b:da:7c:ca:83:a8:6b:f8:3f:e5:f3:af:df: 15:73:aa:99:4e:98:b4:cb:66:e5:18:82:54:00:73: 4d:5f:63:59:99:03:a7:28:2c:c6:4b:9a:77:5e:7c: 48:6f:a6:83:dd:53:5e:36:7a:d5:48:59:7c:cd:8c: 43:cd:f1:73:ea:6b:2d:b1:12:f8:87:de:ac:11:0f: 3c:3a:00:da:ad:e2:ff:78:1c:6a:a1:07:03:be:d9: ed:fa:87:fb:b4:87:3f:06:60:94:6d:0c:c1:86:d8: 15:15:2c:f6:81:ff:c5:0a:21:ed:d1:d8:0f:56:47: 28:cd:28:45:7c:7a:50:d1:a6:b6:30:18:81:7d:61: 32:da:ba:91:f6:4e:f6:24:d0:be:27:09:4c:4c:d3: 02:e5:a0:90:51:d3:36:58:90:d1:d1:73:7d:ab:05: ca:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:40:2D:08:BD:78:F3:89:1F:EC:C8:44:CE:F5:80:EB:5B:6B:CF:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f2906e4d-a5bb-3eaa-b578-0a009c1d6100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.222.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:c7:86:ce:5b:c4:e3:a2:fc:2f:fe:71:e8:18:a9:52:f0:d6: b8:23:a0:67:a9:26:8e:1e:d8:23:e3:13:67:b1:48:1a:db:76: 35:86:0a:bb:90:80:53:1b:a3:f1:32:b5:80:ba:2d:4a:dc:0c: e9:3e:0f:63:db:ca:b4:ea:8a:b0:a4:52:e8:24:1e:ce:f0:cf: 0c:a9:81:39:3b:df:80:d7:d6:21:66:eb:7f:cc:30:b6:0e:9b: 33:a5:4f:f9:19:42:fa:dc:a3:7c:a5:d5:69:e7:2f:31:df:0c: 36:64:19:06:20:64:eb:98:19:b5:5b:4a:f9:19:59:79:1f:ff: 10:aa:c8:c7:25:11:25:1f:0c:47:3e:99:d6:e8:a8:65:50:dc: 69:ea:55:83:3e:6c:6b:63:0f:ca:1e:7e:76:a8:0c:29:0a:2c: 3c:01:ec:b4:57:50:c4:42:98:25:9c:83:34:cd:5f:1c:3d:59: 47:5e:e3:58:91:cf:92:a6:96:ad:41:aa:59:6c:c1:66:11:f3: 80:dc:80:6e:5a:ff:59:df:1a:c3:4f:16:5a:ee:41:de:b3:6f: ef:c7:e5:b1:25:8b:82:c5:1d:66:0d:5d:9c:44:c4:0c:46:83: d4:9c:24:e5:7e:fe:c9:9f:42:02:27:9e:5a:b8:f6:d2:5b:5c: ea:95:ca:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIN69UmII8Py5HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NTZiZDI5ZTYtZjhlNC00NjcyLWFlMGEtMTNjMTE1ZDU5NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/gxzymSqo+IL3GpNDHlhyxQScm3qOzUGbnX gisTKldsdXX1eFzk8Uz6x9cpwrHHaa7PDLfydHzK9Bymr50FiCAkpV2qzcXmoy3Z cjOFVdbUfgIyISSmPjk+MHvafMqDqGv4P+Xzr98Vc6qZTpi0y2blGIJUAHNNX2NZ mQOnKCzGS5p3XnxIb6aD3VNeNnrVSFl8zYxDzfFz6mstsRL4h96sEQ88OgDareL/ eBxqoQcDvtnt+of7tIc/BmCUbQzBhtgVFSz2gf/FCiHt0dgPVkcozShFfHpQ0aa2 MBiBfWEy2rqR9k72JNC+JwlMTNMC5aCQUdM2WJDR0XN9qwXKmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9ALQi9ePOJH+zIRM71gOtba8/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjI5MDZlNGQtYTViYi0z ZWFhLWI1NzgtMGEwMDljMWQ2MTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt5sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKzHhs5bxOOi/C/+cegYqVLw1rgjoGepJo4e2CPjE2exSBrbdjWGCruQ gFMbo/EytYC6LUrcDOk+D2PbyrTqirCkUugkHs7wzwypgTk734DX1iFm63/MMLYO mzOlT/kZQvrco3yl1WnnLzHfDDZkGQYgZOuYGbVbSvkZWXkf/xCqyMclESUfDEc+ mdboqGVQ3GnqVYM+bGtjD8oefnaoDCkKLDwB7LRXUMRCmCWcgzTNXxw9WUde41iR z5Kmlq1BqllswWYR84DcgG5a/1nfGsNPFlruQd6zb+/H5bEli4LFHWYNXZxExAxG g9ScJOV+/smfQgInnlq49tJbXOqVytc= -----END CERTIFICATE-----Generated at Sun Apr 27 20:37:40 2025 by rpki-client