$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa File: e9e39f37-1286-3597-960c-6c5f44ec4d30.roa (raw, json) Hash identifier: W5N5zEnlcLpZanx5t5LWsZIucpHFiLTU4zURgzB5eTo= Subject key identifier: 92:F4:48:DA:8C:B4:E5:B9:A9:36:56:04:28:18:6A:B2:D3:C7:A4:81 Certificate issuer: /CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Certificate serial: 010D0C9F4328584917DC291C3D303F651101D000 Authority key identifier: B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 32133 IP address blocks: 98.124.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:29:1c:3d:30:3f:65:11:01:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=906cbc91-cfe9-4d15-8a13-e3d828c0469c Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=49451de6-0970-49a4-b99d-bada51f48aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f8:fc:5d:d2:23:b3:a3:c6:ab:c3:45:4a:bc: 04:cd:1e:e5:a4:b8:47:e4:5b:91:c9:41:31:9f:4c: e6:34:42:3a:05:e3:a5:e4:d4:8a:6e:52:4e:bd:f0: e8:b8:2e:be:e8:e7:2c:08:b4:52:cc:3c:b5:b2:6f: dd:69:fe:8f:17:5a:33:cc:dc:9f:e3:87:3d:d1:a4: 79:fd:df:52:80:0a:d8:f7:90:62:c8:26:c3:14:4b: 0f:10:24:76:f1:09:ef:88:56:dc:48:7a:dd:19:f7: f1:24:9f:88:53:87:57:b6:25:7a:e4:11:55:2d:0a: 91:d1:47:0b:de:b3:27:48:02:bc:6f:85:16:a3:08: 45:96:fc:0e:3d:18:dd:83:4c:4d:c1:d5:4b:8b:f0: 33:fd:91:cf:ae:57:c9:c7:b0:5b:e2:39:8e:5f:bb: 98:60:66:80:47:2c:03:1b:19:3b:b4:d7:c0:11:a6: 40:dc:fe:2b:e6:1d:aa:52:a9:64:6e:b1:1c:26:fc: e6:13:06:43:26:6c:6f:c2:b6:13:48:0c:38:78:40: b1:0a:e5:6d:06:30:92:d7:b8:d4:a1:93:4e:fa:d3: 1d:c6:74:80:a8:4c:48:2e:92:02:05:70:57:40:95: f8:d9:e1:1f:3c:d7:72:65:a9:91:a0:f3:7c:21:2f: 13:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F4:48:DA:8C:B4:E5:B9:A9:36:56:04:28:18:6A:B2:D3:C7:A4:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/e9e39f37-1286-3597-960c-6c5f44ec4d30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c/906cbc91-cfe9-4d15-8a13-e3d828c0469c.crl X509v3 Authority Key Identifier: keyid:B4:CD:BA:12:A5:E6:57:6B:C1:2A:78:28:52:1E:B8:C5:C2:84:62:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/906cbc91-cfe9-4d15-8a13-e3d828c0469c.cer sbgp-ipAddrBlock: critical IPv4: 98.124.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:62:88:22:80:b8:db:f4:5f:69:f3:5b:53:20:60:bc:ee:21: ce:0c:7a:c2:17:14:cf:75:7f:6f:f3:2c:c6:42:e1:72:3a:42: 3e:48:9f:2e:ac:09:47:58:31:59:09:95:7d:97:a8:8b:6a:1c: 2a:af:85:09:d0:a1:36:85:6f:4f:ca:ac:1b:6b:6b:0f:9d:81: c5:d8:c0:9d:3f:44:b4:f4:d9:25:7d:0d:a8:6b:90:1c:64:07: 92:4b:08:51:71:73:2e:cd:eb:4e:5e:da:b9:71:5b:53:6e:cf: bb:8b:10:9b:8c:35:e0:09:f0:c2:de:30:9c:91:4a:dc:a6:fe: bc:4d:5c:99:e6:4c:07:82:7e:77:1d:42:98:05:88:00:73:36: 8d:7d:11:e5:8a:e6:d9:5c:96:8f:35:e7:96:f1:78:f0:7e:be: 4e:8d:f7:3c:43:fd:fa:da:a0:85:8d:af:38:81:05:8c:4a:25: 08:66:b1:9a:5e:af:7d:cd:f1:a5:32:0c:ae:80:23:45:f6:27: 17:ef:ff:8f:50:58:42:59:08:2d:ea:82:0f:03:06:69:dd:6b: 1f:21:93:72:b2:d6:6b:f9:cc:fd:a1:cc:e4:a4:d6:1d:42:90: 0a:e1:38:3b:7e:ca:eb:69:b1:79:c0:cb:6f:f0:79:f7:1d:69: 4b:04:c8:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CkcPTA/ZREB0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA2Y2JjOTEtY2ZlOS00ZDE1LThhMTMtZTNkODI4YzA0 NjljMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NDk0NTFkZTYtMDk3MC00OWE0LWI5OWQtYmFkYTUxZjQ4YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPj8XdIjs6PGq8NFSrwEzR7lpLhH5FuRyUEx n0zmNEI6BeOl5NSKblJOvfDouC6+6OcsCLRSzDy1sm/daf6PF1ozzNyf44c90aR5 /d9SgArY95BiyCbDFEsPECR28QnviFbcSHrdGffxJJ+IU4dXtiV65BFVLQqR0UcL 3rMnSAK8b4UWowhFlvwOPRjdg0xNwdVLi/Az/ZHPrlfJx7Bb4jmOX7uYYGaARywD Gxk7tNfAEaZA3P4r5h2qUqlkbrEcJvzmEwZDJmxvwrYTSAw4eECxCuVtBjCS17jU oZNO+tMdxnSAqExILpICBXBXQJX42eEfPNdyZamRoPN8IS8TqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL0SNqMtOW5qTZWBCgYarLTx6SBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZj YmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4MjhjMDQ2OWMvZTllMzlmMzctMTI4Ni0z NTk3LTk2MGMtNmM1ZjQ0ZWM0ZDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTA2Y2JjOTEtY2ZlOS00ZDE1LThh MTMtZTNkODI4YzA0NjljLzkwNmNiYzkxLWNmZTktNGQxNS04YTEzLWUzZDgyOGMw NDY5Yy5jcmwwHwYDVR0jBBgwFoAUtM26EqXmV2vBKngoUh64xcKEYhUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85MDZjYmM5MS1jZmU5LTRkMTUtOGExMy1lM2Q4 MjhjMDQ2OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYnzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFiiCKAuNv0X2nzW1MgYLzuIc4MesIXFM91f2/zLMZC4XI6Qj5Iny6s CUdYMVkJlX2XqItqHCqvhQnQoTaFb0/KrBtraw+dgcXYwJ0/RLT02SV9DahrkBxk B5JLCFFxcy7N605e2rlxW1Nuz7uLEJuMNeAJ8MLeMJyRStym/rxNXJnmTAeCfncd QpgFiABzNo19EeWK5tlclo8155bxePB+vk6N9zxD/fraoIWNrziBBYxKJQhmsZpe r33N8aUyDK6AI0X2Jxfv/49QWEJZCC3qgg8DBmndax8hk3Ky1mv5zP2hzOSk1h1C kArhODt+yutpsXnAy2/wefcdaUsEyAU= -----END CERTIFICATE-----Generated at Mon Apr 28 09:08:22 2025 by rpki-client