$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa File: 425a6408-7e87-3b89-9b62-98c8b27a4d93.roa (raw, json) Hash identifier: HV6LG7R3O2Ka67WlJkFPw/0xOOea5MOIlF8dwyegF7s= Subject key identifier: E2:87:E2:01:7C:D4:5D:D1:C7:C9:A7:E4:D7:3C:EA:1C:10:C3:82:48 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F43285849689AA3C80D239CA542F31880 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa Signing time: Fri 04 Apr 2025 00:09:28 +0000 ROA not before: Fri 04 Apr 2025 00:09:28 +0000 ROA not after: Thu 03 Jul 2025 00:09:28 +0000 asID: 395886 IP address blocks: 98.158.28.0/24 maxlen: 24 98.158.29.0/24 maxlen: 24 98.158.30.0/24 maxlen: 24 98.158.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:9a:a3:c8:0d:23:9c:a5:42:f3:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Apr 4 00:09:28 2025 GMT Not After : Jul 3 00:09:28 2025 GMT Subject: CN=f1ba3614-908b-412d-876b-459f517b2bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:29:61:29:6f:4d:37:87:38:e9:97:ba:84:2a: 8b:80:ad:33:8c:08:61:83:db:94:b7:36:2e:7c:35: c2:e7:eb:0e:0a:8d:96:d9:ce:6c:f0:1f:98:5f:4c: 79:0a:a7:65:5d:87:da:cf:f5:ad:b0:66:d8:c7:ad: f8:a7:3e:44:59:4c:d6:67:a5:d7:86:27:53:c2:42: 0f:04:9c:f7:fa:50:a2:4b:30:86:e0:b5:bc:88:43: 1b:a3:74:a7:70:29:76:27:64:b9:47:19:ff:5e:cd: 76:c1:2f:d9:c4:b2:c6:4c:7a:14:50:d3:5d:59:5f: 0c:66:67:d8:20:6d:6e:9e:cc:00:58:12:14:90:cc: 7e:13:00:67:de:a5:68:22:3e:ce:1d:2c:28:f0:0b: 82:65:20:5e:26:3e:fa:f7:7a:94:54:77:22:15:da: 77:a4:cd:6d:12:a5:5b:2b:23:d3:ac:d7:76:e3:9c: 51:3d:27:9b:70:63:ee:6d:80:38:1b:8e:0d:0e:74: 85:24:89:b3:0b:62:ec:99:48:9b:97:fd:f1:69:8e: 4d:81:54:92:73:e4:b9:03:0b:1b:fa:42:48:3c:43: c0:27:8f:ae:86:6e:af:cf:17:fb:90:52:8f:af:3f: ba:28:19:9c:ca:2d:8e:7b:df:3b:55:9f:84:51:6f: 7c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:87:E2:01:7C:D4:5D:D1:C7:C9:A7:E4:D7:3C:EA:1C:10:C3:82:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/425a6408-7e87-3b89-9b62-98c8b27a4d93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:05:b8:7a:09:0f:72:c2:d2:94:1e:7f:67:ab:9e:c0:29:f1: 7a:2b:87:54:c4:60:53:f0:ec:9b:75:f8:85:93:f3:c1:b1:59: 99:69:6f:cb:0d:dd:cb:37:94:58:62:d0:d4:13:7e:d5:99:cc: e7:e7:e6:7f:9b:48:94:f8:d3:58:63:93:59:e7:b4:d4:86:3c: aa:11:15:11:8b:85:b6:66:bf:7c:86:77:b8:cd:6c:e5:78:88: a9:94:68:7b:6e:a5:88:7e:1a:89:52:48:99:3d:00:7f:6b:a8: 42:4c:dc:c3:06:bd:ff:83:f7:37:3a:2e:7e:00:01:d9:b7:31: d0:c7:10:57:f5:1d:69:65:f0:ba:04:cd:48:c7:16:6d:67:78: 7d:e6:56:ce:84:ff:c8:97:17:c4:ae:f3:9a:74:89:b3:bc:73: 78:13:cf:e4:97:9e:c3:7e:54:6d:6a:28:62:27:ab:da:21:4e: 8b:63:27:a3:d3:28:4f:ed:b2:31:72:7d:f2:e4:53:3f:28:b1: f1:e6:d7:13:37:68:da:94:fb:c9:49:d9:ef:29:4b:c4:5f:58: 16:cb:64:50:f2:84:2c:04:b6:5e:b9:ce:17:29:46:c7:80:24: c7:5b:ec:b7:ff:bb:cb:f7:dd:56:8e:06:7c:c8:45:70:f9:ec: cc:40:da:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElomqPIDSOcpULzGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDQwNDAwMDkyOFoXDTI1MDcwMzAwMDkyOFowLzEtMCsGA1UEAxMk ZjFiYTM2MTQtOTA4Yi00MTJkLTg3NmItNDU5ZjUxN2IyYmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApylhKW9NN4c46Ze6hCqLgK0zjAhhg9uUtzYu fDXC5+sOCo2W2c5s8B+YX0x5CqdlXYfaz/WtsGbYx634pz5EWUzWZ6XXhidTwkIP BJz3+lCiSzCG4LW8iEMbo3SncCl2J2S5Rxn/Xs12wS/ZxLLGTHoUUNNdWV8MZmfY IG1unswAWBIUkMx+EwBn3qVoIj7OHSwo8AuCZSBeJj7693qUVHciFdp3pM1tEqVb KyPTrNd245xRPSebcGPubYA4G44NDnSFJImzC2LsmUibl/3xaY5NgVSSc+S5Awsb +kJIPEPAJ4+uhm6vzxf7kFKPrz+6KBmcyi2Oe987VZ+EUW98hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKH4gF81F3Rx8mn5Nc86hwQw4JIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvNDI1YTY0MDgtN2U4Ny0z Yjg5LTliNjItOThjOGIyN2E0ZDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAFuHoJD3LC0pQef2ernsAp8Xorh1TEYFPw7Jt1+IWT88GxWZlpb8sN 3cs3lFhi0NQTftWZzOfn5n+bSJT401hjk1nntNSGPKoRFRGLhbZmv3yGd7jNbOV4 iKmUaHtupYh+GolSSJk9AH9rqEJM3MMGvf+D9zc6Ln4AAdm3MdDHEFf1HWll8LoE zUjHFm1neH3mVs6E/8iXF8Su85p0ibO8c3gTz+SXnsN+VG1qKGInq9ohTotjJ6PT KE/tsjFyffLkUz8osfHm1xM3aNqU+8lJ2e8pS8RfWBbLZFDyhCwEtl65zhcpRseA JMdb7Lf/u8v33VaOBnzIRXD57MxA2jI= -----END CERTIFICATE-----Generated at Thu May 1 05:00:03 2025 by rpki-client