$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa File: 970d366d-574a-33ac-a079-81733774db4c.roa (raw, json) Hash identifier: wnArhrV6FeFTjM8bo45G0s4afphBFMpRhU3OTMvkB7Q= Subject key identifier: 83:BB:A3:89:F1:78:B5:E0:D9:06:90:07:4E:42:AC:64:45:0C:F3:F7 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584960B17B7B0663BB33CCBDB090 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa Signing time: Tue 01 Apr 2025 04:09:02 +0000 ROA not before: Tue 01 Apr 2025 04:09:02 +0000 ROA not after: Mon 30 Jun 2025 04:09:02 +0000 asID: 395886 IP address blocks: 98.158.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:b1:7b:7b:06:63:bb:33:cc:bd:b0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Apr 1 04:09:02 2025 GMT Not After : Jun 30 04:09:02 2025 GMT Subject: CN=2536f56e-8652-4c19-9bcb-712feb5b43d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cb:3c:26:e5:0a:d6:9f:e4:5b:da:ef:f2:79: 12:c6:a4:fb:56:8c:93:e9:87:3d:df:f9:0f:8a:fd: 7c:51:65:a2:5b:ae:c0:0d:18:73:92:42:e6:0e:bd: 85:57:89:13:a0:db:49:e6:ab:c4:6f:b0:dc:05:88: 81:99:9a:e3:75:85:b8:24:48:00:d0:6e:29:2d:1b: 1b:ad:92:12:b1:76:c3:8d:58:f3:2b:ef:c6:07:12: a7:28:4c:14:76:d2:4d:f3:44:af:8a:89:09:ef:8c: 00:ab:66:b5:68:13:82:3f:1a:37:12:7a:92:32:c7: 51:15:4c:53:ae:31:90:dd:cd:10:89:b5:24:16:20: b5:a4:2e:3d:99:8c:1d:57:0b:7c:0e:83:31:26:76: fa:eb:7a:60:ad:6e:76:53:d8:1c:6d:1b:36:56:0f: 71:f4:f2:c8:b2:01:a4:7c:d6:a7:ae:cf:91:db:e7: 6d:a9:1a:74:6d:ff:0d:6a:f0:01:41:c5:74:27:37: 4e:6e:e2:be:d7:c3:5e:5d:c1:6b:d1:17:04:c4:94: d8:89:f5:2b:40:cb:9c:e4:04:2c:51:b0:3b:9c:16: 57:b0:ec:30:c0:a1:9d:78:c2:bb:f5:61:a2:f5:8b: 85:b7:6e:de:85:2c:10:e4:e5:62:06:4b:82:c0:fc: 8b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BB:A3:89:F1:78:B5:E0:D9:06:90:07:4E:42:AC:64:45:0C:F3:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/970d366d-574a-33ac-a079-81733774db4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 98.158.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:c3:0c:bd:f6:cc:07:70:99:bb:ca:60:8f:e5:b8:3d:36:45: 4b:51:23:f4:6c:07:96:3d:44:92:1d:94:97:73:51:d8:19:f1: 80:67:64:26:1b:95:1b:e4:3e:60:70:ee:a7:67:2a:ee:fc:3f: e0:2d:e3:20:d5:1d:77:82:a0:e3:69:0f:17:04:13:60:8e:96: 28:25:6b:4d:7f:b6:79:e2:b2:9c:0a:42:25:74:c8:82:3b:42: 5b:18:f7:a9:05:d0:2e:89:e1:52:43:d1:c6:c4:63:e3:13:89: 20:4e:04:2c:16:95:4e:77:76:64:ae:fb:a7:c6:36:b7:73:8a: 31:cf:ed:a1:55:f1:0b:8f:7c:9c:ed:a2:9a:3b:6d:0a:16:47: 61:a6:e7:0e:9e:0e:35:52:4c:87:ee:3a:2c:6f:16:14:af:35: 03:d0:92:8c:bd:5f:3e:d7:65:6a:de:55:40:57:ed:09:5b:e1: 89:72:db:5f:d2:a4:c7:3a:90:1e:c8:70:a9:dd:c6:26:9c:30: 33:57:fc:26:7d:41:65:ae:80:77:3b:21:ba:dd:15:db:ac:25: cd:ab:22:77:69:75:cd:5e:ca:fc:18:ee:77:6a:68:f8:fd:30: e6:44:f3:aa:ac:7d:60:f5:0c:73:cc:ab:54:3b:cd:f8:b1:7e: 2e:18:cb:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgsXt7BmO7M8y9sJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI1MDQwMTA0MDkwMloXDTI1MDYzMDA0MDkwMlowLzEtMCsGA1UEAxMk MjUzNmY1NmUtODY1Mi00YzE5LTliY2ItNzEyZmViNWI0M2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcs8JuUK1p/kW9rv8nkSxqT7VoyT6Yc93/kP iv18UWWiW67ADRhzkkLmDr2FV4kToNtJ5qvEb7DcBYiBmZrjdYW4JEgA0G4pLRsb rZISsXbDjVjzK+/GBxKnKEwUdtJN80SviokJ74wAq2a1aBOCPxo3EnqSMsdRFUxT rjGQ3c0QibUkFiC1pC49mYwdVwt8DoMxJnb663pgrW52U9gcbRs2Vg9x9PLIsgGk fNanrs+R2+dtqRp0bf8NavABQcV0JzdObuK+18NeXcFr0RcExJTYifUrQMuc5AQs UbA7nBZXsOwwwKGdeMK79WGi9YuFt27ehSwQ5OViBkuCwPyLRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO7o4nxeLXg2QaQB05CrGRFDPP3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvOTcwZDM2NmQtNTc0YS0z M2FjLWEwNzktODE3MzM3NzRkYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzDDL32zAdwmbvKYI/luD02RUtRI/RsB5Y9RJIdlJdzUdgZ8YBnZCYb lRvkPmBw7qdnKu78P+At4yDVHXeCoONpDxcEE2COligla01/tnnispwKQiV0yII7 QlsY96kF0C6J4VJD0cbEY+MTiSBOBCwWlU53dmSu+6fGNrdzijHP7aFV8QuPfJzt opo7bQoWR2Gm5w6eDjVSTIfuOixvFhSvNQPQkoy9Xz7XZWreVUBX7Qlb4Yly21/S pMc6kB7IcKndxiacMDNX/CZ9QWWugHc7IbrdFdusJc2rIndpdc1eyvwY7ndqaPj9 MOZE86qsfWD1DHPMq1Q7zfixfi4Yy/w= -----END CERTIFICATE-----Generated at Tue Apr 29 22:51:26 2025 by rpki-client