$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa File: 28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa (raw, json) Hash identifier: g0Mb3KldrpMnEz/Uag2s2mbuLa0PBDbOI6Dd6kE5fLU= Subject key identifier: 39:CB:1F:DA:44:98:8B:20:0F:CF:C2:ED:BB:AB:40:D9:E5:7E:D8:50 Certificate issuer: /CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Certificate serial: 010D0C9F4328584A093A9FD1A34C97EA5EC46F80 Authority key identifier: 79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa Signing time: Sat 31 May 2025 13:01:03 +0000 ROA not before: Sat 31 May 2025 13:01:03 +0000 ROA not after: Fri 29 Aug 2025 13:01:03 +0000 asID: 4213 IP address blocks: 98.126.166.0/24 maxlen: 24 98.126.213.0/24 maxlen: 24 98.126.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:09:3a:9f:d1:a3:4c:97:ea:5e:c4:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf7c43e7-0571-4d08-b71a-8b930dda9aad Validity Not Before: May 31 13:01:03 2025 GMT Not After : Aug 29 13:01:03 2025 GMT Subject: CN=abd42a09-cd10-482f-9004-004d2ce6f8ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:80:e5:0f:ad:6b:54:76:dc:58:02:5d:bb:18: ad:0d:7b:18:c3:97:99:e5:bd:cb:dd:67:a1:07:2d: ca:8e:8d:3b:ca:08:de:81:f3:d2:d4:8f:a8:e2:f9: f0:da:02:40:32:6a:d3:7e:2f:4d:0f:72:67:48:35: b5:da:ff:b3:fc:1b:40:50:fc:15:a9:a7:2c:ac:f7: da:46:7d:9a:7a:07:1e:1b:39:d9:d8:9f:6e:65:82: 3f:2b:ae:a3:10:e4:00:47:b7:f5:cf:30:72:52:05: d2:b2:f7:65:36:40:29:28:51:5b:ce:01:1c:e2:2b: 93:6f:5a:42:c4:ef:ca:14:53:7a:03:ca:1b:af:83: 62:54:09:4f:45:c7:f8:da:4b:fe:19:d6:a2:d1:bd: 3b:9b:32:fd:e0:9e:5d:05:67:f9:b9:61:7f:f5:39: 39:18:16:20:6e:10:d5:af:8d:28:48:27:33:82:80: 5f:5d:f7:53:c0:0f:61:f7:60:53:0a:81:63:b1:68: b6:29:9f:e5:fb:b3:ca:91:b6:d2:4a:9b:01:ee:42: dc:7f:e4:cf:b2:69:a1:0a:2f:92:ef:82:b4:64:3d: 13:ea:b5:71:bb:96:5c:69:44:cd:86:e7:b8:fb:a5: 9d:50:70:21:0a:c1:b1:eb:24:bc:b7:27:9d:3d:e7: 15:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:CB:1F:DA:44:98:8B:20:0F:CF:C2:ED:BB:AB:40:D9:E5:7E:D8:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/28e1aa5c-6fcb-3342-8af1-898c8b653ea6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad/bf7c43e7-0571-4d08-b71a-8b930dda9aad.crl X509v3 Authority Key Identifier: keyid:79:9A:9F:EA:8D:05:18:92:60:86:70:C3:43:10:E3:27:21:E0:14:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bf7c43e7-0571-4d08-b71a-8b930dda9aad.cer sbgp-ipAddrBlock: critical IPv4: 98.126.166.0/24 98.126.213.0-98.126.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:01:be:37:3c:6c:2f:04:86:24:1e:95:32:79:cc:79:a6:ea: a1:a7:e4:80:60:9a:39:0f:dc:69:5a:44:72:fb:e1:9e:0f:01: ca:d1:54:9e:b2:a8:a9:c7:57:7a:48:68:49:c0:a8:af:5c:c7: c8:54:92:a5:d8:04:e5:4c:c1:54:77:a8:46:e0:75:7e:bb:a4: 44:96:73:a9:93:a2:f9:02:9d:aa:06:84:48:82:70:dc:70:41: 6e:61:5a:65:ac:27:fe:c3:ae:a9:fc:98:dd:70:37:d4:59:29: 48:7e:32:55:f3:48:af:d8:10:a9:58:63:5e:e2:56:6e:f4:0b: 7b:23:83:91:bc:d4:79:c9:9c:40:07:e3:59:75:54:7b:08:ce: df:c7:b3:a4:49:f0:a4:f5:08:bb:a8:64:e3:74:86:a0:58:68: 6b:89:99:8b:e0:56:21:83:b9:07:c5:cc:a5:82:27:06:a0:15: 7d:e5:79:f9:70:34:24:33:4e:27:45:28:f6:ba:7f:73:b2:08: db:25:30:0b:94:04:c1:ef:4e:ea:c9:f7:f2:91:ac:1e:09:15: 8f:4c:3a:06:55:b9:a5:e1:04:ec:1d:b0:2d:1b:76:41:92:09: bd:45:d6:b4:b6:e6:e4:7c:d5:b7:d9:3e:a3:bc:cf:5a:0e:82: 85:3c:18:9c -----BEGIN CERTIFICATE----- MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEoJOp/Ro0yX6l7Eb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmY3YzQzZTctMDU3MS00ZDA4LWI3MWEtOGI5MzBkZGE5 YWFkMB4XDTI1MDUzMTEzMDEwM1oXDTI1MDgyOTEzMDEwM1owLzEtMCsGA1UEAxMk YWJkNDJhMDktY2QxMC00ODJmLTkwMDQtMDA0ZDJjZTZmOGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIDlD61rVHbcWAJduxitDXsYw5eZ5b3L3Weh By3Kjo07ygjegfPS1I+o4vnw2gJAMmrTfi9ND3JnSDW12v+z/BtAUPwVqacsrPfa Rn2aegceGznZ2J9uZYI/K66jEOQAR7f1zzByUgXSsvdlNkApKFFbzgEc4iuTb1pC xO/KFFN6A8obr4NiVAlPRcf42kv+Gdai0b07mzL94J5dBWf5uWF/9Tk5GBYgbhDV r40oSCczgoBfXfdTwA9h92BTCoFjsWi2KZ/l+7PKkbbSSpsB7kLcf+TPsmmhCi+S 74K0ZD0T6rVxu5ZcaUTNhue4+6WdUHAhCsGx6yS8tyedPecVdQIDAQABo4IDYzCC A18wHQYDVR0OBBYEFDnLH9pEmIsgD8/C7burQNnlfthQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iZjdj NDNlNy0wNTcxLTRkMDgtYjcxYS04YjkzMGRkYTlhYWQvMjhlMWFhNWMtNmZjYi0z MzQyLThhZjEtODk4YzhiNjUzZWE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmY3YzQzZTctMDU3MS00ZDA4LWI3 MWEtOGI5MzBkZGE5YWFkL2JmN2M0M2U3LTA1NzEtNGQwOC1iNzFhLThiOTMwZGRh OWFhZC5jcmwwHwYDVR0jBBgwFoAUeZqf6o0FGJJghnDDQxDjJyHgFKgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iZjdjNDNlNy0wNTcxLTRkMDgtYjcxYS04Yjkz MGRkYTlhYWQuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAYn6mMAwD BABiftUDBANiftAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt bDANBgkqhkiG9w0BAQsFAAOCAQEASwG+NzxsLwSGJB6VMnnMeabqoafkgGCaOQ/c aVpEcvvhng8BytFUnrKoqcdXekhoScCor1zHyFSSpdgE5UzBVHeoRuB1frukRJZz qZOi+QKdqgaESIJw3HBBbmFaZawn/sOuqfyY3XA31FkpSH4yVfNIr9gQqVhjXuJW bvQLeyODkbzUecmcQAfjWXVUewjO38ezpEnwpPUIu6hk43SGoFhoa4mZi+BWIYO5 B8XMpYInBqAVfeV5+XA0JDNOJ0Uo9rp/c7II2yUwC5QEwe9O6sn38pGsHgkVj0w6 BlW5peEE7B2wLRt2QZIJvUXWtLbm5HzVt9k+o7zPWg6ChTwYnA== -----END CERTIFICATE-----Generated at Mon Jun 16 03:28:40 2025 by rpki-client