$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa File: 1f5af7b1-5fb3-301d-a898-32a052a6e971.roa (raw, json) Hash identifier: JIQpVMPD7OVHVLM3hQUckGxJu88cCeWfFQrLhsButBU= Subject key identifier: 92:F5:DD:E1:7C:C6:D3:75:D8:9C:A1:10:8A:D5:68:79:B0:78:1D:BC Certificate issuer: /CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4 Certificate serial: 010D0C9F43285849ABB4A597991D8481791EB480 Authority key identifier: 61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 10631 IP address blocks: 131.96.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a5:97:99:1d:84:81:79:1e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98b0e4c3-1653-497d-83ba-9d8b10e9f1a4 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=f800075a-d114-4113-9a08-c2f468e06e20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:84:84:70:9e:56:29:7f:be:b5:74:65:de:60: a9:d4:85:dc:59:a0:a3:25:ee:ff:32:4b:b5:71:9c: 9d:9a:b0:eb:dc:eb:3c:c5:91:71:e5:b4:55:2f:9d: 17:fd:ef:0c:72:11:8b:8f:4b:ac:4c:60:da:74:b7: 16:83:5a:dd:b1:f7:ae:ec:73:c0:63:5d:5a:fc:61: 4d:8e:37:bd:30:6c:f7:72:39:c9:fc:0d:31:e3:a1: 5c:0f:f9:11:5c:d7:75:4d:96:42:a5:bd:79:6f:4d: 5a:dc:a3:34:2e:22:56:e4:3b:95:90:2d:79:81:83: 9e:74:3c:21:78:0a:fe:51:07:2e:4f:08:f0:fe:f5: fd:11:0c:f3:23:2e:f8:a2:f9:fd:70:69:0d:39:7b: f4:58:71:96:02:6e:14:cb:f9:5c:09:4a:80:70:c5: 51:c2:f1:57:f1:68:4d:c1:1d:85:72:d5:d4:a9:ad: 2f:2b:86:18:3e:e3:98:10:b8:57:1c:b3:23:43:41: 77:20:a3:60:c2:b6:29:62:9d:0a:09:92:b5:56:32: c9:15:ef:13:86:f6:56:d5:22:e3:82:67:01:ed:c8: 4b:38:23:18:28:fc:f8:2e:3e:20:a2:dd:6b:38:6e: 28:c6:25:d5:29:f9:e4:4e:9e:b6:75:7d:ae:9a:af: ce:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F5:DD:E1:7C:C6:D3:75:D8:9C:A1:10:8A:D5:68:79:B0:78:1D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/1f5af7b1-5fb3-301d-a898-32a052a6e971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.crl X509v3 Authority Key Identifier: keyid:61:4F:BC:D9:31:24:42:A0:57:62:2F:C5:0A:17:B1:DC:38:92:C9:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/98b0e4c3-1653-497d-83ba-9d8b10e9f1a4.cer sbgp-ipAddrBlock: critical IPv4: 131.96.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:c0:96:69:f2:6e:77:e0:94:99:d8:ee:62:d6:4e:b7:94:e9: 90:f9:8e:8b:03:32:7d:8e:a7:a6:fb:ad:8f:a6:01:43:66:cf: cb:28:ae:d5:ce:0a:dd:26:65:c4:11:76:b7:68:64:ef:49:5e: 65:40:2b:05:7f:08:9b:48:94:64:73:63:70:f6:22:b4:d2:7f: 35:06:f6:41:01:3b:c2:72:7d:17:c0:49:de:c8:39:0c:2b:dc: 39:ac:4f:21:96:a9:f3:f3:c5:44:bf:d4:55:f7:34:3c:e1:9e: 70:ac:46:5a:fe:a1:4c:61:b5:b8:83:3c:47:e7:d5:78:f9:fd: 85:50:8a:bb:98:eb:3a:25:37:e0:e7:f3:e5:84:5e:e9:a3:7f: 16:90:9d:81:d3:6f:63:4d:30:5c:d4:03:72:79:f6:61:55:49: 13:27:fc:d9:eb:7b:0f:f7:e7:68:07:0b:92:34:6b:3d:a1:4b: 27:82:ff:b3:4a:cc:4b:f9:97:97:ea:a7:13:82:10:01:60:b5: 41:1a:f7:7d:63:bb:83:87:ab:23:21:61:60:c8:c1:73:93:c5: c7:a0:36:cc:cf:c8:33:ed:48:52:7c:c3:c4:9e:a2:f7:36:97: fe:7a:09:b9:8d:a9:91:27:f7:b3:ad:6d:b2:eb:0a:09:7e:37: f9:e5:aa:04 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmrtKWXmR2EgXketIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThiMGU0YzMtMTY1My00OTdkLTgzYmEtOWQ4YjEwZTlm MWE0MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk ZjgwMDA3NWEtZDExNC00MTEzLTlhMDgtYzJmNDY4ZTA2ZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoSEcJ5WKX++tXRl3mCp1IXcWaCjJe7/Mku1 cZydmrDr3Os8xZFx5bRVL50X/e8MchGLj0usTGDadLcWg1rdsfeu7HPAY11a/GFN jje9MGz3cjnJ/A0x46FcD/kRXNd1TZZCpb15b01a3KM0LiJW5DuVkC15gYOedDwh eAr+UQcuTwjw/vX9EQzzIy74ovn9cGkNOXv0WHGWAm4Uy/lcCUqAcMVRwvFX8WhN wR2FctXUqa0vK4YYPuOYELhXHLMjQ0F3IKNgwrYpYp0KCZK1VjLJFe8ThvZW1SLj gmcB7chLOCMYKPz4Lj4got1rOG4oxiXVKfnkTp62dX2umq/OGQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJL13eF8xtN12JyhEIrVaHmweB28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OGIw ZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhiMTBlOWYxYTQvMWY1YWY3YjEtNWZiMy0z MDFkLWE4OTgtMzJhMDUyYTZlOTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOThiMGU0YzMtMTY1My00OTdkLTgz YmEtOWQ4YjEwZTlmMWE0Lzk4YjBlNGMzLTE2NTMtNDk3ZC04M2JhLTlkOGIxMGU5 ZjFhNC5jcmwwHwYDVR0jBBgwFoAUYU+82TEkQqBXYi/FChex3DiSyZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OGIwZTRjMy0xNjUzLTQ5N2QtODNiYS05ZDhi MTBlOWYxYTQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg2AwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAsCWafJud+CUmdjuYtZOt5TpkPmOiwMyfY6npvutj6YBQ2bPyyiu1c4K 3SZlxBF2t2hk70leZUArBX8Im0iUZHNjcPYitNJ/NQb2QQE7wnJ9F8BJ3sg5DCvc OaxPIZap8/PFRL/UVfc0POGecKxGWv6hTGG1uIM8R+fVePn9hVCKu5jrOiU34Ofz 5YRe6aN/FpCdgdNvY00wXNQDcnn2YVVJEyf82et7D/fnaAcLkjRrPaFLJ4L/s0rM S/mXl+qnE4IQAWC1QRr3fWO7g4erIyFhYMjBc5PFx6A2zM/IM+1IUnzDxJ6i9zaX /noJuY2pkSf3s61tsusKCX43+eWqBA== -----END CERTIFICATE-----Generated at Wed Apr 30 11:31:26 2025 by rpki-client