$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5408c3a4-aa48-316b-b4c9-440a201df66e.roa File: 5408c3a4-aa48-316b-b4c9-440a201df66e.roa (raw, json) Hash identifier: g9MH0K8k4r9aRxVf85PWRTiFJ5VCQ83EfUPr3a6ptAs= Subject key identifier: EB:4C:9D:D4:5B:B2:D5:49:1B:59:95:8F:3A:80:A3:64:B5:A7:70:D8 Certificate issuer: /CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Certificate serial: 010D0C9F432858496A1999A1CE35573473AC1670 Authority key identifier: 82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5408c3a4-aa48-316b-b4c9-440a201df66e.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 46261 IP address blocks: 198.251.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:99:a1:ce:35:57:34:73:ac:16:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98cb5058-01ad-45bf-9c15-453f410bb9d7 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=7b93512e-33ac-4024-a981-0321972a1448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:3d:06:fa:1e:69:f0:38:d1:c0:84:96:43: d5:92:25:e0:42:8d:f6:06:e1:97:3a:99:31:3b:a6: 8b:cf:ee:50:93:15:51:9b:c8:09:2d:3e:c1:8f:ee: 9c:0c:c7:ea:95:d9:71:84:00:0b:d0:29:2e:66:b5: f1:c8:ab:9c:bf:d3:a6:e4:72:65:16:1d:aa:57:ea: de:d9:3f:c9:0c:fd:ab:c2:f2:7e:02:93:9d:de:c2: b4:7c:38:6a:f9:04:4f:55:af:64:4b:01:1c:48:58: 3b:7c:48:61:61:fb:f7:08:2e:64:2d:f5:80:85:32: 22:b8:a7:8e:08:25:82:3c:c0:c1:ba:58:72:89:3d: a8:57:a0:55:92:06:51:0f:02:f7:10:08:51:ad:bb: 90:e0:64:41:31:9a:d1:f5:ec:06:9d:c0:3e:84:03: c4:51:31:dc:43:03:4b:36:cf:23:4e:88:5e:b9:ea: 02:8f:ae:90:9e:f0:72:0b:a4:61:5f:c3:ee:b5:0f: fc:5c:f4:74:6f:14:f0:c6:51:19:77:a0:b3:16:4b: 12:36:1e:9a:74:90:d7:82:29:3e:0d:b6:16:a2:cd: a3:2c:ad:c1:69:af:26:8b:47:df:71:6e:36:54:e7: 91:fe:49:e1:dc:df:3d:3e:c6:a6:a1:a7:7a:8f:48: 41:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:4C:9D:D4:5B:B2:D5:49:1B:59:95:8F:3A:80:A3:64:B5:A7:70:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/5408c3a4-aa48-316b-b4c9-440a201df66e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7/98cb5058-01ad-45bf-9c15-453f410bb9d7.crl X509v3 Authority Key Identifier: keyid:82:CE:84:36:98:01:6C:4A:C2:06:52:3F:C0:C5:3D:57:E1:08:00:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/98cb5058-01ad-45bf-9c15-453f410bb9d7.cer sbgp-ipAddrBlock: critical IPv4: 198.251.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:d9:54:23:11:98:79:47:2f:4e:e5:78:30:5a:4f:bf:ec:81: db:57:7e:1a:f0:db:3e:62:c2:51:ff:14:7d:93:52:54:10:34: 98:ce:6c:f9:36:2e:ef:b9:a7:f9:ec:5c:02:69:92:f5:71:76: 65:0c:dc:c0:40:f5:8b:0b:64:10:7a:6d:cd:be:4c:a6:5d:23: fb:c5:20:4e:ae:e3:28:76:d6:9f:ff:12:40:d2:8d:4b:76:b8: 40:ff:4d:3f:02:77:28:d0:ae:58:d0:ba:3f:9b:1a:96:08:11: 98:54:e1:b1:ca:21:cc:d6:e7:04:b7:60:68:84:64:25:2b:9b: b8:ea:54:47:45:fa:e1:33:32:29:0c:f7:e8:7d:c4:03:b2:b7: 64:3d:b2:1a:aa:32:1e:6d:23:b3:f5:42:51:62:d3:26:7b:f1: e2:1b:47:82:ee:b8:53:cb:67:02:ab:2c:03:33:5e:ce:d4:2f: 96:17:1c:d8:11:5a:89:ee:1e:8f:c1:b4:0e:29:02:8d:da:63: 60:2a:e9:70:a8:dc:11:24:c4:64:ba:eb:4e:11:3c:85:b7:e6: de:a9:e5:51:de:10:7d:5c:ce:56:16:b0:b0:ad:d6:3c:21:a9: eb:39:26:71:fa:b0:b3:11:c6:b2:5d:fe:2a:ac:c6:68:3b:ec: 05:6a:f9:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGZmhzjVXNHOsFnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOThjYjUwNTgtMDFhZC00NWJmLTljMTUtNDUzZjQxMGJi OWQ3MB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk N2I5MzUxMmUtMzNhYy00MDI0LWE5ODEtMDMyMTk3MmExNDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfw9BvoeafA40cCElkPVkiXgQo32BuGXOpkx O6aLz+5QkxVRm8gJLT7Bj+6cDMfqldlxhAAL0CkuZrXxyKucv9Om5HJlFh2qV+re 2T/JDP2rwvJ+ApOd3sK0fDhq+QRPVa9kSwEcSFg7fEhhYfv3CC5kLfWAhTIiuKeO CCWCPMDBulhyiT2oV6BVkgZRDwL3EAhRrbuQ4GRBMZrR9ewGncA+hAPEUTHcQwNL Ns8jToheueoCj66QnvByC6RhX8PutQ/8XPR0bxTwxlEZd6CzFksSNh6adJDXgik+ DbYWos2jLK3Baa8mi0ffcW42VOeR/knh3N89Psamoad6j0hBRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtMndRbstVJG1mVjzqAo2S1p3DYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85OGNi NTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNmNDEwYmI5ZDcvNTQwOGMzYTQtYWE0OC0z MTZiLWI0YzktNDQwYTIwMWRmNjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOThjYjUwNTgtMDFhZC00NWJmLTlj MTUtNDUzZjQxMGJiOWQ3Lzk4Y2I1MDU4LTAxYWQtNDViZi05YzE1LTQ1M2Y0MTBi YjlkNy5jcmwwHwYDVR0jBBgwFoAUgs6ENpgBbErCBlI/wMU9V+EIADkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85OGNiNTA1OC0wMWFkLTQ1YmYtOWMxNS00NTNm NDEwYmI5ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxvtcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDZVCMRmHlHL07leDBaT7/sgdtXfhrw2z5iwlH/FH2TUlQQNJjObPk2 Lu+5p/nsXAJpkvVxdmUM3MBA9YsLZBB6bc2+TKZdI/vFIE6u4yh21p//EkDSjUt2 uED/TT8CdyjQrljQuj+bGpYIEZhU4bHKIczW5wS3YGiEZCUrm7jqVEdF+uEzMikM 9+h9xAOyt2Q9shqqMh5tI7P1QlFi0yZ78eIbR4LuuFPLZwKrLAMzXs7UL5YXHNgR WonuHo/BtA4pAo3aY2Aq6XCo3BEkxGS6604RPIW35t6p5VHeEH1czlYWsLCt1jwh qes5JnH6sLMRxrJd/iqsxmg77AVq+So= -----END CERTIFICATE-----Generated at Sun Apr 27 02:14:05 2025 by rpki-client