$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e9f9d49-a6d7-30c1-80e7-c52ba9b9e595.roa File: 0e9f9d49-a6d7-30c1-80e7-c52ba9b9e595.roa (raw, json) Hash identifier: Dp0UbVcmjDPrDYTqDGC7o0Mhug+ljJWDFhBJY2lBQKs= Subject key identifier: 82:DC:4E:67:0C:78:2F:2A:39:93:81:CB:94:7B:20:63:84:7A:C6:A2 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849929485085A6D62816EDCDE80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e9f9d49-a6d7-30c1-80e7-c52ba9b9e595.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33491 IP address blocks: 98.223.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:85:08:5a:6d:62:81:6e:dc:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=3c9955b5-839b-47ce-992a-cee96db61065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:da:b3:98:52:25:f0:ff:97:9d:88:10:7e:c0: d0:6e:7d:e3:6e:61:69:cf:13:a0:7f:fa:64:9a:67: 91:f8:67:9d:eb:23:a5:f7:e8:90:1a:dc:1d:d6:52: 35:dc:40:63:68:18:b8:d3:3e:ee:28:82:41:ed:e6: 9f:04:e9:0f:eb:8a:75:14:c8:97:49:0e:87:ef:a0: e7:91:d2:b0:7b:6d:52:6a:00:34:9d:40:33:40:09: ab:47:82:5e:23:82:d8:89:96:77:ea:b2:90:85:1a: 53:7a:54:14:15:db:58:f6:97:1c:d1:af:2d:a8:ac: d9:8c:69:2c:f2:d5:9d:43:ea:71:f9:5d:d4:18:f9: b6:9a:c0:d5:a0:80:da:03:0c:47:a8:1a:b8:84:31: d5:e3:7b:d9:bf:59:b6:05:53:19:0a:15:db:4e:e6: f0:5a:69:2a:ba:a4:a3:41:db:ee:31:5a:90:aa:b0: 72:0e:58:64:de:07:85:69:20:47:e2:3a:38:c6:51: e2:85:78:1b:0a:8b:54:8a:8a:35:e0:e5:2c:a6:04: 58:a6:2e:f3:53:96:8a:be:35:7e:e7:e0:ca:71:a0: 67:6c:cb:a5:ae:17:74:93:26:c5:a2:09:27:ad:82: 8c:2d:62:ef:56:28:cd:f4:64:3c:b3:ce:4b:cc:96: 44:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DC:4E:67:0C:78:2F:2A:39:93:81:CB:94:7B:20:63:84:7A:C6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0e9f9d49-a6d7-30c1-80e7-c52ba9b9e595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.223.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:87:3d:e1:1a:94:93:f4:8d:83:17:6e:f2:27:12:98:6e:1e: fd:ea:24:40:3f:83:fc:36:1e:4c:43:82:3f:00:c0:95:23:ed: 44:0f:9c:57:4f:b6:96:b9:d6:f5:99:53:26:ef:63:b7:74:9c: 97:8c:9e:c7:11:1f:b3:ad:32:66:26:82:16:64:17:22:98:c7: 6f:ca:c6:9d:b6:15:63:dc:fe:54:84:52:c7:72:0d:e0:c9:aa: 6a:78:c3:e5:a0:98:35:a7:58:94:f5:d7:c4:d1:3c:da:77:8e: 7e:96:f4:40:a9:6b:fc:51:8c:32:e3:03:2e:9b:fb:d0:7b:87: 74:c7:34:f0:29:03:e8:08:57:78:e3:71:1d:62:0d:4d:2c:cf: f2:11:4b:83:1a:5b:d7:ee:93:3e:36:a6:44:f8:8a:23:79:28: 81:f7:25:4e:6f:b9:6b:e2:8f:8d:58:c3:26:ac:54:34:2d:d3: 54:3f:cd:d5:57:1c:b4:83:eb:07:df:51:fa:97:9b:83:b8:18: 88:d5:d9:a4:ef:5f:52:d4:85:3d:08:7f:58:cc:a5:07:7f:12: f0:0a:16:64:29:4c:62:bc:a5:5d:93:54:3c:7a:e0:05:62:24: ff:13:a4:89:a5:28:c6:5c:7e:53:98:fd:1d:34:d1:99:69:25: c2:df:8f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlIUIWm1igW7c3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk M2M5OTU1YjUtODM5Yi00N2NlLTk5MmEtY2VlOTZkYjYxMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9qzmFIl8P+XnYgQfsDQbn3jbmFpzxOgf/pk mmeR+Ged6yOl9+iQGtwd1lI13EBjaBi40z7uKIJB7eafBOkP64p1FMiXSQ6H76Dn kdKwe21SagA0nUAzQAmrR4JeI4LYiZZ36rKQhRpTelQUFdtY9pcc0a8tqKzZjGks 8tWdQ+px+V3UGPm2msDVoIDaAwxHqBq4hDHV43vZv1m2BVMZChXbTubwWmkquqSj QdvuMVqQqrByDlhk3geFaSBH4jo4xlHihXgbCotUioo14OUspgRYpi7zU5aKvjV+ 5+DKcaBnbMulrhd0kybFogknrYKMLWLvVijN9GQ8s85LzJZEmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILcTmcMeC8qOZOBy5R7IGOEesaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGU5ZjlkNDktYTZkNy0z MGMxLTgwZTctYzUyYmE5YjllNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYt/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSHPeEalJP0jYMXbvInEphuHv3qJEA/g/w2HkxDgj8AwJUj7UQPnFdP tpa51vWZUybvY7d0nJeMnscRH7OtMmYmghZkFyKYx2/Kxp22FWPc/lSEUsdyDeDJ qmp4w+WgmDWnWJT118TRPNp3jn6W9ECpa/xRjDLjAy6b+9B7h3THNPApA+gIV3jj cR1iDU0sz/IRS4MaW9fukz42pkT4iiN5KIH3JU5vuWvij41YwyasVDQt01Q/zdVX HLSD6wffUfqXm4O4GIjV2aTvX1LUhT0If1jMpQd/EvAKFmQpTGK8pV2TVDx64AVi JP8TpImlKMZcflOY/R000ZlpJcLfj40= -----END CERTIFICATE-----Generated at Fri May 9 19:36:22 2025 by rpki-client