$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff1a770-b3ac-387c-a2af-f0b19fd334e7.roa File: 3ff1a770-b3ac-387c-a2af-f0b19fd334e7.roa (raw, json) Hash identifier: 9aex1QlEUpMepG7dSSxkAr+xnDJpM0OjWoTdghDv5eI= Subject key identifier: BB:89:29:C2:83:4F:C8:75:9C:A8:E1:69:62:5F:5C:A6:0A:EF:16:ED Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858497DA4F3C4147944E42DE8F900 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff1a770-b3ac-387c-a2af-f0b19fd334e7.roa Signing time: Fri 11 Apr 2025 13:01:00 +0000 ROA not before: Fri 11 Apr 2025 13:01:00 +0000 ROA not after: Thu 10 Jul 2025 13:01:00 +0000 asID: 33652 IP address blocks: 98.43.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7d:a4:f3:c4:14:79:44:e4:2d:e8:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 11 13:01:00 2025 GMT Not After : Jul 10 13:01:00 2025 GMT Subject: CN=08af559c-003b-46f4-9032-3f1c4a1064e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:94:1a:1b:d2:54:99:1a:53:5a:07:71:0c:39: 2f:78:2f:5e:31:be:ec:2b:ed:d0:b3:a2:9b:06:d6: 31:9a:68:3e:6d:5b:7a:a5:d1:f1:ac:7d:78:f4:f1: f6:5a:f8:3c:37:49:39:29:c9:5b:69:85:15:10:76: 57:c4:59:e7:5c:f4:37:d4:01:07:b0:dd:cf:75:1a: 78:7e:f0:12:be:ae:d2:68:6a:03:7f:96:e7:3d:68: 00:23:80:e5:d6:fc:02:1a:a1:e8:d6:ea:fd:a1:27: b1:18:2b:a9:f3:bb:9f:e7:dd:5f:4d:e8:36:fa:08: b4:75:62:06:53:07:9d:48:c5:81:0d:e5:33:54:4b: c1:4d:6e:39:a8:a5:98:11:bc:63:f7:ff:b6:9a:74: 83:38:ee:b3:01:3a:b9:45:e7:2b:28:da:b7:02:c4: 64:3c:cc:9f:fe:83:75:79:9c:a2:c8:82:41:c1:6f: 35:c0:18:1a:93:5f:a9:26:2c:2f:a2:3f:06:64:68: e3:43:d8:be:57:eb:46:f8:16:8f:a3:83:c4:72:e5: a6:17:59:57:32:f6:06:e1:87:12:c3:1d:42:6a:1e: 8e:07:b7:37:a7:10:9d:a0:ce:75:53:b5:dc:dc:12: 57:57:42:44:d0:57:1d:9a:3d:88:2b:34:ca:e4:5a: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:89:29:C2:83:4F:C8:75:9C:A8:E1:69:62:5F:5C:A6:0A:EF:16:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ff1a770-b3ac-387c-a2af-f0b19fd334e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.43.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:8a:0d:c8:e1:40:e2:00:f5:ea:94:7a:6d:e1:3c:10:12:5f: 60:04:ef:60:62:16:28:9e:8a:f0:a9:14:f2:4c:33:a6:c8:b2: 0c:a6:ca:8d:58:8d:6a:4e:7f:90:de:36:61:84:b0:69:ad:71: 4e:89:2f:57:51:2d:e1:4c:f7:93:39:7f:f3:e0:77:5e:f2:a2: e6:76:85:2a:ef:4f:ec:74:53:53:14:4d:cc:0d:18:42:7e:0e: 29:d6:c7:4d:53:7a:a2:c8:0d:30:9f:77:41:a6:5d:aa:a0:fe: c0:c6:dc:9a:06:98:f8:93:c6:e7:6d:97:f3:99:1d:21:28:46: f2:92:84:98:3c:7a:18:4d:6e:07:cc:81:9d:26:22:e5:71:01: 64:2a:5d:91:44:16:cd:e3:1d:fc:e9:7c:11:a0:f1:ff:77:57: ed:f8:4f:0a:3a:b0:50:25:6d:06:e4:5f:10:35:3f:a3:3d:f4: 99:39:42:a7:d4:f8:64:6a:1a:7d:41:19:bb:bd:3d:b0:cc:1d: 58:11:ee:52:b0:33:e8:36:70:55:2d:c0:be:2c:32:72:02:7f: 8d:f7:a1:e4:c9:9a:59:2c:d6:37:ba:13:e1:c9:04:51:82:57: fa:f2:16:43:dc:f5:ee:88:3d:d1:2a:0d:e2:b9:fd:ab:25:e3: 54:44:39:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9pPPEFHlE5C3o+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk MDhhZjU1OWMtMDAzYi00NmY0LTkwMzItM2YxYzRhMTA2NGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZQaG9JUmRpTWgdxDDkveC9eMb7sK+3Qs6Kb BtYxmmg+bVt6pdHxrH149PH2Wvg8N0k5KclbaYUVEHZXxFnnXPQ31AEHsN3PdRp4 fvASvq7SaGoDf5bnPWgAI4Dl1vwCGqHo1ur9oSexGCup87uf591fTeg2+gi0dWIG UwedSMWBDeUzVEvBTW45qKWYEbxj9/+2mnSDOO6zATq5RecrKNq3AsRkPMyf/oN1 eZyiyIJBwW81wBgak1+pJiwvoj8GZGjjQ9i+V+tG+BaPo4PEcuWmF1lXMvYG4YcS wx1Cah6OB7c3pxCdoM51U7Xc3BJXV0JE0Fcdmj2IKzTK5FpHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuJKcKDT8h1nKjhaWJfXKYK7xbtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2ZmMWE3NzAtYjNhYy0z ODdjLWEyYWYtZjBiMTlmZDMzNGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHYiuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImKDcjhQOIA9eqUem3hPBASX2AE72BiFiieivCpFPJMM6bIsgymyo1Y jWpOf5DeNmGEsGmtcU6JL1dRLeFM95M5f/Pgd17youZ2hSrvT+x0U1MUTcwNGEJ+ DinWx01TeqLIDTCfd0GmXaqg/sDG3JoGmPiTxudtl/OZHSEoRvKShJg8ehhNbgfM gZ0mIuVxAWQqXZFEFs3jHfzpfBGg8f93V+34Two6sFAlbQbkXxA1P6M99Jk5QqfU +GRqGn1BGbu9PbDMHVgR7lKwM+g2cFUtwL4sMnICf433oeTJmlks1je6E+HJBFGC V/ryFkPc9e6IPdEqDeK5/asl41REOT0= -----END CERTIFICATE-----Generated at Fri May 9 03:01:10 2025 by rpki-client