$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13e45da-b600-3ea0-be56-c592d05b654f.roa File: b13e45da-b600-3ea0-be56-c592d05b654f.roa (raw, json) Hash identifier: fpaum4ZCGroDjiRp3j3xhSspQk6nwcq17hVUvUc8OMc= Subject key identifier: 8C:6C:57:96:CB:F6:40:BB:64:AE:43:02:EC:CA:22:1B:36:97:9F:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F432858492CAF21E628199035B7222300 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13e45da-b600-3ea0-be56-c592d05b654f.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 33287 IP address blocks: 98.221.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:21:e6:28:19:90:35:b7:22:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=8b329071-c67f-46e9-ab1d-c7764612b6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2c:fc:18:de:2e:68:d6:1a:ad:46:33:af:80: 27:4a:d6:33:2e:86:4c:b7:c5:7d:02:5b:15:05:94: 2a:3d:99:03:ca:70:b5:18:5a:2b:df:e2:81:29:ca: af:78:79:c9:e0:7b:e2:ce:0c:47:8a:d3:96:ef:5f: 14:25:fd:54:d4:86:f9:6a:0a:fb:80:91:be:42:19: 93:fd:01:54:d2:a4:90:87:01:53:67:27:7c:68:a1: f9:0e:36:84:12:9a:80:db:cb:bb:03:51:cc:cf:70: a9:bb:1d:5f:c6:b4:e1:8e:33:af:1a:8c:b1:11:07: 94:b7:8d:25:21:44:4a:a5:5a:8d:9a:08:e3:2a:af: 56:9a:2f:73:3b:7e:71:7d:3f:23:08:b9:fd:7d:b5: 69:e8:08:e2:26:76:ab:39:85:32:a8:10:0b:e9:5f: 1c:99:36:06:3c:b0:64:53:a1:5c:85:a6:c2:b2:90: d1:bc:58:f2:3f:14:aa:06:2d:91:82:1c:dd:80:64: 4e:28:82:82:53:be:1b:59:b3:43:7f:6a:0a:84:99: db:7f:3f:5b:c3:b0:01:f8:9c:79:ea:12:d1:b6:46: 69:df:57:43:e1:90:fb:83:3e:61:6b:f5:cc:71:72: 23:59:89:fb:1b:6b:1d:4d:69:2a:e2:5e:77:93:b9: 39:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6C:57:96:CB:F6:40:BB:64:AE:43:02:EC:CA:22:1B:36:97:9F:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b13e45da-b600-3ea0-be56-c592d05b654f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.221.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:10:4c:7d:13:a6:e4:65:c4:6b:94:46:18:e8:d7:2c:e5:2b: b4:bf:6b:5f:33:9e:11:20:13:d7:29:9f:9f:d7:85:0a:19:fb: 8d:44:0a:d7:e4:e4:a1:2c:99:68:d0:30:27:3d:9b:18:93:38: 29:be:a2:9d:96:aa:d1:0b:10:ae:69:a3:f4:17:6f:8b:7b:6f: be:2e:f5:5a:df:a8:6c:89:5e:7b:63:77:8e:97:c5:cb:59:1e: 6d:b4:d0:ea:f8:b4:86:a7:76:a0:86:2f:a7:fd:77:cc:9d:87: b7:a8:bf:09:a3:7e:b5:4b:09:96:74:67:ee:2a:86:fa:25:cd: c9:30:ac:15:66:89:f1:30:2c:2e:10:b5:14:f5:93:b4:2e:c1: c3:1e:f8:81:a3:fc:ab:75:e6:5b:cf:30:82:43:11:7e:06:27: c2:65:e2:80:4a:b0:0a:81:29:01:60:06:bc:80:9c:14:00:10: 23:c8:b7:9d:19:76:30:0b:8a:cc:4d:9c:59:b4:a1:36:10:b6: 43:6f:1e:61:52:6b:4b:04:2f:ff:4b:b1:f7:10:56:d4:22:72: 23:57:b1:44:7b:00:0b:a6:00:85:1b:2c:5e:39:ef:35:c5:32: 20:be:bc:9e:55:73:3a:28:21:82:a1:ad:6a:78:2d:65:51:9e: 4d:27:b6:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksryHmKBmQNbciIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk OGIzMjkwNzEtYzY3Zi00NmU5LWFiMWQtYzc3NjQ2MTJiNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Sz8GN4uaNYarUYzr4AnStYzLoZMt8V9AlsV BZQqPZkDynC1GFor3+KBKcqveHnJ4HvizgxHitOW718UJf1U1Ib5agr7gJG+QhmT /QFU0qSQhwFTZyd8aKH5DjaEEpqA28u7A1HMz3Cpux1fxrThjjOvGoyxEQeUt40l IURKpVqNmgjjKq9Wmi9zO35xfT8jCLn9fbVp6AjiJnarOYUyqBAL6V8cmTYGPLBk U6FchabCspDRvFjyPxSqBi2RghzdgGROKIKCU74bWbNDf2oKhJnbfz9bw7AB+Jx5 6hLRtkZp31dD4ZD7gz5ha/XMcXIjWYn7G2sdTWkq4l53k7k5GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxsV5bL9kC7ZK5DAuzKIhs2l59DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjEzZTQ1ZGEtYjYwMC0z ZWEwLWJlNTYtYzU5MmQwNWI2NTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYt2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUQTH0TpuRlxGuURhjo1yzlK7S/a18znhEgE9cpn5/XhQoZ+41ECtfk 5KEsmWjQMCc9mxiTOCm+op2WqtELEK5po/QXb4t7b74u9VrfqGyJXntjd46XxctZ Hm200Or4tIandqCGL6f9d8ydh7eovwmjfrVLCZZ0Z+4qhvolzckwrBVmifEwLC4Q tRT1k7QuwcMe+IGj/Kt15lvPMIJDEX4GJ8Jl4oBKsAqBKQFgBryAnBQAECPIt50Z djALisxNnFm0oTYQtkNvHmFSa0sEL/9LsfcQVtQiciNXsUR7AAumAIUbLF457zXF MiC+vJ5VczooIYKhrWp4LWVRnk0ntic= -----END CERTIFICATE-----Generated at Sat May 10 07:38:23 2025 by rpki-client