$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6702d61-9d8f-3e66-83b2-9b75a802a244.roa File: b6702d61-9d8f-3e66-83b2-9b75a802a244.roa (raw, json) Hash identifier: xswQGv8gTDeH3+1O4bs4N1Ptlr2eHWTiS+c84S5AMTk= Subject key identifier: 1E:C4:D5:31:7E:E8:A7:18:4F:72:25:83:0B:E6:4D:A0:68:24:8A:A7 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849929498C4BC3DF0582EFF8080 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6702d61-9d8f-3e66-83b2-9b75a802a244.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 33651 IP address blocks: 98.51.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:98:c4:bc:3d:f0:58:2e:ff:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=2c97f64a-3833-40d0-aa22-7ff1c0871e16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:36:29:50:45:ff:21:b2:5c:70:30:63:b7:5d: bc:17:cb:1a:2f:10:11:55:53:26:7c:80:67:30:89: 1a:46:5d:c9:f5:1c:0f:cf:31:f4:b7:77:0e:cc:f9: 68:83:76:27:52:17:66:11:79:14:7c:ee:7f:c5:56: 54:a7:f1:51:4b:f0:37:3f:7c:77:d4:58:41:8f:8a: 3c:e1:e1:8b:b0:0a:c3:86:3f:69:b7:aa:89:87:fc: 12:55:d7:e1:66:14:ae:ec:10:d8:08:4b:29:96:d6: db:0b:70:02:ac:be:b1:3e:ed:ae:c3:f2:f6:1c:68: 5a:1e:bd:c1:ea:e9:64:de:04:ba:14:50:2b:8d:a9: e6:64:12:88:94:4b:ff:7e:dc:bd:d8:b4:8b:22:74: a5:ab:01:67:dc:cb:38:dd:db:2a:ea:c1:08:60:fb: e2:51:e3:80:41:cd:80:a5:d2:e7:fc:2f:be:f3:54: 1b:0d:47:1b:14:5e:80:c4:11:66:d2:49:6f:52:68: 70:82:75:ce:5d:25:fd:a7:d1:9b:c3:fd:77:b0:78: 6a:9a:5e:98:6a:35:32:81:9b:32:07:e1:dc:8c:45: a1:82:4d:55:0e:37:89:d2:b2:05:5c:e2:2f:99:9d: ca:fb:61:e1:eb:4f:50:f8:03:84:78:16:c8:80:a8: 03:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C4:D5:31:7E:E8:A7:18:4F:72:25:83:0B:E6:4D:A0:68:24:8A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6702d61-9d8f-3e66-83b2-9b75a802a244.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 98.51.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f2:f9:1f:41:c7:2d:15:d5:45:9a:45:46:0e:39:a8:57:1b: 64:4b:05:1b:17:e4:e8:21:f3:4b:a4:3d:07:28:a7:c3:42:8d: 35:ab:e7:c8:5d:7a:48:da:ba:1b:6d:cf:df:19:78:f0:6a:33: ae:8a:2a:30:0c:30:70:03:5a:e6:da:82:64:0d:b1:47:0b:ce: 23:b7:af:e0:c1:55:a0:f9:1e:5c:43:5b:b2:9e:42:af:2d:c9: ee:b6:21:65:49:fb:9d:16:8b:b6:2d:c0:49:15:a3:73:81:55: e7:98:8d:61:4b:18:3e:5f:79:b7:f2:12:ce:e2:ce:12:e0:07: ec:db:3e:4d:f4:09:a1:93:bb:30:28:ef:06:8c:48:52:2f:b2: b2:16:c7:0f:b3:64:d5:a5:a1:e0:6d:7a:91:ca:35:59:00:f1: c9:e9:b1:61:3e:0e:68:cf:5e:d4:9b:0b:6a:9b:cd:fe:2e:45: 70:9d:e4:a7:9b:4d:d3:e9:2a:dc:33:da:75:02:da:4e:97:07: af:6d:92:bb:d8:e8:30:1c:1a:b2:d2:fa:3a:31:e3:f3:9c:46: c0:e9:e9:a6:68:e5:ba:d6:a3:58:f2:52:43:a6:2f:be:14:89: 66:fa:75:5d:05:78:0c:25:2a:e4:b0:3f:c8:80:44:b3:8d:e9: b1:ec:83:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlJjEvD3wWC7/gIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MmM5N2Y2NGEtMzgzMy00MGQwLWFhMjItN2ZmMWMwODcxZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTYpUEX/IbJccDBjt128F8saLxARVVMmfIBn MIkaRl3J9RwPzzH0t3cOzPlog3YnUhdmEXkUfO5/xVZUp/FRS/A3P3x31FhBj4o8 4eGLsArDhj9pt6qJh/wSVdfhZhSu7BDYCEspltbbC3ACrL6xPu2uw/L2HGhaHr3B 6ulk3gS6FFArjanmZBKIlEv/fty92LSLInSlqwFn3Ms43dsq6sEIYPviUeOAQc2A pdLn/C++81QbDUcbFF6AxBFm0klvUmhwgnXOXSX9p9Gbw/13sHhqml6YajUygZsy B+HcjEWhgk1VDjeJ0rIFXOIvmZ3K+2Hh609Q+AOEeBbIgKgD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7E1TF+6KcYT3IlgwvmTaBoJIqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY3MDJkNjEtOWQ4Zi0z ZTY2LTgzYjItOWI3NWE4MDJhMjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYjMoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLy+R9Bxy0V1UWaRUYOOahXG2RLBRsX5Ogh80ukPQcop8NCjTWr58hd ekjauhttz98ZePBqM66KKjAMMHADWubagmQNsUcLziO3r+DBVaD5HlxDW7KeQq8t ye62IWVJ+50Wi7YtwEkVo3OBVeeYjWFLGD5febfyEs7izhLgB+zbPk30CaGTuzAo 7waMSFIvsrIWxw+zZNWloeBtepHKNVkA8cnpsWE+DmjPXtSbC2qbzf4uRXCd5Keb TdPpKtwz2nUC2k6XB69tkrvY6DAcGrLS+jox4/OcRsDp6aZo5brWo1jyUkOmL74U iWb6dV0FeAwlKuSwP8iARLON6bHsg4M= -----END CERTIFICATE-----Generated at Fri May 9 15:25:14 2025 by rpki-client