$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa File: 22131742-375f-3ede-807f-b0f8c1fe30b1.roa (raw, json) Hash identifier: jAz1MyP4cm+ZbrlDXkjnmTLYdJcK4RjJzV1Q2si3yDM= Subject key identifier: F2:88:02:4D:0B:F8:F8:B6:66:0F:09:B0:54:8A:35:0F:61:7F:8E:63 Certificate issuer: /CN=d65fef8f-4cd2-4778-9158-f56f30242812 Certificate serial: 010D0C9F43285849CE9A610C351A7375CD8A5D80 Authority key identifier: 7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 2734 IP address blocks: 98.158.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:61:0c:35:1a:73:75:cd:8a:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d65fef8f-4cd2-4778-9158-f56f30242812 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=fc07b958-d96b-49a1-a66d-92819b112c26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9a:6a:20:f2:7c:40:58:aa:57:85:7b:c7:cf: 14:33:28:dd:9a:1d:74:6c:36:ef:7f:b7:c0:30:8c: 85:30:c6:3d:37:ed:4d:1c:63:e5:e3:40:9c:2c:14: 56:c0:5c:d6:50:16:fd:ac:1e:0a:50:d8:ee:82:bc: 10:11:39:e1:fa:ad:0f:cc:95:21:77:3c:fb:5d:ba: 83:83:d7:8a:6d:9d:52:7e:fc:9e:b8:8c:f0:84:40: e0:eb:b0:d7:f0:ca:8f:9c:4f:36:a8:a3:f1:0e:72: 96:c7:fa:bc:66:f6:9f:9b:b5:c6:90:c7:1a:fd:1a: 29:5b:b7:cf:32:d6:a4:d5:96:26:62:60:d4:1f:32: 95:38:60:da:25:30:51:fd:07:25:96:52:98:39:22: 76:cd:cc:34:02:ad:1b:42:5f:a2:1a:90:2e:71:21: 98:7f:f0:d4:be:b5:60:9e:c1:56:0d:f1:37:e4:46: e2:ce:3d:e4:36:19:28:47:4e:e4:4a:26:92:5c:e8: e3:ed:e4:d5:b9:ce:d9:8a:f1:d2:68:07:52:3c:9b: 3f:7a:c5:4c:fb:ee:35:1e:9d:b5:a9:96:09:86:58: 0c:8c:b7:3e:d5:1e:40:2d:cb:72:7d:a0:1a:2d:f4: 4a:a2:03:67:60:36:79:5a:66:c4:65:c3:0b:58:09: e4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:88:02:4D:0B:F8:F8:B6:66:0F:09:B0:54:8A:35:0F:61:7F:8E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/22131742-375f-3ede-807f-b0f8c1fe30b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812/d65fef8f-4cd2-4778-9158-f56f30242812.crl X509v3 Authority Key Identifier: keyid:7F:98:50:05:90:5B:E3:9C:96:CB:3B:02:50:E6:37:B4:02:B3:49:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d65fef8f-4cd2-4778-9158-f56f30242812.cer sbgp-ipAddrBlock: critical IPv4: 98.158.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:d9:44:68:05:a0:eb:d8:aa:68:b3:27:52:21:31:41:c0:cc: ed:a6:70:12:ac:c5:03:28:05:e7:7d:af:fd:b1:69:be:90:05: 34:02:d8:7a:c4:d2:55:5b:f4:00:d4:20:55:5d:0e:dd:4b:d9: df:22:38:9f:c9:ce:fe:de:69:f7:46:52:32:b6:0d:8b:d0:99: 17:a7:74:ea:5a:f4:34:41:c1:da:4b:a6:f1:85:bb:c6:c6:9e: dd:d9:2d:eb:86:ad:f1:dd:cd:cd:59:f9:23:db:9d:a3:4c:33: 37:c5:d7:0d:cd:43:e4:b6:d0:3e:bd:1c:00:32:d8:e0:44:32: 94:a1:fb:b2:94:8f:76:bb:c5:5b:22:18:2f:1b:4c:28:b2:fa: 9d:0e:52:8b:28:28:81:97:1b:2c:6b:79:3c:3d:81:78:c1:91: 1e:36:23:b4:8c:e1:4c:8c:ab:49:21:b5:4d:ae:3d:1f:de:bd: ae:4c:dd:7e:16:dd:18:7c:c7:0a:2e:de:e4:ae:2a:1c:c0:29: 48:65:9c:b9:40:ee:e0:0f:10:7a:66:d7:94:85:17:56:af:eb: 68:08:7a:22:1a:82:59:53:b7:8a:3a:90:e4:23:60:0f:4f:92: f5:c0:2b:b2:52:8e:63:bb:ca:74:35:cd:de:f6:16:c3:a3:27: ce:f0:1c:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmEMNRpzdc2KXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY1ZmVmOGYtNGNkMi00Nzc4LTkxNTgtZjU2ZjMwMjQy ODEyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZmMwN2I5NTgtZDk2Yi00OWExLWE2NmQtOTI4MTliMTEyYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZpqIPJ8QFiqV4V7x88UMyjdmh10bDbvf7fA MIyFMMY9N+1NHGPl40CcLBRWwFzWUBb9rB4KUNjugrwQETnh+q0PzJUhdzz7XbqD g9eKbZ1SfvyeuIzwhEDg67DX8MqPnE82qKPxDnKWx/q8Zvafm7XGkMca/RopW7fP Mtak1ZYmYmDUHzKVOGDaJTBR/QclllKYOSJ2zcw0Aq0bQl+iGpAucSGYf/DUvrVg nsFWDfE35Ebizj3kNhkoR07kSiaSXOjj7eTVuc7ZivHSaAdSPJs/esVM++41Hp21 qZYJhlgMjLc+1R5ALctyfaAaLfRKogNnYDZ5WmbEZcMLWAnknwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKIAk0L+Pi2Zg8JsFSKNQ9hf45jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVm ZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZmMzAyNDI4MTIvMjIxMzE3NDItMzc1Zi0z ZWRlLTgwN2YtYjBmOGMxZmUzMGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDY1ZmVmOGYtNGNkMi00Nzc4LTkx NTgtZjU2ZjMwMjQyODEyL2Q2NWZlZjhmLTRjZDItNDc3OC05MTU4LWY1NmYzMDI0 MjgxMi5jcmwwHwYDVR0jBBgwFoAUf5hQBZBb45yWyzsCUOY3tAKzSTgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNjVmZWY4Zi00Y2QyLTQ3NzgtOTE1OC1mNTZm MzAyNDI4MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7ZRGgFoOvYqmizJ1IhMUHAzO2mcBKsxQMoBed9r/2xab6QBTQC2HrE 0lVb9ADUIFVdDt1L2d8iOJ/Jzv7eafdGUjK2DYvQmRendOpa9DRBwdpLpvGFu8bG nt3ZLeuGrfHdzc1Z+SPbnaNMMzfF1w3NQ+S20D69HAAy2OBEMpSh+7KUj3a7xVsi GC8bTCiy+p0OUosoKIGXGyxreTw9gXjBkR42I7SM4UyMq0khtU2uPR/eva5M3X4W 3Rh8xwou3uSuKhzAKUhlnLlA7uAPEHpm15SFF1av62gIeiIagllTt4o6kOQjYA9P kvXAK7JSjmO7ynQ1zd72FsOjJ87wHOI= -----END CERTIFICATE-----Generated at Sun May 11 15:03:38 2025 by rpki-client