$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c191b62-2151-3f9d-b53a-591a253c5c14.roa File: 0c191b62-2151-3f9d-b53a-591a253c5c14.roa (raw, json) Hash identifier: yjyI7miVB1CkwELiHca4CDWml3VqZDTCKqWm4LjASTU= Subject key identifier: 4F:16:DB:25:00:A5:B0:37:61:F2:7B:22:AE:38:5D:FE:D5:6A:E6:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584957F40F3C5CF24B9CFFB92470 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c191b62-2151-3f9d-b53a-591a253c5c14.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.23.74.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0f:3c:5c:f2:4b:9c:ff:b9:24:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=8dc48f73-6416-41af-b927-c74b50bd261d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:dd:c3:e1:57:03:ce:42:91:d0:ab:99:7f:6c: d4:8a:66:ea:98:c4:ef:17:ce:19:89:31:d3:5f:0e: 64:ac:f1:75:9c:d4:ac:54:2d:7a:f5:cb:4f:a9:16: d0:b7:9e:89:58:75:74:be:d7:13:a9:94:ef:41:9b: 76:c2:2a:8f:fb:e5:a8:73:bf:86:af:03:dc:95:28: 5f:18:ca:dc:b1:d6:8e:3a:15:82:a0:e5:f4:84:d2: ea:39:09:32:26:f3:58:d4:dc:e4:4a:17:e6:2b:21: f8:4e:ea:9c:e3:18:95:95:2a:8b:62:d8:01:29:9f: fc:4d:a4:d9:62:7c:e3:36:07:a0:fb:3d:c5:98:c4: 65:b5:e6:46:4c:8c:08:16:25:79:46:91:d1:29:6f: 02:d8:a2:17:94:24:26:cd:0b:46:be:8c:2a:93:08: b9:7d:6b:c0:ec:42:0c:22:81:91:af:c3:95:a7:b9: 1a:09:bb:55:99:89:d2:de:7e:ad:a6:85:47:cb:7b: 31:18:6f:64:eb:3b:06:ca:e8:0f:7f:a6:45:7d:3f: 16:94:8f:3f:26:ca:f1:92:f1:4b:79:71:3b:5d:df: ae:2b:cc:79:a1:d9:5d:92:b3:fd:f4:da:2a:59:a9: 12:db:14:b9:db:5c:2c:4d:e5:94:1a:42:34:bf:ff: d2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:16:DB:25:00:A5:B0:37:61:F2:7B:22:AE:38:5D:FE:D5:6A:E6:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c191b62-2151-3f9d-b53a-591a253c5c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:63:a9:c9:d9:91:f9:07:ec:c1:0a:9c:ca:a6:90:d5:52:ac: 50:5d:6f:1a:b7:69:50:c0:32:4a:4d:7a:a7:e2:3b:bf:4a:fb: c9:f9:99:09:28:fb:67:9b:1c:50:a1:12:56:44:20:d9:e1:14: 77:4e:c4:bd:ad:bc:20:02:f7:9d:48:9c:32:04:be:32:6f:29: 7c:2b:f9:0c:21:67:61:70:fe:ff:26:42:46:de:41:5a:08:e3: 76:b5:f9:c9:23:ff:d7:ad:3a:8b:65:c8:61:f0:69:56:d6:c9: 74:9c:f3:33:ce:a8:87:46:f0:17:93:89:1d:fa:b2:ac:64:cc: 9c:a8:13:19:b9:b7:a5:80:7f:a6:a5:6d:9a:e3:ea:22:71:05: 98:ed:8c:1e:c3:3b:7b:9e:b9:a5:6f:01:33:8a:03:3e:2c:88: 05:6f:9e:67:b1:60:e3:1f:d0:5b:51:e2:dd:87:97:00:ab:f6: 12:10:58:66:d8:11:4a:e9:dd:ae:cc:97:a4:90:8a:7f:3f:5e: e9:7d:0a:9a:b9:5f:77:8b:99:e5:56:c0:32:76:0e:aa:d6:84: 34:e9:df:89:4e:12:dd:56:e1:70:f1:a2:d9:db:19:cd:06:9d: 8d:3b:59:e6:19:da:45:71:b1:47:bb:89:c2:00:12:23:d6:f2: 2e:d0:e2:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9A88XPJLnP+5JHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk OGRjNDhmNzMtNjQxNi00MWFmLWI5MjctYzc0YjUwYmQyNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd3D4VcDzkKR0KuZf2zUimbqmMTvF84ZiTHT Xw5krPF1nNSsVC169ctPqRbQt56JWHV0vtcTqZTvQZt2wiqP++Woc7+GrwPclShf GMrcsdaOOhWCoOX0hNLqOQkyJvNY1NzkShfmKyH4Tuqc4xiVlSqLYtgBKZ/8TaTZ YnzjNgeg+z3FmMRlteZGTIwIFiV5RpHRKW8C2KIXlCQmzQtGvowqkwi5fWvA7EIM IoGRr8OVp7kaCbtVmYnS3n6tpoVHy3sxGG9k6zsGyugPf6ZFfT8WlI8/JsrxkvFL eXE7Xd+uK8x5odldkrP99NoqWakS2xS521wsTeWUGkI0v//SEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8W2yUApbA3YfJ7Iq44Xf7VauYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGMxOTFiNjItMjE1MS0z ZjlkLWI1M2EtNTkxYTI1M2M1YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhdKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5jqcnZkfkH7MEKnMqmkNVSrFBdbxq3aVDAMkpNeqfiO79K+8n5mQko +2ebHFChElZEINnhFHdOxL2tvCAC951InDIEvjJvKXwr+QwhZ2Fw/v8mQkbeQVoI 43a1+ckj/9etOotlyGHwaVbWyXSc8zPOqIdG8BeTiR36sqxkzJyoExm5t6WAf6al bZrj6iJxBZjtjB7DO3ueuaVvATOKAz4siAVvnmexYOMf0FtR4t2HlwCr9hIQWGbY EUrp3a7Ml6SQin8/Xul9Cpq5X3eLmeVWwDJ2DqrWhDTp34lOEt1W4XDxotnbGc0G nY07WeYZ2kVxsUe7icIAEiPW8i7Q4oA= -----END CERTIFICATE-----Generated at Sat Apr 5 21:37:58 2025 by rpki-client