$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa File: 0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa (raw, json) Hash identifier: 6F3cySw+djhijIWiUuJxHD8oxUCOKRoFHFr82zbVkIc= Subject key identifier: 9E:40:68:7C:92:65:D8:1E:99:04:F8:B3:50:6E:46:80:BE:78:E3:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BFEBC3A3536CB54BCE38C200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.22.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c3:a3:53:6c:b5:4b:ce:38:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=789295c7-6cef-4f30-b97d-17c9547ace81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:73:02:b8:69:67:b9:14:9c:da:8c:68:bc:8a: 53:40:99:e7:8f:f6:fc:a4:40:62:eb:63:99:e5:d1: ed:ad:2d:23:ba:79:62:52:e3:af:cb:1a:13:d3:24: 93:19:d1:3d:b0:a7:70:bf:eb:8b:01:0c:08:e2:4b: 69:96:68:dc:ea:af:07:ad:04:c5:6a:8d:2b:e5:ee: ce:1e:b0:a3:01:1f:91:b5:63:e6:04:fb:29:80:c8: 8d:29:0d:45:d8:c1:ac:44:02:72:36:2a:71:cd:be: 57:9f:d4:0d:61:e7:ae:4f:44:41:1b:b2:34:04:14: 4f:a2:40:d1:94:fd:b6:fe:8d:4d:f3:39:cb:e5:39: 19:dc:65:b3:4d:9f:eb:a2:87:ac:83:90:c4:af:38: 95:e5:24:b1:38:0f:f3:1c:a5:0f:da:c7:12:ba:8a: 75:b7:26:67:d7:58:68:ff:f0:06:3c:f8:1b:3c:35: 7f:46:1e:2e:44:df:21:dc:49:44:54:31:5d:a2:5b: 81:e6:38:fe:16:68:35:bc:42:16:48:51:81:f2:4c: b9:23:71:d0:14:4a:d4:8a:19:4d:db:02:f8:65:61: 2e:db:4c:01:7c:fc:d1:5f:81:fa:e9:08:85:b0:db: 44:85:58:a5:64:6e:9e:0e:8e:d8:2b:55:92:47:c2: d2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:68:7C:92:65:D8:1E:99:04:F8:B3:50:6E:46:80:BE:78:E3:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:2a:8a:37:a5:5e:c7:f1:5e:a3:35:84:fd:05:0c:a1:5d:d7: de:26:aa:7a:91:0d:c1:b2:fb:16:f1:37:37:4f:d9:1c:77:ce: e9:80:e3:14:76:67:55:bf:b2:29:02:90:e2:44:d0:da:c1:5e: c8:93:7e:ae:54:30:43:c8:f9:f7:5c:a2:89:49:d1:bf:ac:3a: 77:51:10:62:29:cf:91:14:be:23:46:aa:c8:94:65:7a:c1:a2: ff:3a:22:b0:fc:7d:ba:c1:12:62:fb:80:a4:1b:02:80:69:5c: f6:a8:79:f8:94:d0:81:25:a2:57:2c:59:39:83:07:1d:64:04: 16:82:11:d4:3b:88:de:04:c3:0a:35:29:db:82:88:76:37:58: 18:4b:cc:c0:20:28:0a:27:a2:f8:ed:44:58:a7:84:55:28:b1: 6b:8a:14:80:d0:8f:de:50:ae:7d:87:86:2a:3c:03:7a:82:74: 4d:2f:2e:04:6c:00:ee:e8:17:ef:06:d6:54:cd:c0:dd:9b:5a: f1:cf:ee:b6:a8:be:07:90:cb:e2:b3:2f:ba:fa:4b:a5:16:96: 4a:ce:92:a8:40:cd:06:63:8a:d3:89:f0:f0:92:fa:70:f9:29: 94:ff:db:dd:7b:4c:8f:a1:5d:6f:46:10:92:52:18:74:ee:ff: 02:e1:0b:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68OjU2y1S844wgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk Nzg5Mjk1YzctNmNlZi00ZjMwLWI5N2QtMTdjOTU0N2FjZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3MCuGlnuRSc2oxovIpTQJnnj/b8pEBi62OZ 5dHtrS0junliUuOvyxoT0ySTGdE9sKdwv+uLAQwI4ktplmjc6q8HrQTFao0r5e7O HrCjAR+RtWPmBPspgMiNKQ1F2MGsRAJyNipxzb5Xn9QNYeeuT0RBG7I0BBRPokDR lP22/o1N8znL5TkZ3GWzTZ/rooesg5DErziV5SSxOA/zHKUP2scSuop1tyZn11ho //AGPPgbPDV/Rh4uRN8h3ElEVDFdoluB5jj+Fmg1vEIWSFGB8ky5I3HQFErUihlN 2wL4ZWEu20wBfPzRX4H66QiFsNtEhVilZG6eDo7YK1WSR8LSbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5AaHySZdgemQT4s1BuRoC+eOPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ5MDMzYWQtN2ZiNS0z YjIwLTg2MTQtOGYyNGFkYzY5YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkqijelXsfxXqM1hP0FDKFd194mqnqRDcGy+xbxNzdP2Rx3zumA4xR2 Z1W/sikCkOJE0NrBXsiTfq5UMEPI+fdcoolJ0b+sOndREGIpz5EUviNGqsiUZXrB ov86IrD8fbrBEmL7gKQbAoBpXPaoefiU0IElolcsWTmDBx1kBBaCEdQ7iN4Ewwo1 KduCiHY3WBhLzMAgKAonovjtRFinhFUosWuKFIDQj95Qrn2Hhio8A3qCdE0vLgRs AO7oF+8G1lTNwN2bWvHP7raovgeQy+KzL7r6S6UWlkrOkqhAzQZjitOJ8PCS+nD5 KZT/2917TI+hXW9GEJJSGHTu/wLhC6A= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:35 2025 by rpki-client