$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa File: 201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa (raw, json) Hash identifier: 8RFupEsrtRWF4L6T0uf/kVHO0p1yX9qh4lso3sJQA00= Subject key identifier: D8:9D:CA:60:99:2E:9E:00:40:25:DC:09:48:33:49:95:53:C8:EF:21 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5E7B373D1D3FE2D1AD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 98.22.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5e:7b:37:3d:1d:3f:e2:d1:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=a5f6c3ab-5dfa-4e98-9ead-95c26a495249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:4a:98:6b:5c:d3:8d:60:8e:eb:8a:18:7d: 2a:2b:0c:fc:64:fe:30:7a:3d:bd:04:f3:48:7d:58: 49:f9:55:56:85:bc:5b:d6:c5:69:c3:cb:82:30:e7: fb:1c:21:f4:c0:a3:d3:f2:9a:8e:46:e7:12:8d:cb: c7:47:80:ff:94:52:4b:4f:da:b0:9a:0d:4f:01:55: 2a:81:03:a6:3c:33:09:b7:70:ab:61:ce:2c:db:dc: 80:20:9d:8a:68:fb:3b:99:25:1b:09:30:38:bd:91: 3a:d4:c8:b1:cb:84:db:08:88:64:fc:32:ad:5e:6f: cf:6f:9f:75:3d:fd:e1:c6:ff:e2:2d:ff:57:21:26: 8f:dd:16:c6:b7:95:ed:2f:63:8e:52:e7:b0:23:b0: 5c:9f:f5:5f:9b:f0:47:3f:75:8f:84:b3:17:ff:76: b9:9e:9b:db:49:0d:ac:48:a4:11:79:44:f8:e2:10: 04:b0:6f:cf:42:e9:f9:66:b6:88:27:14:cd:cd:58: eb:da:5d:c5:6b:4b:c7:31:3a:6c:9d:c9:fc:02:c0: bb:16:f8:c1:79:8b:28:bf:ad:07:9d:4b:2f:f3:b2: 78:93:a5:02:22:fd:5e:ce:91:11:a2:6d:21:e1:06: 38:6a:65:2d:7f:ad:4c:71:b0:eb:1c:06:83:50:66: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9D:CA:60:99:2E:9E:00:40:25:DC:09:48:33:49:95:53:C8:EF:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201bc58f-704d-38bb-9731-0f4ca4b0d05e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:68:8f:f3:f3:8b:42:37:ca:d9:ec:02:8c:50:38:62:8a:75: 1a:cb:51:33:30:cb:b2:b7:31:f5:14:90:c2:89:64:c7:cc:e8: 52:d7:11:d8:71:91:87:18:9d:0e:d4:18:88:61:62:f4:97:4b: 2b:07:e6:85:06:23:21:c1:f6:23:d3:c5:f7:d5:9a:00:30:9b: f5:16:9b:51:dc:8e:0f:14:5b:15:36:a3:e2:04:ec:a1:8f:bd: 8d:e9:a3:88:b8:d6:9c:13:69:65:f7:12:b0:8d:9f:2a:5a:b0: b6:a1:27:7f:e8:29:32:73:ca:c6:35:1e:74:24:af:01:23:eb: 4b:0c:a5:67:97:18:c4:3b:fe:05:67:62:81:de:dc:1e:eb:11: df:c6:4b:45:51:12:ff:ca:8d:28:4d:0f:15:b5:ac:cc:bc:ed: 4d:41:7e:1c:c0:f0:a5:dd:5d:9c:93:e2:02:be:7d:35:c0:98: ba:c4:3c:19:ce:82:08:64:7d:cb:8c:eb:8b:b4:9d:10:31:66: 5e:a7:ae:df:1b:e3:72:d5:0a:19:33:b8:d0:23:2a:fa:63:3a: ce:d7:e0:48:ee:36:b6:34:e2:8b:82:d5:dc:3a:3e:50:61:5a: c9:76:04:00:e4:98:7d:80:4f:4e:95:7a:bc:ef:a8:8e:82:e7: 9f:5e:39:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF57Nz0dP+LRrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk YTVmNmMzYWItNWRmYS00ZTk4LTllYWQtOTVjMjZhNDk1MjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW1KmGtc041gjuuKGH0qKwz8ZP4wej29BPNI fVhJ+VVWhbxb1sVpw8uCMOf7HCH0wKPT8pqORucSjcvHR4D/lFJLT9qwmg1PAVUq gQOmPDMJt3CrYc4s29yAIJ2KaPs7mSUbCTA4vZE61Mixy4TbCIhk/DKtXm/Pb591 Pf3hxv/iLf9XISaP3RbGt5XtL2OOUuewI7Bcn/Vfm/BHP3WPhLMX/3a5npvbSQ2s SKQReUT44hAEsG/PQun5ZraIJxTNzVjr2l3Fa0vHMTpsncn8AsC7FvjBeYsov60H nUsv87J4k6UCIv1ezpERom0h4QY4amUtf61McbDrHAaDUGY0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNidymCZLp4AQCXcCUgzSZVTyO8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAxYmM1OGYtNzA0ZC0z OGJiLTk3MzEtMGY0Y2E0YjBkMDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItoj/Pzi0I3ytnsAoxQOGKKdRrLUTMwy7K3MfUUkMKJZMfM6FLXEdhx kYcYnQ7UGIhhYvSXSysH5oUGIyHB9iPTxffVmgAwm/UWm1Hcjg8UWxU2o+IE7KGP vY3po4i41pwTaWX3ErCNnypasLahJ3/oKTJzysY1HnQkrwEj60sMpWeXGMQ7/gVn YoHe3B7rEd/GS0VREv/KjShNDxW1rMy87U1BfhzA8KXdXZyT4gK+fTXAmLrEPBnO gghkfcuM64u0nRAxZl6nrt8b43LVChkzuNAjKvpjOs7X4EjuNrY04ouC1dw6PlBh Wsl2BADkmH2AT06VerzvqI6C559eOWI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:09 2025 by rpki-client