$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa File: 256306ed-07ad-387c-9937-97eaa8093c5d.roa (raw, json) Hash identifier: 9/9yAsDYSaKpdnDSj/crM3/JVHSIR+suzbN630JOXk8= Subject key identifier: 99:C6:20:35:45:9F:3B:F0:70:3C:0C:34:9C:E8:E2:5B:DB:BE:E4:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA330EAE322F90211BEB10 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa Signing time: Thu 20 Feb 2025 18:15:26 +0000 ROA not before: Thu 20 Feb 2025 18:15:26 +0000 ROA not after: Wed 21 May 2025 17:15:26 +0000 asID: 7029 IP address blocks: 98.20.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:33:0e:ae:32:2f:90:21:1b:eb:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:26 2025 GMT Not After : May 21 17:15:26 2025 GMT Subject: CN=509c13b2-21db-4534-b486-bcda59d3c709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:00:54:88:0b:7f:f0:5f:a4:8e:fa:9e:76: 7d:a2:3a:f1:8b:5e:11:65:96:14:44:cb:82:1c:d6: b4:94:dc:16:30:bd:9a:58:8e:51:f9:72:f0:70:b1: 5d:4d:87:d4:32:3d:90:ca:43:f1:5a:9b:c0:f2:2c: 72:6e:53:11:db:6e:3d:8c:4e:77:39:27:57:ed:17: 45:3c:6a:e2:79:58:20:ef:c2:df:10:60:ab:b7:4e: 76:0c:74:2f:9e:e9:eb:f8:e7:1f:19:cf:21:fd:b3: 89:01:d9:df:60:8b:73:6d:6b:3f:71:c7:81:84:73: 86:80:46:94:9e:f8:57:60:82:ae:61:17:11:17:60: 6e:5a:ec:98:68:4b:5e:31:76:2a:07:e3:33:30:6e: 19:a4:32:17:de:2f:f7:9c:03:51:64:7e:df:b7:8c: d7:77:d4:35:7c:90:9b:46:f3:78:e3:ba:ab:5f:15: 50:34:d0:8f:92:de:24:6c:6d:bf:06:40:08:ee:a1: 25:3e:f0:9a:c2:b5:24:98:6b:2e:d7:1b:94:39:be: 91:25:f8:fc:a9:de:f7:2e:c0:fb:1e:ba:aa:1c:32: a8:b4:17:d2:e1:58:f7:6e:03:b9:2a:d5:78:c0:58: 0a:22:d3:0e:ba:e8:c3:2e:25:0a:a2:a4:74:7f:c9: 9e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C6:20:35:45:9F:3B:F0:70:3C:0C:34:9C:E8:E2:5B:DB:BE:E4:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/256306ed-07ad-387c-9937-97eaa8093c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ff:b8:be:74:dd:14:19:70:df:2c:b7:59:4f:01:60:3f:46: a9:7a:4a:d0:7a:c3:b4:e0:35:da:62:14:52:0c:b8:ab:11:44: c7:dc:cd:02:81:f8:84:5b:e0:23:0d:6a:15:04:e1:a8:8d:e9: ae:28:69:8e:fe:d1:f5:03:a8:36:eb:66:69:b4:32:44:04:c0: 9b:1a:6b:68:07:0a:bb:45:3e:be:db:82:6b:8f:e6:db:4f:51: f9:40:6d:af:f0:ac:97:d8:63:eb:66:9e:a3:48:df:17:0d:57: ec:82:d0:2e:21:e9:ee:1b:24:3c:dc:98:c7:89:e8:b7:3a:f7: 0f:52:41:08:0e:d4:1c:d4:13:16:f8:33:89:88:9b:fd:13:19: 64:e2:c9:4f:64:3c:74:52:fa:61:7d:0c:73:40:fd:4e:20:0e: a5:f9:27:bb:49:44:14:14:f6:da:94:c7:89:51:53:16:ee:f2: 28:13:50:b9:e4:e1:22:98:d7:bd:7a:3d:1b:2c:04:a2:e0:4c: d5:2c:cb:7e:7b:a7:41:ff:ba:89:c3:16:a2:38:49:b1:96:1d: 7f:a8:b8:31:58:6b:26:06:91:3e:5f:b3:d6:e2:26:09:dc:2b: 06:71:e6:d0:80:89:54:b0:f4:ac:20:29:21:35:e7:a9:cd:e7: 89:b0:1c:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqjMOrjIvkCEb6xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTUyNloXDTI1MDUyMTE3MTUyNlowLzEtMCsGA1UEAxMk NTA5YzEzYjItMjFkYi00NTM0LWI0ODYtYmNkYTU5ZDNjNzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMYAVIgLf/BfpI76nnZ9ojrxi14RZZYURMuC HNa0lNwWML2aWI5R+XLwcLFdTYfUMj2QykPxWpvA8ixyblMR2249jE53OSdX7RdF PGrieVgg78LfEGCrt052DHQvnunr+OcfGc8h/bOJAdnfYItzbWs/cceBhHOGgEaU nvhXYIKuYRcRF2BuWuyYaEteMXYqB+MzMG4ZpDIX3i/3nANRZH7ft4zXd9Q1fJCb RvN447qrXxVQNNCPkt4kbG2/BkAI7qElPvCawrUkmGsu1xuUOb6RJfj8qd73LsD7 HrqqHDKotBfS4Vj3bgO5KtV4wFgKItMOuujDLiUKoqR0f8meQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnGIDVFnzvwcDwMNJzo4lvbvuR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU2MzA2ZWQtMDdhZC0z ODdjLTk5MzctOTdlYWE4MDkzYzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADj/uL503RQZcN8st1lPAWA/Rql6StB6w7TgNdpiFFIMuKsRRMfczQKB +IRb4CMNahUE4aiN6a4oaY7+0fUDqDbrZmm0MkQEwJsaa2gHCrtFPr7bgmuP5ttP UflAba/wrJfYY+tmnqNI3xcNV+yC0C4h6e4bJDzcmMeJ6Lc69w9SQQgO1BzUExb4 M4mIm/0TGWTiyU9kPHRS+mF9DHNA/U4gDqX5J7tJRBQU9tqUx4lRUxbu8igTULnk 4SKY1716PRssBKLgTNUsy357p0H/uonDFqI4SbGWHX+ouDFYayYGkT5fs9biJgnc KwZx5tCAiVSw9KwgKSE156nN54mwHBE= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:30 2025 by rpki-client