$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa File: 2a4a1f38-23a1-3489-ac54-76169819c152.roa (raw, json) Hash identifier: DDEaYa1W0u1N4O0bO7oFin0vEoBUsl5I0er+eNsWEwM= Subject key identifier: 3F:92:90:88:60:74:8E:96:75:65:A6:56:11:7B:0D:20:1E:B0:C1:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B811780BEA7195527E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.23.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b8:11:78:0b:ea:71:95:52:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=c1dc54e3-6e41-4099-a4e5-5f35c8091b28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e9:68:3a:85:67:38:dd:15:be:1b:e1:a0:69: ce:2c:2d:6d:21:ac:09:04:f3:94:d4:6e:e6:92:fa: 10:f3:75:e4:41:2f:9b:41:aa:32:68:4b:60:7a:6e: 53:94:f4:2e:b2:2a:38:c3:4d:14:c5:98:24:76:b1: 39:bc:3d:47:a8:83:a2:94:8c:6e:38:3f:00:94:34: 70:c7:e5:c0:40:64:93:ec:c4:99:23:3e:86:90:18: 60:00:3d:49:be:10:80:4b:3e:68:dc:81:d7:a7:b9: b4:e4:93:91:5f:ff:67:ee:cc:37:26:32:90:56:56: c5:52:e1:13:9d:82:6f:e8:00:9f:d0:cb:2c:cf:68: 94:91:1e:23:57:59:12:08:de:75:ec:ab:31:6e:57: a9:8b:5c:77:52:d1:a0:b9:f3:4d:65:ae:0b:c3:1a: 3b:6b:33:d6:95:32:aa:c6:99:c2:9a:4c:fd:d4:c8: e8:50:32:09:21:7c:6e:26:b5:3b:29:75:82:1f:c3: e2:f7:4f:b8:99:96:b1:9c:b9:97:25:b1:a4:88:85: e9:9b:a7:49:1f:e5:b0:98:9a:06:0a:64:a7:c6:f1: 37:7e:fe:b6:d3:ac:b6:4a:a0:b1:7a:87:8c:88:ce: 53:35:f7:bf:4a:58:a5:ee:4d:60:c4:38:e5:08:7c: 9a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:92:90:88:60:74:8E:96:75:65:A6:56:11:7B:0D:20:1E:B0:C1:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a4a1f38-23a1-3489-ac54-76169819c152.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bf:13:78:8a:50:3f:77:a7:55:8c:e8:37:24:80:c2:e9:4d: 10:72:13:dd:cd:bb:f0:6b:86:83:49:8c:20:67:10:fc:7f:aa: 72:db:2d:11:9c:96:e7:b6:cd:60:5c:e1:d5:e9:80:7b:98:68: 5a:e9:2d:0c:1f:23:d9:56:29:72:46:28:1f:45:bd:8a:82:79: 40:a9:c8:8a:ed:7a:cc:1d:4f:f2:3a:67:cb:6f:07:59:9a:6c: 61:76:41:a4:91:17:8c:f3:43:ff:c6:12:e0:d5:6b:3e:4f:e8: 13:19:b1:38:69:bd:1d:ca:78:ab:70:1e:27:c1:31:6e:89:9d: 99:2e:91:0d:8d:78:69:18:30:be:ee:32:d3:c4:78:b5:a8:7a: 0d:fb:48:f1:ce:c4:f3:4d:73:d2:01:9c:03:c3:93:a8:32:e6: e2:d1:ca:f3:04:e6:73:9a:1e:9a:1a:f2:ac:12:92:76:76:1e: d3:c2:33:a7:b8:54:6e:6d:15:f0:c2:58:26:1a:ae:0f:f7:17: 0d:c8:3e:f1:47:f7:30:f7:f1:84:7f:53:bd:9c:2e:ed:05:7e: 27:06:68:b9:c7:52:52:d7:86:5e:37:c0:ed:10:f7:04:09:95: 7c:1c:57:d2:ac:8b:45:cf:76:17:9b:9c:33:9e:6f:50:68:50: 6c:9c:5e:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbgReAvqcZVSfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YzFkYzU0ZTMtNmU0MS00MDk5LWE0ZTUtNWYzNWM4MDkxYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleloOoVnON0VvhvhoGnOLC1tIawJBPOU1G7m kvoQ83XkQS+bQaoyaEtgem5TlPQusio4w00UxZgkdrE5vD1HqIOilIxuOD8AlDRw x+XAQGST7MSZIz6GkBhgAD1JvhCASz5o3IHXp7m05JORX/9n7sw3JjKQVlbFUuET nYJv6ACf0Mssz2iUkR4jV1kSCN517Ksxblepi1x3UtGgufNNZa4Lwxo7azPWlTKq xpnCmkz91MjoUDIJIXxuJrU7KXWCH8Pi90+4mZaxnLmXJbGkiIXpm6dJH+WwmJoG CmSnxvE3fv6206y2SqCxeoeMiM5TNfe/Slil7k1gxDjlCHyadQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+SkIhgdI6WdWWmVhF7DSAesMHOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0YTFmMzgtMjNhMS0z NDg5LWFjNTQtNzYxNjk4MTljMTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy/E3iKUD93p1WM6DckgMLpTRByE93Nu/BrhoNJjCBnEPx/qnLbLRGc lue2zWBc4dXpgHuYaFrpLQwfI9lWKXJGKB9FvYqCeUCpyIrteswdT/I6Z8tvB1ma bGF2QaSRF4zzQ//GEuDVaz5P6BMZsThpvR3KeKtwHifBMW6JnZkukQ2NeGkYML7u MtPEeLWoeg37SPHOxPNNc9IBnAPDk6gy5uLRyvME5nOaHpoa8qwSknZ2HtPCM6e4 VG5tFfDCWCYarg/3Fw3IPvFH9zD38YR/U72cLu0FficGaLnHUlLXhl43wO0Q9wQJ lXwcV9Ksi0XPdhebnDOeb1BoUGycXoY= -----END CERTIFICATE-----Generated at Sun Apr 6 14:01:45 2025 by rpki-client