$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ac4fc24-5850-3710-b5a4-de2920edd318.roa File: 2ac4fc24-5850-3710-b5a4-de2920edd318.roa (raw, json) Hash identifier: i3W83PTFqWBKqdNNfjXSKlLa4tvmLtU3Rm0ZWANCvPs= Subject key identifier: 13:49:BB:D0:25:10:75:86:7C:21:69:16:43:95:43:60:98:F9:5D:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA25EDDE9C06220C732A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ac4fc24-5850-3710-b5a4-de2920edd318.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.16.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:25:ed:de:9c:06:22:0c:73:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=72d97e3e-6911-48e9-b6bf-3101add97255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ed:04:3c:62:8a:d0:6b:d7:66:bb:96:86:1c: b3:9c:8a:d5:dc:a7:c4:a5:ea:16:9a:42:22:cc:d0: e5:34:6b:3e:72:8b:92:f7:05:d7:3e:bc:ad:4f:ac: c8:2f:19:e9:a9:28:4f:9e:d8:42:6e:8b:96:65:65: 51:47:d6:5d:3a:06:3c:90:50:c4:5c:de:47:4a:fd: 40:2f:83:98:d1:1c:76:aa:42:95:2d:19:9b:5a:72: df:33:3d:4f:53:db:2e:a5:07:33:91:e5:b4:41:48: fd:de:a2:05:ca:58:6a:66:ea:cb:81:4a:75:31:ab: a7:e0:04:86:7d:9f:f2:e2:07:3a:70:0a:fb:84:e7: b8:1b:90:69:82:97:a2:58:fb:e7:82:41:7c:14:c1: 3f:c6:b3:3d:82:f4:ec:1b:5c:b2:93:8b:fb:1c:f1: 4c:e3:77:4c:fb:ee:2c:39:b3:81:f3:a0:c3:02:9a: 2c:97:5b:12:f4:2b:82:84:c3:1d:53:7f:9b:d3:ad: 3d:72:f4:5d:2d:c8:f1:25:61:75:8e:f2:e7:09:be: 80:24:06:57:1c:25:de:57:ad:4c:5e:25:a0:44:ee: 74:87:67:ef:7e:f7:32:f6:d8:8a:78:dc:21:bf:e0: 2f:2f:06:7b:9c:5a:50:9b:cc:f2:75:3a:54:03:82: 3f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:49:BB:D0:25:10:75:86:7C:21:69:16:43:95:43:60:98:F9:5D:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2ac4fc24-5850-3710-b5a4-de2920edd318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d7:1d:b6:0f:f2:95:50:54:ee:b2:f8:0a:64:d1:a1:12:8f: 91:29:91:24:51:64:50:04:66:6d:6f:6b:92:8d:d7:e8:7a:11: 80:b3:82:d1:eb:7c:ad:d7:28:ef:d4:e7:c7:37:1b:5f:a2:88: 0d:67:ba:83:1b:2d:34:35:5e:d7:8d:5f:b6:f2:93:f5:af:5b: dd:36:69:d1:5e:43:73:ef:de:b4:93:31:5f:34:d3:67:21:e3: 6d:29:9c:9a:95:86:9b:54:da:66:d9:07:ca:e8:a1:54:0c:be: 96:03:ba:7b:3d:b2:34:cd:bb:f0:f2:81:02:52:d8:a3:78:10: c7:bc:fb:c9:b3:0c:1f:24:5f:39:32:62:94:88:b2:72:42:94: 71:74:19:17:b6:60:8d:36:e3:ec:8c:56:cb:1e:82:c3:46:f9: 8f:5b:1d:6c:a9:8b:7f:ae:85:f5:96:19:62:ce:43:1a:d5:26: 58:52:f6:30:be:89:00:ea:17:97:d3:0f:e8:6c:86:b6:f1:d0: 67:61:09:35:41:b6:42:cd:40:dc:e6:83:61:af:8e:96:1a:63: eb:37:e6:c1:45:9c:a8:4c:29:7a:c5:62:2b:5f:95:5f:0e:ca: 2b:61:fb:7f:29:4b:6b:43:a2:e3:41:3d:97:4b:5b:39:af:d9: 3f:c0:26:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiXt3pwGIgxzKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk NzJkOTdlM2UtNjkxMS00OGU5LWI2YmYtMzEwMWFkZDk3MjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+0EPGKK0GvXZruWhhyznIrV3KfEpeoWmkIi zNDlNGs+couS9wXXPrytT6zILxnpqShPnthCbouWZWVRR9ZdOgY8kFDEXN5HSv1A L4OY0Rx2qkKVLRmbWnLfMz1PU9supQczkeW0QUj93qIFylhqZurLgUp1Maun4ASG fZ/y4gc6cAr7hOe4G5BpgpeiWPvngkF8FME/xrM9gvTsG1yyk4v7HPFM43dM++4s ObOB86DDAposl1sS9CuChMMdU3+b0609cvRdLcjxJWF1jvLnCb6AJAZXHCXeV61M XiWgRO50h2fvfvcy9tiKeNwhv+AvLwZ7nFpQm8zydTpUA4I/LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNJu9AlEHWGfCFpFkOVQ2CY+V0BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmFjNGZjMjQtNTg1MC0z NzEwLWI1YTQtZGUyOTIwZWRkMzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvXHbYP8pVQVO6y+Apk0aESj5EpkSRRZFAEZm1va5KN1+h6EYCzgtHr fK3XKO/U58c3G1+iiA1nuoMbLTQ1XteNX7byk/WvW902adFeQ3Pv3rSTMV8002ch 420pnJqVhptU2mbZB8rooVQMvpYDuns9sjTNu/DygQJS2KN4EMe8+8mzDB8kXzky YpSIsnJClHF0GRe2YI024+yMVssegsNG+Y9bHWypi3+uhfWWGWLOQxrVJlhS9jC+ iQDqF5fTD+hshrbx0GdhCTVBtkLNQNzmg2GvjpYaY+s35sFFnKhMKXrFYitflV8O yith+38pS2tDouNBPZdLWzmv2T/AJmE= -----END CERTIFICATE-----Generated at Sat Jun 7 05:06:24 2025 by rpki-client