$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa File: 38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa (raw, json) Hash identifier: CiXuWOjJAQIuEfCdiOJUyHV8WmqqKvq8Ov4yjJbSwAM= Subject key identifier: F4:2E:DF:59:BE:02:B6:24:A9:4A:AE:4F:0B:58:EA:87:BC:30:4E:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B769630E1B7DB7F7CA40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.21.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b7:69:63:0e:1b:7d:b7:f7:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=43f28055-18cc-4c25-bf65-6a9880706767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c7:3d:ce:f0:70:6c:c3:72:2e:a6:bb:70:dc: 60:96:38:4b:ff:af:96:17:b5:86:cc:18:75:bf:8b: ee:62:cb:64:53:57:42:cf:e6:21:df:19:a5:36:86: 41:6c:50:1d:37:28:3e:09:f4:b3:2a:50:d4:40:0f: 4e:3e:bd:73:f8:11:78:0b:4c:f3:2c:85:6e:9b:6b: 9a:bf:e3:2c:80:ed:1c:35:07:39:6b:4f:9b:03:3b: 86:e4:f3:ce:a5:ef:63:a5:18:c4:cf:ea:59:2f:f6: 21:ba:24:23:78:dd:6e:af:41:4e:63:2b:b3:f6:43: ac:b1:24:d4:20:c2:f8:23:93:14:8f:cf:a3:ce:72: 58:e2:6f:4d:6d:ca:33:75:e6:0a:80:13:af:16:a0: bc:37:49:f4:9b:cb:9f:d1:3c:7d:54:7e:cb:22:9d: 71:df:1d:08:20:4c:56:91:4e:27:4d:26:4a:3d:a9: 5d:76:1d:5e:14:f4:1b:9d:d4:3c:b8:6c:23:72:4a: b1:49:15:cf:86:c6:29:54:1e:be:d8:8a:ef:b7:a1: c2:20:ba:e7:0a:f0:98:e9:6d:27:81:aa:91:a8:23: bb:76:8a:38:17:85:21:47:5f:c9:83:71:7f:d0:4e: e4:6c:54:c4:95:ce:17:2b:4b:2d:d6:61:3a:2e:aa: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2E:DF:59:BE:02:B6:24:A9:4A:AE:4F:0B:58:EA:87:BC:30:4E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38fe83e8-2ba0-3d92-bee3-29bb207a943e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6a:5d:02:37:8d:43:8c:69:7c:02:ee:40:15:25:b5:de:54: 2a:ae:88:53:d4:81:65:7f:dc:06:8f:28:18:ea:b4:72:98:75: 05:e5:f5:df:c2:7e:a4:82:0f:6e:22:3e:11:24:aa:85:f7:33: 34:9a:51:41:35:7e:69:a8:b6:77:39:5e:09:62:7f:b9:a5:7e: 6a:a9:10:25:a7:10:99:4a:b2:46:6d:1c:7e:ec:69:59:b4:35: e9:ba:9f:21:1b:40:c4:10:8e:b8:18:d9:10:07:3a:04:bb:73: 44:02:09:9b:f0:8f:c3:14:3b:a7:78:90:61:31:9b:4d:73:69: 60:5d:49:94:f1:52:3f:26:d9:3c:13:6b:1a:a4:fd:e1:a2:8e: 94:20:11:de:38:08:43:83:56:40:4e:67:08:94:65:9d:0e:32: ae:da:07:91:05:03:99:03:6f:0f:84:3f:7e:b8:54:7d:84:31: 7c:43:6a:32:ce:5c:36:e7:d2:01:9f:bf:d3:bd:8d:9e:31:f4: 1f:b3:ab:7a:3d:dc:9a:0d:60:a5:ed:bc:7c:83:03:3a:92:6f: 4c:4e:7e:5a:1f:45:34:05:0b:76:01:18:43:c2:07:36:0a:45: 63:bd:d0:f8:48:0d:c8:16:c7:44:d0:73:80:f8:73:89:74:0a: 80:0c:1c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbdpYw4bfbf3ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NDNmMjgwNTUtMThjYy00YzI1LWJmNjUtNmE5ODgwNzA2NzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMc9zvBwbMNyLqa7cNxgljhL/6+WF7WGzBh1 v4vuYstkU1dCz+Yh3xmlNoZBbFAdNyg+CfSzKlDUQA9OPr1z+BF4C0zzLIVum2ua v+MsgO0cNQc5a0+bAzuG5PPOpe9jpRjEz+pZL/YhuiQjeN1ur0FOYyuz9kOssSTU IML4I5MUj8+jznJY4m9NbcozdeYKgBOvFqC8N0n0m8uf0Tx9VH7LIp1x3x0IIExW kU4nTSZKPalddh1eFPQbndQ8uGwjckqxSRXPhsYpVB6+2Irvt6HCILrnCvCY6W0n gaqRqCO7doo4F4UhR1/Jg3F/0E7kbFTElc4XK0st1mE6LqovZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQu31m+ArYkqUquTwtY6oe8ME72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzhmZTgzZTgtMmJhMC0z ZDkyLWJlZTMtMjliYjIwN2E5NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZqXQI3jUOMaXwC7kAVJbXeVCquiFPUgWV/3AaPKBjqtHKYdQXl9d/C fqSCD24iPhEkqoX3MzSaUUE1fmmotnc5Xglif7mlfmqpECWnEJlKskZtHH7saVm0 Nem6nyEbQMQQjrgY2RAHOgS7c0QCCZvwj8MUO6d4kGExm01zaWBdSZTxUj8m2TwT axqk/eGijpQgEd44CEODVkBOZwiUZZ0OMq7aB5EFA5kDbw+EP364VH2EMXxDajLO XDbn0gGfv9O9jZ4x9B+zq3o93JoNYKXtvHyDAzqSb0xOflofRTQFC3YBGEPCBzYK RWO90PhIDcgWx0TQc4D4c4l0CoAMHPQ= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:30 2025 by rpki-client