$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa File: 4923db70-c81a-34e2-a88f-f0e2426017c0.roa (raw, json) Hash identifier: X7VC6L+w6BF1Dpj02CTv/5UBAmS4FDBaUutpNjnGv6s= Subject key identifier: 42:9D:33:89:19:7B:75:18:48:7E:14:90:BB:B2:1C:2A:11:E5:E8:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71634D5AE584335CDAE200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.22.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:63:4d:5a:e5:84:33:5c:da:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=d797e78f-5783-4a2f-8a3a-1c293d934c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c6:60:3d:0d:8d:45:d4:8b:4e:79:90:0a:f6: 2e:59:82:f7:7b:ed:6e:af:fa:05:d6:42:49:60:ce: 23:38:1d:35:a9:0f:eb:68:b0:df:e7:07:2f:75:28: 18:e9:99:1b:47:63:b5:9b:1f:fd:06:00:ea:57:dc: 30:9d:57:ce:62:5f:e7:62:99:1c:49:89:19:a9:0d: c8:50:8f:cc:01:4c:45:34:54:66:8a:b7:19:14:31: c8:01:1c:f3:0c:38:1e:ba:d0:e7:dc:85:62:cb:b2: e7:5e:e0:38:b6:f5:09:39:7a:65:66:23:cc:f3:07: 31:00:17:a4:30:1e:db:db:b6:79:9f:b2:30:98:4e: e7:e0:1c:f0:bc:4c:38:f5:51:68:ae:bb:f9:67:75: 5f:b1:ae:60:d1:e2:09:40:2f:03:8a:f9:89:f7:4a: 06:8e:08:29:69:eb:e9:e3:fd:ed:6c:97:a9:87:cb: e0:67:cc:8d:8a:93:0b:42:06:f3:8b:c4:9e:1d:34: 87:af:de:ef:27:7a:e1:73:ff:66:62:6f:c8:cd:d0: 74:1c:68:7f:63:55:57:5b:d5:e7:b4:05:05:29:74: 33:3b:5c:1c:8c:fe:fd:f9:61:d6:65:a4:25:23:03: eb:10:3e:b5:24:3f:26:45:e0:43:57:0d:e9:8a:eb: 05:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9D:33:89:19:7B:75:18:48:7E:14:90:BB:B2:1C:2A:11:E5:E8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4923db70-c81a-34e2-a88f-f0e2426017c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c1:58:43:3f:dd:fa:c8:cf:f7:1f:d2:98:19:fa:d8:c6:b5: 55:5f:21:a7:12:e9:cb:11:4e:53:6d:a0:38:5f:69:84:2a:ee: e1:b3:81:4e:f6:d2:e9:e8:21:65:b7:ad:64:33:b6:ab:06:7f: 37:02:cb:a4:06:f8:e3:d4:9f:28:80:a3:4b:e8:fd:14:bd:01: a2:8d:29:e8:20:c2:52:b5:e3:eb:41:51:26:9c:b5:3b:b3:26: 7a:5e:a8:d9:09:e4:47:c7:13:f9:43:6b:ef:c9:be:87:67:75: d2:d9:cc:79:86:0a:cd:b6:ef:36:9b:51:fc:15:af:ad:9f:8c: d0:be:ba:a5:65:4d:37:20:32:52:ba:12:56:00:d1:1f:3b:44: cb:20:93:6a:b1:1d:a7:97:0b:e8:6f:f9:3d:00:c7:92:3f:17: 3e:1c:a9:0d:6d:96:a1:15:82:9d:43:01:bb:76:09:88:60:59: 3c:ca:dd:46:a2:0b:08:81:f8:29:93:98:1e:ae:39:c8:a4:19: dc:9e:53:37:94:a7:e4:58:e5:a8:ec:d3:4d:a9:75:a0:97:51: 55:29:91:78:50:85:10:e7:68:5f:90:a2:f4:eb:96:9d:1e:1c: 5a:e2:5f:49:94:43:5d:b8:27:cf:b6:bb:c5:45:e3:b6:6c:72: bb:d7:4d:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWNNWuWEM1za4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZDc5N2U3OGYtNTc4My00YTJmLThhM2EtMWMyOTNkOTM0YzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcZgPQ2NRdSLTnmQCvYuWYL3e+1ur/oF1kJJ YM4jOB01qQ/raLDf5wcvdSgY6ZkbR2O1mx/9BgDqV9wwnVfOYl/nYpkcSYkZqQ3I UI/MAUxFNFRmircZFDHIARzzDDgeutDn3IViy7LnXuA4tvUJOXplZiPM8wcxABek MB7b27Z5n7IwmE7n4BzwvEw49VForrv5Z3Vfsa5g0eIJQC8DivmJ90oGjggpaevp 4/3tbJeph8vgZ8yNipMLQgbzi8SeHTSHr97vJ3rhc/9mYm/IzdB0HGh/Y1VXW9Xn tAUFKXQzO1wcjP79+WHWZaQlIwPrED61JD8mReBDVw3piusFrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKdM4kZe3UYSH4UkLuyHCoR5egcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkyM2RiNzAtYzgxYS0z NGUyLWE4OGYtZjBlMjQyNjAxN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjBWEM/3frIz/cf0pgZ+tjGtVVfIacS6csRTlNtoDhfaYQq7uGzgU72 0unoIWW3rWQztqsGfzcCy6QG+OPUnyiAo0vo/RS9AaKNKeggwlK14+tBUSactTuz JnpeqNkJ5EfHE/lDa+/JvodnddLZzHmGCs227zabUfwVr62fjNC+uqVlTTcgMlK6 ElYA0R87RMsgk2qxHaeXC+hv+T0Ax5I/Fz4cqQ1tlqEVgp1DAbt2CYhgWTzK3Uai CwiB+CmTmB6uOcikGdyeUzeUp+RY5ajs002pdaCXUVUpkXhQhRDnaF+QovTrlp0e HFriX0mUQ124J8+2u8VF47ZscrvXTXA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:57 2025 by rpki-client