$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5055ae96-4315-352c-86a6-4d187a283660.roa File: 5055ae96-4315-352c-86a6-4d187a283660.roa (raw, json) Hash identifier: ijpRTyXHOOxtVQMwPcT2zBCByq2wmHhE/YuEdWruoks= Subject key identifier: 61:36:42:28:63:B7:4C:60:24:25:5F:33:D8:C5:2F:3D:A7:76:04:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849780F1F42EBB7200C0D555080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5055ae96-4315-352c-86a6-4d187a283660.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.23.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:1f:42:eb:b7:20:0c:0d:55:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=22117a68-c2d7-4413-a43b-44bd1bdd0e1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:39:cf:69:4e:6e:68:b8:f0:56:9f:9f:63: f3:42:4e:e7:61:9c:2d:57:68:ff:b7:89:f2:55:1e: 84:5a:9e:34:14:c3:c5:3c:23:4c:58:db:fd:ba:67: 67:a8:4f:f7:ff:82:f0:27:dc:c9:53:6f:45:62:73: d0:e0:b9:47:83:ec:f3:33:87:0f:39:4c:40:fb:fc: d2:a1:f2:b2:4f:26:31:5a:2f:1d:6f:5b:03:db:b8: fa:7d:c1:21:47:b3:c9:ac:74:c9:04:49:9c:7b:61: 8e:5d:29:bd:e4:0b:a6:3e:5a:4f:1e:c2:f2:e5:a6: 3d:a1:81:61:a9:a4:07:7e:ab:63:62:11:09:f8:be: 15:ec:bd:4c:73:0b:34:89:84:82:f3:86:8e:b1:64: 10:ba:02:de:ec:aa:54:ab:58:35:11:d0:4b:22:93: e6:13:2f:aa:67:87:bb:8e:64:a6:e4:da:c9:b1:c7: 02:30:27:31:67:4e:93:1e:32:c3:d0:a7:e5:ab:e8: f7:8a:81:f6:84:98:62:2c:c4:ea:07:8d:21:87:5c: bb:e8:00:60:04:a1:0c:99:c3:3c:07:45:51:d2:be: 78:59:0f:d8:d4:24:67:e9:04:5d:28:e6:2d:67:41: 1e:df:da:da:e2:47:c6:88:cd:8e:89:47:16:33:25: f4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:36:42:28:63:B7:4C:60:24:25:5F:33:D8:C5:2F:3D:A7:76:04:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5055ae96-4315-352c-86a6-4d187a283660.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ab:d3:94:06:d0:11:86:1a:9f:f7:c5:ae:ec:f8:76:46:c9: 32:03:cf:1a:3b:2f:e7:c9:ca:4e:7c:e4:8c:c5:03:d0:81:f5: c6:e7:a1:9c:7b:05:cf:88:4e:1c:d3:94:48:1e:4f:d2:99:58: 14:75:e5:21:69:89:11:82:1c:75:cd:c9:cd:6d:73:fd:5e:65: 2b:16:55:46:be:d8:a0:43:57:b6:aa:fa:b7:3f:7a:09:8e:18: af:a3:1d:36:b2:67:33:14:24:25:22:84:50:c3:4e:54:61:e6: f1:37:ef:64:4f:f1:6f:93:3b:33:50:70:c7:93:98:01:df:bb: c9:a9:99:a1:0b:46:57:06:12:6a:bd:1f:0a:4d:84:43:51:2c: af:0b:d8:43:05:e0:0f:f0:bf:e4:71:66:29:3c:38:35:1c:e6: 1e:de:b2:95:8f:99:b7:01:78:bc:11:79:56:8a:79:71:7c:08: ad:36:ca:f2:ef:4a:30:69:c8:1a:ca:0c:2a:2e:d8:f0:c3:1b: 3d:13:38:a2:0e:df:4c:c8:77:29:c6:14:0e:e1:40:6d:9e:44: 13:c3:1e:47:a9:c6:f2:71:a9:ed:1c:e0:6f:67:a9:66:69:f8: ef:bd:f1:af:81:33:45:cb:0f:d7:7f:18:f8:00:99:7f:30:b3: d7:95:c2:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dx9C67cgDA1VUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MjIxMTdhNjgtYzJkNy00NDEzLWE0M2ItNDRiZDFiZGQwZTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHM5z2lObmi48Fafn2PzQk7nYZwtV2j/t4ny VR6EWp40FMPFPCNMWNv9umdnqE/3/4LwJ9zJU29FYnPQ4LlHg+zzM4cPOUxA+/zS ofKyTyYxWi8db1sD27j6fcEhR7PJrHTJBEmce2GOXSm95AumPlpPHsLy5aY9oYFh qaQHfqtjYhEJ+L4V7L1Mcws0iYSC84aOsWQQugLe7KpUq1g1EdBLIpPmEy+qZ4e7 jmSm5NrJsccCMCcxZ06THjLD0Kflq+j3ioH2hJhiLMTqB40hh1y76ABgBKEMmcM8 B0VR0r54WQ/Y1CRn6QRdKOYtZ0Ee39ra4kfGiM2OiUcWMyX0zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE2Qihjt0xgJCVfM9jFLz2ndgTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA1NWFlOTYtNDMxNS0z NTJjLTg2YTYtNGQxODdhMjgzNjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhf1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOr05QG0BGGGp/3xa7s+HZGyTIDzxo7L+fJyk585IzFA9CB9cbnoZx7 Bc+IThzTlEgeT9KZWBR15SFpiRGCHHXNyc1tc/1eZSsWVUa+2KBDV7aq+rc/egmO GK+jHTayZzMUJCUihFDDTlRh5vE372RP8W+TOzNQcMeTmAHfu8mpmaELRlcGEmq9 HwpNhENRLK8L2EMF4A/wv+RxZik8ODUc5h7espWPmbcBeLwReVaKeXF8CK02yvLv SjBpyBrKDCou2PDDGz0TOKIO30zIdynGFA7hQG2eRBPDHkepxvJxqe0c4G9nqWZp +O+98a+BM0XLD9d/GPgAmX8ws9eVwqE= -----END CERTIFICATE-----Generated at Thu Apr 10 08:48:49 2025 by rpki-client