$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa File: 5144e87e-9a6d-396f-afff-14dff19a9e16.roa (raw, json) Hash identifier: pxQP9vrFzMmcf/tLGiVRdlXM7hsEwN0X712nD3y2rqU= Subject key identifier: F3:00:1A:3B:70:7D:57:AE:4A:93:5C:54:F3:B1:68:6E:A1:D1:50:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716371288DE3F602201600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.22.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:63:71:28:8d:e3:f6:02:20:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=800630b0-ab05-45d7-9fda-6aff95f76789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:f1:5d:7e:3d:b8:d4:5b:53:9f:c9:1e:ba:a4: 14:bc:d0:38:ef:ea:3b:d1:c6:4c:6a:9f:dd:6a:60: a9:3d:44:ab:db:23:b0:7d:64:4b:d2:bf:d8:42:77: 0b:12:43:16:35:18:f6:be:72:39:9c:0d:6e:ed:ca: 56:a7:3d:3d:b7:2c:11:b8:62:88:a5:bb:ae:fa:ec: 61:44:05:c3:50:c2:6d:af:58:e5:81:21:bf:1e:38: a2:68:fb:7e:12:9d:00:c8:36:97:e9:04:44:06:26: 59:f4:44:d2:f8:bc:9e:c6:f8:0a:a1:c0:c0:43:e9: 1d:55:f3:25:19:a9:ea:72:05:e9:6b:10:25:44:7f: 22:b5:18:b9:e2:04:09:bb:48:02:db:9e:a9:98:0e: a7:28:39:0c:75:91:8c:f1:b5:97:2b:93:0d:95:ba: 42:05:27:25:b4:78:d3:d5:ab:59:9b:c9:f7:92:57: 8d:78:fd:cb:82:65:f1:2f:df:5d:25:e3:20:f7:d2: 7b:57:ae:d8:3a:17:e5:a0:07:e7:fc:1d:e0:19:7a: 90:28:23:11:ab:30:8a:80:c9:f4:1a:22:f4:94:f1: f2:8b:d1:6c:31:da:0b:43:78:4e:ac:df:c6:ea:3d: 82:47:cd:f9:0f:15:20:17:ce:48:74:aa:d3:77:73: f7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:00:1A:3B:70:7D:57:AE:4A:93:5C:54:F3:B1:68:6E:A1:D1:50:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5144e87e-9a6d-396f-afff-14dff19a9e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:51:bc:0e:3e:13:e7:79:73:f0:75:2b:0a:68:23:aa:a9:12: 4e:78:cd:fe:ff:3c:da:79:82:b3:cb:f9:c2:8d:f3:26:bf:dc: 00:8f:77:5b:a1:61:b2:45:6f:30:75:ba:98:63:1c:0d:7c:4b: c3:73:ee:8f:05:1a:45:a3:c2:85:2b:b6:97:60:c6:95:2e:5a: 3d:83:7f:35:40:67:f0:88:12:76:6d:9b:6b:80:40:95:0e:96: 13:51:70:c8:09:23:4a:e8:97:6f:2d:7a:ba:e1:39:ba:b6:5e: 37:ed:c1:1d:a9:76:89:78:2c:61:80:b8:de:03:0d:15:c5:08: 82:ef:b1:e0:8d:fc:b2:f0:af:56:08:2b:01:0e:f4:80:3c:70: f5:87:05:11:7b:bf:18:73:d9:c8:74:32:38:da:2c:b3:4a:37: d2:4a:5f:f7:76:92:19:76:cf:67:9f:5a:88:48:a3:ac:76:4e: b8:ea:1b:f6:44:e0:5b:d2:f7:09:fd:c9:5e:24:65:20:b3:32: 49:0d:e7:0e:65:28:a5:a5:8f:2d:1e:f9:d5:6d:26:77:e2:4c: 46:af:51:c2:be:32:5a:3d:63:fb:fb:3b:97:7e:94:6e:76:f8: 29:33:55:89:9d:29:6f:6e:9b:78:8b:58:c3:44:b6:aa:8f:8a: a8:78:33:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWNxKI3j9gIgFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODAwNjMwYjAtYWIwNS00NWQ3LTlmZGEtNmFmZjk1Zjc2Nzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPFdfj241FtTn8keuqQUvNA47+o70cZMap/d amCpPUSr2yOwfWRL0r/YQncLEkMWNRj2vnI5nA1u7cpWpz09tywRuGKIpbuu+uxh RAXDUMJtr1jlgSG/HjiiaPt+Ep0AyDaX6QREBiZZ9ETS+LyexvgKocDAQ+kdVfMl GanqcgXpaxAlRH8itRi54gQJu0gC256pmA6nKDkMdZGM8bWXK5MNlbpCBScltHjT 1atZm8n3kleNeP3LgmXxL99dJeMg99J7V67YOhfloAfn/B3gGXqQKCMRqzCKgMn0 GiL0lPHyi9FsMdoLQ3hOrN/G6j2CR835DxUgF85IdKrTd3P3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMAGjtwfVeuSpNcVPOxaG6h0VDfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTE0NGU4N2UtOWE2ZC0z OTZmLWFmZmYtMTRkZmYxOWE5ZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHpRvA4+E+d5c/B1KwpoI6qpEk54zf7/PNp5grPL+cKN8ya/3ACPd1uh YbJFbzB1uphjHA18S8Nz7o8FGkWjwoUrtpdgxpUuWj2DfzVAZ/CIEnZtm2uAQJUO lhNRcMgJI0rol28terrhObq2XjftwR2pdol4LGGAuN4DDRXFCILvseCN/LLwr1YI KwEO9IA8cPWHBRF7vxhz2ch0MjjaLLNKN9JKX/d2khl2z2efWohIo6x2TrjqG/ZE 4FvS9wn9yV4kZSCzMkkN5w5lKKWljy0e+dVtJnfiTEavUcK+Mlo9Y/v7O5d+lG52 +CkzVYmdKW9um3iLWMNEtqqPiqh4M84= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:42 2025 by rpki-client