$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa File: 522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa (raw, json) Hash identifier: OylNmuYfF0uJPFeVWhNu6IeFWba/BlFLRl5NfQlFYeU= Subject key identifier: 2E:55:F0:47:10:BF:E4:43:FC:62:1E:58:D9:E2:DB:70:43:34:EE:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11B08362B4C0615722880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.23.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1b:08:36:2b:4c:06:15:72:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=39077517-d083-4d6b-8e1f-d0b5a87ee5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d2:97:b0:7d:09:40:ef:28:5a:8d:21:a8:30: 9e:1c:0c:ec:a3:25:9b:63:3f:af:e2:41:b0:35:7c: 95:92:74:52:0b:41:6f:0e:6d:33:b7:42:e5:b1:eb: 54:ea:9f:44:85:0e:f2:a0:3d:97:05:f0:31:c4:40: f5:66:72:7a:2b:25:8d:46:c9:e4:fc:64:f7:94:18: 9c:c2:87:bb:8f:e1:ba:5b:51:88:e6:de:6f:93:74: 47:95:08:ae:62:a7:00:05:9a:08:6d:dd:c8:12:6f: d4:90:67:ad:79:2c:fc:98:9c:58:61:75:38:cf:b4: 22:7a:39:fa:26:38:a2:b4:4d:77:c6:8d:e3:d8:dc: 9e:a2:dd:52:fa:35:0d:97:f2:bb:9d:6c:3f:d7:1c: 3a:d2:08:32:be:3a:94:d4:f6:c9:39:bd:41:e3:5a: 70:e6:27:0e:17:7c:77:d8:a0:8b:61:ef:51:a9:54: 4f:f5:0c:c6:a6:69:c2:97:45:03:f3:a5:81:74:84: ce:95:35:6c:37:7c:db:c1:b1:29:90:b1:96:9b:78: 74:a5:c2:ea:ad:bd:e2:54:42:07:1c:58:c9:c4:42: fe:39:50:a4:ed:4c:44:cd:8e:c7:3b:81:46:44:b6: a5:a0:69:0f:cd:35:da:be:de:da:d4:f7:5f:bd:93: e8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:55:F0:47:10:BF:E4:43:FC:62:1E:58:D9:E2:DB:70:43:34:EE:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d4:c2:d6:1d:cd:38:fb:47:5c:a8:1b:c5:7c:2c:c9:2c:33: 8b:23:a5:0a:ab:a8:58:69:7d:20:bd:05:0c:6b:bd:87:fd:ad: 8b:86:45:db:44:76:ca:61:18:98:5f:f4:69:8d:78:5f:c2:49: 5a:03:37:28:48:98:6f:51:0f:ec:ea:9d:38:01:07:d0:bd:16: e3:a9:80:8b:0d:11:44:e6:7b:d5:ba:43:8c:23:14:a5:bf:04: f4:0f:81:87:c6:3d:95:d8:08:3f:2d:05:4d:4a:93:2b:42:5b: 5c:ab:0a:9a:1b:2f:f3:dc:61:43:05:99:e6:18:f9:e3:61:93: 0e:7a:97:6b:c6:62:cb:5b:d8:f6:6d:14:16:19:a4:c7:8d:15: 72:1b:85:e9:13:97:94:6b:57:e0:30:11:fe:09:9c:d3:6d:a4: e6:14:7a:9d:0f:14:66:dd:8f:e0:0e:0f:35:a9:e2:81:04:4d: 97:29:9c:00:87:cb:4d:ec:13:53:10:88:5a:33:67:b6:d7:64: 54:77:08:ba:19:75:88:13:da:c5:7a:a4:27:73:1d:08:b0:b3: 1a:7b:3d:06:53:89:b6:46:45:3f:82:43:5b:09:48:ab:1d:cf: 3c:d3:f0:db:fc:eb:9b:40:3c:4f:71:c1:97:81:8e:ca:28:ba: 53:4c:d9:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RsINitMBhVyKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MzkwNzc1MTctZDA4My00ZDZiLThlMWYtZDBiNWE4N2VlNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntKXsH0JQO8oWo0hqDCeHAzsoyWbYz+v4kGw NXyVknRSC0FvDm0zt0LlsetU6p9EhQ7yoD2XBfAxxED1ZnJ6KyWNRsnk/GT3lBic woe7j+G6W1GI5t5vk3RHlQiuYqcABZoIbd3IEm/UkGeteSz8mJxYYXU4z7Qiejn6 JjiitE13xo3j2Nyeot1S+jUNl/K7nWw/1xw60ggyvjqU1PbJOb1B41pw5icOF3x3 2KCLYe9RqVRP9QzGpmnCl0UD86WBdITOlTVsN3zbwbEpkLGWm3h0pcLqrb3iVEIH HFjJxEL+OVCk7UxEzY7HO4FGRLaloGkPzTXavt7a1PdfvZPowQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5V8EcQv+RD/GIeWNni23BDNO6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIyYjNkMTYtZDBjYy0z NTE5LTg3MmUtYWE1MzVlMmI5YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/UwtYdzTj7R1yoG8V8LMksM4sjpQqrqFhpfSC9BQxrvYf9rYuGRdtE dsphGJhf9GmNeF/CSVoDNyhImG9RD+zqnTgBB9C9FuOpgIsNEUTme9W6Q4wjFKW/ BPQPgYfGPZXYCD8tBU1KkytCW1yrCpobL/PcYUMFmeYY+eNhkw56l2vGYstb2PZt FBYZpMeNFXIbhekTl5RrV+AwEf4JnNNtpOYUep0PFGbdj+AODzWp4oEETZcpnACH y03sE1MQiFozZ7bXZFR3CLoZdYgT2sV6pCdzHQiwsxp7PQZTibZGRT+CQ1sJSKsd zzzT8Nv865tAPE9xwZeBjsooulNM2Vg= -----END CERTIFICATE-----Generated at Sat Apr 5 18:23:54 2025 by rpki-client