$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa File: 650f609a-46ec-31db-af26-e52181428728.roa (raw, json) Hash identifier: dDX4/6rMy/f6BX80ccWI5zru/fLCH8IT/SmXUzWPDAw= Subject key identifier: EE:E1:C6:BF:8E:3B:DA:A2:46:FC:D0:AC:24:91:C4:AA:A8:33:5A:76 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849568EBABBB1ED7D0D1CAD09A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 7029 IP address blocks: 98.22.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:ba:bb:b1:ed:7d:0d:1c:ad:09:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=2ebbd75a-d9d3-4cd2-8296-5ab481d1180b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fb:95:5d:e7:dc:e4:e8:18:9f:1f:1a:db:b5: 45:0e:6a:f6:e2:91:a5:e7:29:1f:13:ae:c8:bf:ca: e8:dd:63:18:8c:7c:3f:cb:94:f5:a3:ee:22:78:bb: 33:41:1e:f5:42:7d:03:f1:b7:38:e2:91:7f:22:72: ff:e2:b8:b3:f1:e0:7b:80:c2:94:34:13:22:b2:eb: 35:5c:1e:40:0d:cd:87:20:3b:39:24:6c:11:09:fc: da:72:42:26:1d:45:03:f6:48:0e:d4:90:98:ad:fe: 09:c1:b6:42:ca:6f:71:b9:78:72:03:16:eb:af:17: e2:11:17:9d:38:82:d9:10:1c:6b:da:a2:c8:7e:22: 0a:a5:82:d3:53:bc:0f:29:f2:fe:d8:21:6f:35:05: 38:47:ec:30:e0:21:3a:6b:ca:95:30:b1:2c:d2:fa: 14:e0:de:ec:2b:e8:6b:3f:72:1e:16:65:e4:18:d5: 36:cf:01:d5:bd:f3:a2:96:a1:65:e6:1b:85:d1:66: 12:d8:11:f4:c6:d0:8a:5b:e8:0a:25:a9:e2:f6:d1: 95:3b:b7:12:7b:26:39:f0:0b:83:32:75:bb:46:d7: 93:fb:bd:03:87:40:c0:59:97:39:80:cc:cb:e3:cf: 26:1d:be:71:8f:f0:13:55:04:6c:a1:74:cc:57:e4: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E1:C6:BF:8E:3B:DA:A2:46:FC:D0:AC:24:91:C4:AA:A8:33:5A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/650f609a-46ec-31db-af26-e52181428728.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:12:f3:27:ee:1a:e5:8a:3e:e2:14:56:84:9b:47:90:9e:75: 08:fc:69:e0:c9:b6:43:9f:d7:2d:5e:73:2e:4c:89:c5:61:48: 6d:66:47:fc:94:49:9f:a2:7f:b3:5e:3f:e5:f9:7e:6a:77:b5: 59:97:dd:51:da:f8:2e:4f:af:de:ab:c6:b1:a6:66:2d:1c:2c: c8:63:a5:6b:78:9a:64:1a:76:56:6e:df:fa:9a:73:a1:b5:2a: 84:aa:d8:86:60:50:92:42:1f:f1:66:d0:ca:40:ba:5b:a8:b5: 79:20:c1:e3:56:81:23:66:8f:26:ad:56:85:89:d5:80:16:26: d4:e0:68:19:ae:56:db:31:f7:7d:5c:10:c1:0e:b7:b0:6a:09: d1:10:d8:6a:ed:e3:a2:d3:2b:57:df:33:ae:33:23:64:b1:22: a2:08:8a:e1:d9:8c:e0:a3:3d:d9:4e:08:49:5f:55:98:1a:35: 2d:65:80:fc:03:94:8d:57:bc:1e:71:c2:7f:7b:1c:b1:b0:78: 9d:2f:12:b2:81:3d:72:d6:75:dc:11:df:26:36:8a:33:df:fa: 2e:e2:18:5e:6d:f7:c3:d8:af:c2:8d:c4:2c:0f:92:83:b6:c7: 4e:9f:b9:66:4e:28:ad:c7:bc:b1:58:8d:59:45:ea:84:79:f5: 42:79:eb:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjrq7se19DRytCaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk MmViYmQ3NWEtZDlkMy00Y2QyLTgyOTYtNWFiNDgxZDExODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPuVXefc5OgYnx8a27VFDmr24pGl5ykfE67I v8ro3WMYjHw/y5T1o+4ieLszQR71Qn0D8bc44pF/InL/4riz8eB7gMKUNBMisus1 XB5ADc2HIDs5JGwRCfzackImHUUD9kgO1JCYrf4JwbZCym9xuXhyAxbrrxfiERed OILZEBxr2qLIfiIKpYLTU7wPKfL+2CFvNQU4R+ww4CE6a8qVMLEs0voU4N7sK+hr P3IeFmXkGNU2zwHVvfOilqFl5huF0WYS2BH0xtCKW+gKJani9tGVO7cSeyY58AuD MnW7RteT+70Dh0DAWZc5gMzL488mHb5xj/ATVQRsoXTMV+Rt8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7hxr+OO9qiRvzQrCSRxKqoM1p2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjUwZjYwOWEtNDZlYy0z MWRiLWFmMjYtZTUyMTgxNDI4NzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsS8yfuGuWKPuIUVoSbR5CedQj8aeDJtkOf1y1ecy5MicVhSG1mR/yU SZ+if7NeP+X5fmp3tVmX3VHa+C5Pr96rxrGmZi0cLMhjpWt4mmQadlZu3/qac6G1 KoSq2IZgUJJCH/Fm0MpAuluotXkgweNWgSNmjyatVoWJ1YAWJtTgaBmuVtsx931c EMEOt7BqCdEQ2Grt46LTK1ffM64zI2SxIqIIiuHZjOCjPdlOCElfVZgaNS1lgPwD lI1XvB5xwn97HLGweJ0vErKBPXLWddwR3yY2ijPf+i7iGF5t98PYr8KNxCwPkoO2 x06fuWZOKK3HvLFYjVlF6oR59UJ561M= -----END CERTIFICATE-----Generated at Sat Apr 5 23:24:23 2025 by rpki-client