$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79860a8c-941e-3c28-9c2b-35f78f20cc5b.roa File: 79860a8c-941e-3c28-9c2b-35f78f20cc5b.roa (raw, json) Hash identifier: dSMh88pLsWiq9+zIcbhYNNe9nssebNj8MRA0OzcZXc8= Subject key identifier: B5:C5:86:9F:B3:50:B4:AD:CC:BB:0A:22:32:90:CF:EC:38:CD:94:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584903C286CB3407CB5B79659180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79860a8c-941e-3c28-9c2b-35f78f20cc5b.roa Signing time: Wed 26 Feb 2025 21:13:12 +0000 ROA not before: Wed 26 Feb 2025 21:13:12 +0000 ROA not after: Tue 27 May 2025 20:13:12 +0000 asID: 7029 IP address blocks: 98.18.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:03:c2:86:cb:34:07:cb:5b:79:65:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 26 21:13:12 2025 GMT Not After : May 27 20:13:12 2025 GMT Subject: CN=4111345e-f6dc-41ef-aeb5-314a424822d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:c5:e2:97:00:80:59:e2:e7:64:fe:cf:e5: 74:01:10:e3:75:38:59:b3:17:3e:56:dd:f0:76:d1: a7:38:ef:ab:8f:14:55:86:ea:9a:c4:24:be:4e:e6: 4d:66:1e:f2:8f:19:98:03:f6:96:38:db:db:18:b0: 82:c8:89:2b:bd:92:7e:91:ca:8d:08:a3:7e:ff:f8: e2:69:1f:cb:2d:46:c3:23:51:c5:a7:15:69:ee:09: 6e:54:65:4d:69:0a:b7:42:61:db:8e:4d:75:d1:8c: 90:56:a0:ed:f6:ac:2c:b2:5d:c9:aa:99:ad:54:d2: 32:ff:1b:18:ab:bf:a4:9f:c0:da:6a:ec:4c:b8:ed: 75:76:0b:5e:f7:b7:09:85:2c:eb:24:f2:05:63:d7: 02:69:c1:0e:19:60:fa:84:d4:29:50:25:e5:c7:3d: c0:3d:d7:1a:8c:9c:6e:86:73:ce:ae:22:f3:39:47: c0:7a:86:a0:12:35:16:99:d9:3b:a2:d1:9f:dc:36: e8:5a:6b:aa:50:98:b8:fa:85:1b:ff:d1:e3:72:02: 0c:52:4f:82:06:3f:c2:25:92:a8:dd:5a:79:a0:82: bf:26:a3:2b:9d:59:e8:f3:67:2f:41:05:b9:f1:2b: 56:7d:49:46:55:b1:db:15:c4:43:09:6c:e7:f9:60: f4:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:C5:86:9F:B3:50:B4:AD:CC:BB:0A:22:32:90:CF:EC:38:CD:94:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79860a8c-941e-3c28-9c2b-35f78f20cc5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d7:eb:bc:0d:00:1b:f0:ed:81:e6:70:e0:ae:21:76:4b:bc: 30:b5:8e:ca:cf:e4:bf:01:ae:e2:f5:18:ca:90:c4:b5:4f:8b: 87:b6:a1:ff:34:ce:df:f4:61:23:b3:06:d3:b0:03:10:58:82: a1:ee:80:60:d0:55:ff:c0:54:2d:72:bc:9e:2f:55:70:4b:8d: f9:ce:41:86:5b:40:40:50:d9:4a:1a:fd:50:56:16:22:61:56: 57:f2:23:4a:da:8f:0f:67:17:c9:a1:ea:1d:87:a8:a7:1d:a5: e5:ae:b6:91:95:f3:2a:27:b1:02:7b:16:fc:6b:d8:e4:20:33: 0c:4f:95:6e:d0:e9:c1:4c:f3:af:a7:22:ee:2d:9e:b8:ad:f9: 86:32:50:02:af:22:8c:5a:39:78:13:cd:8e:7a:9d:5a:b8:d2: ef:24:89:25:92:1a:1c:35:c8:c0:c3:dd:66:d0:e4:dd:df:d4: 86:99:84:da:ae:91:92:96:4c:5c:11:86:19:50:56:30:cc:5e: 59:bf:ec:7b:8e:7c:d0:28:87:9c:5a:00:a0:66:70:55:73:04: 42:84:cf:5a:76:17:78:b3:d1:51:a9:fa:f4:54:4a:9b:95:a5: f1:9c:15:7d:b9:82:a8:39:88:06:47:91:7b:69:02:7e:c1:e6: a8:ae:6c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkDwobLNAfLW3llkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyNjIxMTMxMloXDTI1MDUyNzIwMTMxMlowLzEtMCsGA1UEAxMk NDExMTM0NWUtZjZkYy00MWVmLWFlYjUtMzE0YTQyNDgyMmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzLF4pcAgFni52T+z+V0ARDjdThZsxc+Vt3w dtGnOO+rjxRVhuqaxCS+TuZNZh7yjxmYA/aWONvbGLCCyIkrvZJ+kcqNCKN+//ji aR/LLUbDI1HFpxVp7gluVGVNaQq3QmHbjk110YyQVqDt9qwssl3JqpmtVNIy/xsY q7+kn8DaauxMuO11dgte97cJhSzrJPIFY9cCacEOGWD6hNQpUCXlxz3APdcajJxu hnPOriLzOUfAeoagEjUWmdk7otGf3DboWmuqUJi4+oUb/9HjcgIMUk+CBj/CJZKo 3Vp5oIK/JqMrnVno82cvQQW58StWfUlGVbHbFcRDCWzn+WD0nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXFhp+zULStzLsKIjKQz+w4zZRMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzk4NjBhOGMtOTQxZS0z YzI4LTljMmItMzVmNzhmMjBjYzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTX67wNABvw7YHmcOCuIXZLvDC1jsrP5L8BruL1GMqQxLVPi4e2of80 zt/0YSOzBtOwAxBYgqHugGDQVf/AVC1yvJ4vVXBLjfnOQYZbQEBQ2Uoa/VBWFiJh VlfyI0rajw9nF8mh6h2HqKcdpeWutpGV8yonsQJ7Fvxr2OQgMwxPlW7Q6cFM86+n Iu4tnrit+YYyUAKvIoxaOXgTzY56nVq40u8kiSWSGhw1yMDD3WbQ5N3f1IaZhNqu kZKWTFwRhhlQVjDMXlm/7HuOfNAoh5xaAKBmcFVzBEKEz1p2F3iz0VGp+vRUSpuV pfGcFX25gqg5iAZHkXtpAn7B5qiubKA= -----END CERTIFICATE-----Generated at Sun Apr 6 03:27:45 2025 by rpki-client