$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa File: 7afb494c-297d-355b-b8e6-fe2ed907780d.roa (raw, json) Hash identifier: yOIViOd91zO5ZiW7Tlk324Pj+EaogcagOGi6igOc85o= Subject key identifier: 5E:95:D2:E3:B3:A9:82:F4:A1:08:1C:A4:E3:9F:A1:9C:3C:8F:09:3E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B38952B2A91C2D70F1AA Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.17.118.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b3:89:52:b2:a9:1c:2d:70:f1:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=b4008728-591d-4f70-af9a-784066506bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:3c:58:02:5d:b0:c6:ef:5a:e3:a7:16:4c:d4: 47:4d:d7:a2:6e:be:3f:06:a8:07:ba:08:94:dc:e1: 9c:05:7c:9e:b2:f5:d0:9b:80:57:22:e4:df:34:9d: 4e:e4:32:81:2a:61:4b:12:d5:76:52:c2:0d:99:b2: 64:eb:59:ed:9c:65:56:33:a4:19:b9:0d:41:40:f3: 37:ef:65:d2:84:22:7d:91:67:1a:3f:75:e8:c3:c1: 98:0c:78:5f:c3:a0:ea:69:10:64:89:b8:31:4e:30: c1:5d:ca:ce:77:05:89:d7:d5:63:45:e0:59:57:fd: 9c:22:be:8c:de:b5:59:b0:27:2f:a7:e9:ac:59:67: f9:cf:67:40:f9:e1:bf:20:35:f5:c9:6d:d0:1d:61: 9f:0c:8f:f0:d8:cb:4a:71:25:86:f1:77:c2:4d:4b: a0:17:8b:e4:6b:60:7e:11:f4:05:27:1c:40:04:60: 2a:e8:a6:94:7a:bf:af:96:0d:b4:ff:b9:85:de:98: ed:d0:33:0c:11:2e:53:c3:4a:55:f4:db:66:9c:66: ae:ab:a0:9c:62:22:e2:1d:8c:7d:18:3e:07:5f:6c: 3a:c4:6e:b7:61:59:9c:87:85:fe:2e:c7:61:a0:20: 3e:4c:a6:64:92:49:73:48:f0:56:19:60:77:12:a4: 7a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:95:D2:E3:B3:A9:82:F4:A1:08:1C:A4:E3:9F:A1:9C:3C:8F:09:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7afb494c-297d-355b-b8e6-fe2ed907780d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:f9:f1:a5:b6:cc:01:5d:62:04:ab:5f:13:6f:a0:04:9e:dd: cc:9e:fa:f6:99:51:0e:3d:f2:e5:0b:4b:7f:c2:c5:13:7d:9b: 73:10:1f:24:06:2d:67:60:de:83:a7:2f:47:82:37:84:d0:10: b6:57:f7:b9:86:d6:1f:8e:4f:8a:8d:d8:90:27:bf:0d:84:0b: 4a:12:6b:aa:10:b8:52:51:37:13:2e:e1:47:7e:eb:29:92:5b: 5e:ca:6d:11:e2:8b:f4:b4:db:17:d3:49:c7:ee:3e:37:90:cf: 1b:cf:7d:e8:26:9e:4c:1f:c0:20:89:5c:65:b6:52:18:7d:4c: 50:cb:36:04:4a:03:67:b9:a5:4f:14:bc:42:e6:bc:8a:a2:4a: 6e:10:58:14:0d:e2:a0:1f:57:8b:2b:5f:ca:cd:a7:1b:6a:a7: 61:45:35:1d:b4:3f:66:a5:a9:14:d2:83:a5:21:28:3a:cd:74: 75:6e:76:98:d2:c5:c1:d2:20:09:37:d3:f9:78:36:45:fe:65: 09:68:a1:1e:78:80:13:cf:f9:37:d1:8a:fd:fb:1c:ec:de:7d: bc:77:4f:4a:1d:4a:d9:07:75:ec:4d:dc:c8:62:3f:1f:b5:b9: 9b:81:cc:38:c4:e9:8f:01:3f:51:1d:e3:82:4d:48:54:c6:0d: 1b:ca:dc:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbOJUrKpHC1w8aowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YjQwMDg3MjgtNTkxZC00ZjcwLWFmOWEtNzg0MDY2NTA2YmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDxYAl2wxu9a46cWTNRHTdeibr4/BqgHugiU 3OGcBXyesvXQm4BXIuTfNJ1O5DKBKmFLEtV2UsINmbJk61ntnGVWM6QZuQ1BQPM3 72XShCJ9kWcaP3Xow8GYDHhfw6DqaRBkibgxTjDBXcrOdwWJ19VjReBZV/2cIr6M 3rVZsCcvp+msWWf5z2dA+eG/IDX1yW3QHWGfDI/w2MtKcSWG8XfCTUugF4vka2B+ EfQFJxxABGAq6KaUer+vlg20/7mF3pjt0DMMES5Tw0pV9NtmnGauq6CcYiLiHYx9 GD4HX2w6xG63YVmch4X+LsdhoCA+TKZkkklzSPBWGWB3EqR6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6V0uOzqYL0oQgcpOOfoZw8jwk+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2FmYjQ5NGMtMjk3ZC0z NTViLWI4ZTYtZmUyZWQ5MDc3ODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhF2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH58aW2zAFdYgSrXxNvoASe3cye+vaZUQ498uULS3/CxRN9m3MQHyQG LWdg3oOnL0eCN4TQELZX97mG1h+OT4qN2JAnvw2EC0oSa6oQuFJRNxMu4Ud+6ymS W17KbRHii/S02xfTScfuPjeQzxvPfegmnkwfwCCJXGW2Uhh9TFDLNgRKA2e5pU8U vELmvIqiSm4QWBQN4qAfV4srX8rNpxtqp2FFNR20P2alqRTSg6UhKDrNdHVudpjS xcHSIAk30/l4NkX+ZQlooR54gBPP+TfRiv37HOzefbx3T0odStkHdexN3MhiPx+1 uZuBzDjE6Y8BP1Ed44JNSFTGDRvK3CY= -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:50 2025 by rpki-client