$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa File: 8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa (raw, json) Hash identifier: lulbL+ScdQ7Z5w6PZypJmzuGj5sLuUw8zeIvrOAPILk= Subject key identifier: 7A:93:58:8D:0E:2F:5E:FC:FA:3D:BE:D1:0C:D6:47:40:ED:44:33:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B7496AB3BFD85504B480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.21.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b7:49:6a:b3:bf:d8:55:04:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=5e7e2d3a-6a8e-451b-87e1-90e2b62d29d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:79:57:9f:f1:84:c6:ec:57:8d:0c:ba:68:cf: 54:3f:15:16:7c:c7:ce:81:33:57:9b:fc:6c:0b:b2: 66:c4:01:64:22:82:69:81:a2:c6:96:d3:9f:3c:76: 05:75:37:2c:1e:f6:31:32:5d:21:d0:1b:c0:9f:1d: 38:d4:1b:1b:38:5e:bc:f7:86:fc:d8:a2:06:14:62: 09:6d:af:c1:5f:9f:89:e4:b9:a5:9d:04:7e:7d:78: b6:3b:30:a8:1b:43:29:14:38:11:9c:ca:db:f0:21: 84:da:a0:95:a0:fb:b5:6a:f3:b4:ba:36:89:6d:64: 8c:1e:47:4d:ea:dc:6c:8c:b9:15:57:8f:4c:0b:80: d2:cc:39:3f:14:73:ab:7c:c4:5c:23:55:88:bf:d1: df:64:aa:1f:05:aa:30:ad:fe:2a:30:3b:12:ac:0f: fe:98:02:cb:56:ad:55:ef:32:db:d0:76:7f:11:f8: b5:ca:d5:b2:16:bd:69:fb:0d:3e:79:c8:fb:70:e9: d3:f7:05:ad:10:8e:ee:f6:54:29:b5:c4:d5:0a:bf: f9:cf:31:8a:bf:b0:fe:14:bf:2c:26:94:c6:19:c9: ef:fc:85:68:4c:4f:92:85:31:9d:75:ab:8c:3d:ff: 63:16:a7:fa:1e:47:6e:72:dc:db:2e:7e:73:d4:65: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:93:58:8D:0E:2F:5E:FC:FA:3D:BE:D1:0C:D6:47:40:ED:44:33:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ff73146-7f16-3e3a-bbb4-83e91486ef0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e2:6a:39:d3:a5:6f:39:65:66:43:f2:db:c9:9f:c5:16:c8: 91:86:e8:d9:fe:10:b9:19:b6:e7:c4:c6:39:e6:ac:2e:34:77: 67:c4:8c:5f:df:5b:85:4c:3f:98:b0:db:e8:ae:7e:19:81:52: 0f:a6:8a:35:ab:dd:65:b4:a3:00:cb:ff:bd:ee:20:16:bc:c7: 53:a5:8a:d7:a8:a3:53:02:26:c3:dc:92:6d:a4:7e:f9:6c:7c: 50:82:33:86:e8:6c:57:d6:48:c4:85:fb:b7:c0:fc:ce:8e:27: 1e:5e:13:e8:76:b3:78:68:02:b5:1c:fa:45:48:fc:95:6c:2c: 1a:a9:58:6c:ff:14:7e:ce:bf:3e:0d:62:5b:49:df:12:f9:32: eb:7e:db:3b:a3:97:7c:81:83:9e:57:5e:b0:96:4d:c2:cd:bd: ff:3a:e8:36:8d:1b:37:a4:e3:7d:b0:a3:b5:64:33:bf:22:1f: 6a:30:a3:d6:f1:fe:71:0d:2c:52:ce:e3:d6:c3:ad:9e:d3:df: ac:5c:13:83:ea:17:12:43:37:6c:f0:31:8d:2b:c0:22:12:48: a5:4c:a3:1d:5b:88:81:3f:34:fb:0a:8a:a9:77:27:bf:f0:c8: b5:ea:ed:cb:98:f0:49:d6:29:10:49:9d:39:bc:60:01:ea:35: c5:f9:e7:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbdJarO/2FUEtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NWU3ZTJkM2EtNmE4ZS00NTFiLTg3ZTEtOTBlMmI2MmQyOWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHlXn/GExuxXjQy6aM9UPxUWfMfOgTNXm/xs C7JmxAFkIoJpgaLGltOfPHYFdTcsHvYxMl0h0BvAnx041BsbOF6894b82KIGFGIJ ba/BX5+J5LmlnQR+fXi2OzCoG0MpFDgRnMrb8CGE2qCVoPu1avO0ujaJbWSMHkdN 6txsjLkVV49MC4DSzDk/FHOrfMRcI1WIv9HfZKofBaowrf4qMDsSrA/+mALLVq1V 7zLb0HZ/Efi1ytWyFr1p+w0+ecj7cOnT9wWtEI7u9lQptcTVCr/5zzGKv7D+FL8s JpTGGcnv/IVoTE+ShTGddauMPf9jFqf6HkductzbLn5z1GVCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqTWI0OL178+j2+0QzWR0DtRDO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZmNzMxNDYtN2YxNi0z ZTNhLWJiYjQtODNlOTE0ODZlZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhVmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbiajnTpW85ZWZD8tvJn8UWyJGG6Nn+ELkZtufExjnmrC40d2fEjF/f W4VMP5iw2+iufhmBUg+mijWr3WW0owDL/73uIBa8x1Oliteoo1MCJsPckm2kfvls fFCCM4bobFfWSMSF+7fA/M6OJx5eE+h2s3hoArUc+kVI/JVsLBqpWGz/FH7Ovz4N YltJ3xL5Mut+2zujl3yBg55XXrCWTcLNvf866DaNGzek432wo7VkM78iH2owo9bx /nENLFLO49bDrZ7T36xcE4PqFxJDN2zwMY0rwCISSKVMox1biIE/NPsKiql3J7/w yLXq7cuY8EnWKRBJnTm8YAHqNcX55+g= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:24 2025 by rpki-client