$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa File: a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa (raw, json) Hash identifier: DVpL39RwuUmQZBuP8iJ1O6zw0c19spNZb8b7PaN+0EI= Subject key identifier: B5:1A:BD:C1:0D:8B:F8:0F:C0:73:2A:FA:D5:2F:DB:5B:20:9E:87:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849568EBA3064EDD5F0F4F12D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa Signing time: Fri 28 Mar 2025 13:00:51 +0000 ROA not before: Fri 28 Mar 2025 13:00:51 +0000 ROA not after: Thu 26 Jun 2025 13:00:51 +0000 asID: 7029 IP address blocks: 98.18.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:56:8e:ba:30:64:ed:d5:f0:f4:f1:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 28 13:00:51 2025 GMT Not After : Jun 26 13:00:51 2025 GMT Subject: CN=cecc4b31-7331-46ae-8050-a1c2ff8a12a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:86:dc:89:e5:f8:ef:2a:5c:7e:21:0a:6b:47: bf:f3:57:93:d5:d6:eb:d9:e6:35:96:23:19:12:39: c9:23:77:bd:ba:a9:0e:38:69:e0:44:d5:0d:0e:55: 43:d2:1e:56:54:26:3f:bb:d9:b5:63:82:29:33:9c: b5:3e:df:09:d1:7b:4a:34:12:11:12:bb:1b:84:e0: a2:e7:a5:f6:16:1c:83:4d:aa:08:6d:ec:f9:e7:ba: 53:aa:a6:9e:e1:4a:dc:c6:88:47:6b:bf:d6:fe:f8: 35:56:50:7a:67:b3:67:af:ae:34:15:ec:c0:bd:c7: 34:63:00:0b:b2:b9:d3:6b:85:19:01:dc:7f:70:f2: 33:13:5f:c9:22:ed:6c:b4:30:f7:41:97:bb:ba:60: 7b:ae:fb:39:b6:c6:34:f6:20:87:ef:c2:61:2b:6a: 31:49:af:08:62:22:65:6b:34:cb:e4:30:f4:e5:66: 06:5d:6a:75:e3:37:6f:89:00:d7:32:3c:1b:87:03: 32:c9:ee:3f:bf:ad:4f:07:a3:ae:af:05:45:55:1e: 7a:84:47:2c:9a:3b:33:42:0d:0c:ea:17:58:ab:82: aa:b5:81:97:be:13:19:46:a4:e6:73:3a:56:67:29: b0:ab:9e:74:93:a3:a0:ed:b7:1a:24:3d:4e:93:5a: c4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:1A:BD:C1:0D:8B:F8:0F:C0:73:2A:FA:D5:2F:DB:5B:20:9E:87:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a17ebab3-75cc-3b2c-88c5-8b0a1348074f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:97:66:5e:fb:5b:5d:79:84:9c:88:5c:81:88:70:cb:31:3f: b1:16:a3:30:34:fd:5c:37:9e:05:c1:43:ac:ee:74:e9:e1:b8: 41:ab:76:d7:ba:a9:f9:e8:24:4e:69:40:db:7d:40:4d:5e:97: f5:c6:b7:a1:80:86:e7:d9:4f:7e:41:10:c2:4f:6d:02:85:8d: fc:86:49:97:1c:73:0e:13:92:47:8b:8e:6d:1f:19:ba:1a:de: ef:db:fc:d5:85:a7:d6:8a:00:4f:c4:5b:a5:13:9c:f5:79:26: 9c:b7:09:18:1a:43:cf:8f:ab:dd:a9:7d:d8:8f:37:30:cd:6e: 9c:c3:69:cd:64:13:0a:43:d4:4c:37:cc:2a:6d:21:9f:0a:09: 0a:95:87:fd:ab:1b:d6:26:14:eb:b1:f3:65:1d:3a:94:70:26: 18:ae:bf:d8:a3:52:0b:bf:64:c6:09:99:7a:09:7d:05:ae:7d: bd:a5:bf:dd:1b:1b:dc:35:5f:d4:7c:c4:b9:b5:33:20:69:a0: 83:13:9b:6e:16:20:8b:1a:ee:df:ea:4e:a5:b0:75:0c:6f:15: 1a:af:da:f0:c1:6f:4b:78:0a:b3:03:ff:41:40:97:cf:78:ec: d8:64:0a:c4:e8:9b:26:e7:43:e4:f9:93:b7:ab:5b:46:45:58: da:94:6a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElWjrowZO3V8PTxLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyODEzMDA1MVoXDTI1MDYyNjEzMDA1MVowLzEtMCsGA1UEAxMk Y2VjYzRiMzEtNzMzMS00NmFlLTgwNTAtYTFjMmZmOGExMmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjobcieX47ypcfiEKa0e/81eT1dbr2eY1liMZ EjnJI3e9uqkOOGngRNUNDlVD0h5WVCY/u9m1Y4IpM5y1Pt8J0XtKNBIRErsbhOCi 56X2FhyDTaoIbez557pTqqae4UrcxohHa7/W/vg1VlB6Z7Nnr640FezAvcc0YwAL srnTa4UZAdx/cPIzE1/JIu1stDD3QZe7umB7rvs5tsY09iCH78JhK2oxSa8IYiJl azTL5DD05WYGXWp14zdviQDXMjwbhwMyye4/v61PB6OurwVFVR56hEcsmjszQg0M 6hdYq4KqtYGXvhMZRqTmczpWZymwq550k6Og7bcaJD1Ok1rECQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLUavcENi/gPwHMq+tUv21sgnoc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTE3ZWJhYjMtNzVjYy0z YjJjLTg4YzUtOGIwYTEzNDgwNzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6XZl77W115hJyIXIGIcMsxP7EWozA0/Vw3ngXBQ6zudOnhuEGrdte6 qfnoJE5pQNt9QE1el/XGt6GAhufZT35BEMJPbQKFjfyGSZcccw4TkkeLjm0fGboa 3u/b/NWFp9aKAE/EW6UTnPV5Jpy3CRgaQ8+Pq92pfdiPNzDNbpzDac1kEwpD1Ew3 zCptIZ8KCQqVh/2rG9YmFOux82UdOpRwJhiuv9ijUgu/ZMYJmXoJfQWufb2lv90b G9w1X9R8xLm1MyBpoIMTm24WIIsa7t/qTqWwdQxvFRqv2vDBb0t4CrMD/0FAl894 7NhkCsTomybnQ+T5k7erW0ZFWNqUaoM= -----END CERTIFICATE-----Generated at Sun Apr 6 07:11:08 2025 by rpki-client