$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa File: a428fefd-e21b-3a06-93e8-83dbc2a71707.roa (raw, json) Hash identifier: w6w+qJRaTBqG2mDVN6qEt/T4mkcY/L/OwXX82hjk4RQ= Subject key identifier: D4:A3:88:81:C4:06:2A:87:97:70:E3:57:52:2B:D3:BA:6A:B2:0A:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7163B798DF223E326BAD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.16.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:63:b7:98:df:22:3e:32:6b:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=3913dbbc-90bd-4add-abb7-e90e4e4501d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:99:55:b6:35:55:7d:89:a0:6f:c8:df:70:e0: 0e:ce:87:ce:2d:f7:bf:13:ec:c5:8e:1a:47:03:cf: 1a:9a:2f:ab:79:6d:f5:60:c2:fe:b6:15:68:5f:74: ef:41:81:a4:31:cb:a0:01:f6:00:52:3a:e5:8c:ba: 92:14:2d:a4:68:ad:b5:79:66:6b:c2:6e:10:ff:d6: e4:97:78:b3:71:89:bd:4f:f3:47:5f:9f:4e:a5:99: cd:32:ff:2f:87:55:80:21:cf:88:62:02:da:99:48: 6c:43:a5:58:96:a0:36:3d:07:f6:4a:eb:f6:65:45: 39:8e:ed:b3:b7:91:dc:ee:1a:ed:64:88:b4:61:96: fb:1d:99:4c:b6:82:14:08:31:a5:2b:7f:3d:8e:91: 15:b5:c8:81:59:78:4b:6b:a4:10:9a:e0:d4:e2:c7: 14:64:a8:2e:80:b7:92:74:ee:7a:90:62:1a:d0:5c: 76:ba:2e:aa:ba:71:b7:ac:db:63:49:a2:02:91:fc: ee:4b:53:b2:37:34:41:76:6c:1d:f2:a8:a7:1a:dd: a8:ba:27:da:14:f6:03:29:d4:ff:1c:cb:f6:fe:f2: 66:78:0b:8d:c5:95:79:f1:09:35:1a:03:4e:aa:fc: 09:d7:6f:ca:2d:b2:94:f6:34:91:1c:0d:8b:ef:80: a5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A3:88:81:C4:06:2A:87:97:70:E3:57:52:2B:D3:BA:6A:B2:0A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a428fefd-e21b-3a06-93e8-83dbc2a71707.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5b:44:38:d4:bd:fc:1b:d0:e2:25:4b:de:3c:23:64:8a:cf: 6f:80:5e:17:55:15:e2:72:fd:f3:91:38:c4:7b:ea:7f:45:d5: 35:9a:0c:73:1f:af:d3:1c:73:db:0e:55:37:ac:e3:e1:83:7f: 68:fc:66:64:e3:c2:44:85:4d:21:2e:1f:20:19:d1:06:3c:f7: a6:7d:5b:8c:46:0d:92:b3:fa:c5:0b:fc:d5:11:08:05:97:3b: d1:02:4f:e7:aa:8e:76:ee:19:e6:d8:ab:11:57:3b:3d:11:f8: 15:a5:9b:b3:c3:e2:4d:a2:fe:b3:fa:1a:7a:59:7b:67:2d:52: 57:89:5b:31:34:de:d2:05:ed:16:96:7c:13:c1:36:69:e6:6d: 3c:4f:86:c3:80:23:32:27:a1:6f:d4:94:44:bc:ec:9b:4e:38: 7f:a4:f5:89:d6:80:f1:30:8b:b6:b8:c9:65:60:77:e9:33:60: 63:cb:8d:b3:8c:23:0e:7e:52:99:94:3b:c6:89:81:46:5e:1a: 10:bb:00:62:39:f1:74:0b:41:33:aa:9f:ba:8c:75:6c:2b:c9: 00:7b:2f:1e:da:36:e5:dc:a0:02:67:68:18:f3:80:ca:08:06: a5:ac:69:fb:2a:4a:c1:67:79:1c:16:6b:91:13:86:ee:52:39: 8c:2c:99:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWO3mN8iPjJrrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MzkxM2RiYmMtOTBiZC00YWRkLWFiYjctZTkwZTRlNDUwMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuplVtjVVfYmgb8jfcOAOzofOLfe/E+zFjhpH A88ami+reW31YML+thVoX3TvQYGkMcugAfYAUjrljLqSFC2kaK21eWZrwm4Q/9bk l3izcYm9T/NHX59OpZnNMv8vh1WAIc+IYgLamUhsQ6VYlqA2PQf2Suv2ZUU5ju2z t5Hc7hrtZIi0YZb7HZlMtoIUCDGlK389jpEVtciBWXhLa6QQmuDU4scUZKgugLeS dO56kGIa0Fx2ui6qunG3rNtjSaICkfzuS1OyNzRBdmwd8qinGt2ouifaFPYDKdT/ HMv2/vJmeAuNxZV58Qk1GgNOqvwJ12/KLbKU9jSRHA2L74CldQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSjiIHEBiqHl3DjV1Ir07pqsgrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQyOGZlZmQtZTIxYi0z YTA2LTkzZTgtODNkYmMyYTcxNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBbRDjUvfwb0OIlS948I2SKz2+AXhdVFeJy/fOROMR76n9F1TWaDHMf r9Mcc9sOVTes4+GDf2j8ZmTjwkSFTSEuHyAZ0QY896Z9W4xGDZKz+sUL/NURCAWX O9ECT+eqjnbuGebYqxFXOz0R+BWlm7PD4k2i/rP6GnpZe2ctUleJWzE03tIF7RaW fBPBNmnmbTxPhsOAIzInoW/UlES87JtOOH+k9YnWgPEwi7a4yWVgd+kzYGPLjbOM Iw5+UpmUO8aJgUZeGhC7AGI58XQLQTOqn7qMdWwryQB7Lx7aNuXcoAJnaBjzgMoI BqWsafsqSsFneRwWa5EThu5SOYwsmb0= -----END CERTIFICATE-----Generated at Sun Apr 6 00:09:03 2025 by rpki-client