$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ddfaed-7011-395c-a7c7-eea1662f8240.roa File: e4ddfaed-7011-395c-a7c7-eea1662f8240.roa (raw, json) Hash identifier: 69sH5l8POPZsgPTLT2Q3eluXeUxL8MGZw7a3pOKcYIE= Subject key identifier: D5:B7:9F:A8:DE:78:D7:EF:5B:92:5F:1E:B1:53:23:09:28:BF:C6:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848EDA0C2C2A58975D8C570DF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ddfaed-7011-395c-a7c7-eea1662f8240.roa Signing time: Tue 18 Feb 2025 22:57:23 +0000 ROA not before: Tue 18 Feb 2025 22:57:23 +0000 ROA not after: Mon 19 May 2025 21:57:23 +0000 asID: 7029 IP address blocks: 98.23.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ed:a0:c2:c2:a5:89:75:d8:c5:70:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 18 22:57:23 2025 GMT Not After : May 19 21:57:23 2025 GMT Subject: CN=5c3f397b-bac7-42ec-a35a-1f7e8b533f90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:9e:88:0c:60:5d:d7:34:5e:2f:f9:bd:14: b6:df:52:38:70:f4:c7:5d:7a:b4:78:84:54:b0:2b: 51:9a:fe:a5:91:87:87:33:9e:63:98:d8:4b:1e:03: 7e:0a:4e:c1:d7:b0:c0:1d:5a:a5:49:d9:ec:f0:74: db:2c:06:89:c5:0b:1f:cd:8a:55:37:07:fb:ce:07: 40:45:d0:23:ec:09:88:08:36:50:9c:ca:c6:7a:e5: a9:da:ed:05:3d:95:cd:b1:0a:bd:87:78:08:09:7b: bd:05:33:23:80:f0:3e:a9:8f:ae:cd:84:f2:2c:e4: 62:da:53:86:9f:ac:14:60:ff:fa:31:92:d7:c6:3f: 82:80:27:4c:60:51:f0:02:c0:9c:ba:9e:58:e9:81: 1b:7d:97:ef:25:de:06:be:81:f9:07:1d:95:78:d2: bf:0d:17:95:12:a7:29:82:b2:a4:65:a0:0b:9f:d6: 6d:5a:f2:ba:2e:d7:eb:ff:d4:19:55:04:1e:34:49: 99:b0:0d:7d:ef:55:3c:18:c4:5f:09:89:28:3b:74: 21:e2:2d:f1:a5:30:46:c9:1f:c0:e8:5d:63:1a:83: 72:5b:c0:98:a4:d9:a6:dd:08:41:44:4d:1d:57:62: 26:0d:04:9d:a4:3c:e5:c4:39:28:b6:65:6b:88:76: f0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B7:9F:A8:DE:78:D7:EF:5B:92:5F:1E:B1:53:23:09:28:BF:C6:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ddfaed-7011-395c-a7c7-eea1662f8240.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:75:3a:13:32:38:7f:16:dc:b6:51:56:b7:8f:83:15:72:95: 83:3c:37:91:19:d4:ce:2d:c5:76:ae:ac:c5:33:c1:20:f2:f5: d0:5b:f5:ab:50:65:d2:6a:e4:73:f9:38:3f:e9:c4:1a:47:c6: b9:6d:c7:be:d4:f3:dd:bd:e2:8c:21:2a:e7:b2:00:3e:ea:6e: 4c:36:10:f3:69:ff:25:ef:71:93:2b:eb:6b:6f:71:ac:86:a8: a5:84:65:95:88:f5:35:e6:97:e3:ab:31:68:5e:c1:13:5f:72: 04:3f:cb:bb:25:ff:3a:42:8c:ca:ff:a6:b0:66:4b:2a:cb:02: 84:7d:cf:1f:03:c0:6c:af:0a:3b:0b:3f:c9:56:c4:e2:85:d6: 7b:fe:64:d5:15:5b:03:06:9c:b9:ed:0e:1a:56:ae:27:77:d4: 20:66:1c:ce:75:49:e5:d2:6e:d4:f9:24:5b:08:c7:5b:ad:bf: ea:78:34:0a:41:69:fe:54:83:4b:03:ea:c5:4e:eb:92:4c:0b: c1:99:c8:12:dd:03:c5:db:6f:51:14:6d:28:20:16:9b:d0:17: 60:29:d8:70:d5:9d:31:c8:74:3c:a0:18:48:50:3a:b0:04:78: 52:78:cf:60:80:34:08:5d:ff:34:e1:b3:2c:21:73:03:7b:b2: 70:15:d0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjtoMLCpYl12MVw34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxODIyNTcyM1oXDTI1MDUxOTIxNTcyM1owLzEtMCsGA1UEAxMk NWMzZjM5N2ItYmFjNy00MmVjLWEzNWEtMWY3ZThiNTMzZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveSeiAxgXdc0Xi/5vRS231I4cPTHXXq0eIRU sCtRmv6lkYeHM55jmNhLHgN+Ck7B17DAHVqlSdns8HTbLAaJxQsfzYpVNwf7zgdA RdAj7AmICDZQnMrGeuWp2u0FPZXNsQq9h3gICXu9BTMjgPA+qY+uzYTyLORi2lOG n6wUYP/6MZLXxj+CgCdMYFHwAsCcup5Y6YEbfZfvJd4GvoH5Bx2VeNK/DReVEqcp grKkZaALn9ZtWvK6Ltfr/9QZVQQeNEmZsA1971U8GMRfCYkoO3Qh4i3xpTBGyR/A 6F1jGoNyW8CYpNmm3QhBRE0dV2ImDQSdpDzlxDkotmVriHbwHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW3n6jeeNfvW5JfHrFTIwkov8YkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTRkZGZhZWQtNzAxMS0z OTVjLWE3YzctZWVhMTY2MmY4MjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhfpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADB1OhMyOH8W3LZRVrePgxVylYM8N5EZ1M4txXaurMUzwSDy9dBb9atQ ZdJq5HP5OD/pxBpHxrltx77U89294owhKueyAD7qbkw2EPNp/yXvcZMr62tvcayG qKWEZZWI9TXml+OrMWhewRNfcgQ/y7sl/zpCjMr/prBmSyrLAoR9zx8DwGyvCjsL P8lWxOKF1nv+ZNUVWwMGnLntDhpWrid31CBmHM51SeXSbtT5JFsIx1utv+p4NApB af5Ug0sD6sVO65JMC8GZyBLdA8Xbb1EUbSggFpvQF2Ap2HDVnTHIdDygGEhQOrAE eFJ4z2CANAhd/zThsywhcwN7snAV0EY= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:09 2025 by rpki-client