$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa File: eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa (raw, json) Hash identifier: C6o2NdoAdk9xZtPxfEgBEt9SCaU4qd9e3USw9sAqfY0= Subject key identifier: E4:1A:EC:BE:BF:DE:3E:FA:7E:BD:E7:53:E7:EC:7D:82:2A:94:30:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B3965B48543553B1ABC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.17.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b3:96:5b:48:54:35:53:b1:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=b73c9f09-d686-4c19-a4d8-66f9af8916ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7c:bc:40:bb:d7:97:6c:1b:bf:82:42:ab:97: f4:6c:71:5c:a4:60:7b:12:4e:80:cb:58:0e:3e:a2: 88:33:bf:d8:50:04:bb:cc:e5:d3:03:8b:35:5d:bc: 6d:10:5d:88:7d:f5:bb:db:cf:07:f4:7b:57:ee:e0: 26:21:ba:7b:40:85:2d:dc:cb:4a:78:42:88:d3:85: 33:79:f3:cb:2f:99:e5:49:5c:a6:4a:99:6c:9d:83: ba:3a:e5:21:9d:d7:ea:56:b3:1d:ec:16:6a:4e:5c: 03:25:ca:3e:e2:6f:ea:c8:40:80:13:e2:37:b9:54: cd:c8:d3:56:3a:49:ed:42:c1:60:19:e5:61:38:f8: ab:d3:ca:98:0a:3d:98:da:5e:9f:8b:4c:86:ad:c5: 53:fb:e7:af:e3:a1:96:5f:ee:b9:5d:c2:e5:da:81: 57:01:51:a3:f4:56:4a:0b:14:ee:e6:fb:9d:04:3b: 62:e5:82:24:32:d0:23:2e:67:71:3e:2a:ea:a8:90: 86:5c:47:35:07:ce:2a:d6:5b:94:3a:66:87:de:89: c5:40:ab:d7:e7:dd:f1:0e:dc:12:8b:de:e6:e3:16: f7:30:6f:28:02:30:34:2d:fa:37:32:2d:32:4e:d0: 6f:2e:5a:42:44:7d:62:0f:8c:b6:af:a1:ee:b0:47: ac:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1A:EC:BE:BF:DE:3E:FA:7E:BD:E7:53:E7:EC:7D:82:2A:94:30:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/eae51cf2-e93c-3a1e-bc73-967ebaf3da32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:c3:2d:e2:81:98:91:3d:25:38:b8:30:de:51:3b:32:4a:5d: 51:30:cd:6d:35:9a:82:56:a2:fa:29:ab:6f:86:51:27:12:31: fe:01:8b:44:be:72:74:a9:a7:30:bc:8f:13:59:cd:26:d7:8c: a8:c7:ef:e0:b7:9f:44:1a:76:b4:10:2a:d2:af:bd:63:2a:bf: 6c:f3:31:4c:8d:42:81:46:5a:3f:60:5e:e8:fe:2a:39:4e:11: 2a:1f:ef:fc:14:50:59:40:ad:ae:55:35:98:14:28:71:d9:bc: c6:3e:0d:95:04:67:0c:8d:bf:b7:5e:bf:ac:ef:a2:17:1f:66: 68:27:8f:61:e1:48:b6:b5:04:e6:6b:c7:23:95:26:7a:a7:ba: d1:30:b2:83:08:ad:d7:46:7a:b7:c0:b8:0a:26:29:ad:27:ed: d3:74:02:cb:2f:8c:ca:b6:95:79:77:7c:23:8b:79:a2:54:55: 97:27:e6:79:cf:6a:0f:6a:60:27:3b:b2:ac:e3:e9:16:52:f6: 15:7a:d0:42:9a:0d:a7:c4:e3:d5:9d:09:4b:73:c2:66:b8:e3: 65:30:9a:3d:06:cb:db:49:65:f4:7f:4c:f7:15:f0:8d:87:82: 00:e1:90:91:98:3a:73:8a:cc:f4:c3:26:22:72:e0:61:9e:fc: 5c:c3:43:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbOWW0hUNVOxq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YjczYzlmMDktZDY4Ni00YzE5LWE0ZDgtNjZmOWFmODkxNmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Xy8QLvXl2wbv4JCq5f0bHFcpGB7Ek6Ay1gO PqKIM7/YUAS7zOXTA4s1XbxtEF2IffW7288H9HtX7uAmIbp7QIUt3MtKeEKI04Uz efPLL5nlSVymSplsnYO6OuUhndfqVrMd7BZqTlwDJco+4m/qyECAE+I3uVTNyNNW OkntQsFgGeVhOPir08qYCj2Y2l6fi0yGrcVT++ev46GWX+65XcLl2oFXAVGj9FZK CxTu5vudBDti5YIkMtAjLmdxPirqqJCGXEc1B84q1luUOmaH3onFQKvX593xDtwS i97m4xb3MG8oAjA0Lfo3Mi0yTtBvLlpCRH1iD4y2r6HusEesWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQa7L6/3j76fr3nU+fsfYIqlDCBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWFlNTFjZjItZTkzYy0z YTFlLWJjNzMtOTY3ZWJhZjNkYTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACfDLeKBmJE9JTi4MN5ROzJKXVEwzW01moJWovopq2+GUScSMf4Bi0S+ cnSppzC8jxNZzSbXjKjH7+C3n0QadrQQKtKvvWMqv2zzMUyNQoFGWj9gXuj+KjlO ESof7/wUUFlAra5VNZgUKHHZvMY+DZUEZwyNv7dev6zvohcfZmgnj2HhSLa1BOZr xyOVJnqnutEwsoMIrddGerfAuAomKa0n7dN0AssvjMq2lXl3fCOLeaJUVZcn5nnP ag9qYCc7sqzj6RZS9hV60EKaDafE49WdCUtzwma442Uwmj0Gy9tJZfR/TPcV8I2H ggDhkJGYOnOKzPTDJiJy4GGe/FzDQ24= -----END CERTIFICATE-----Generated at Sat Apr 5 22:31:31 2025 by rpki-client