$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa File: f1cbd0d4-d348-3aee-8309-0989123f7505.roa (raw, json) Hash identifier: RlKjhTQfDUGdyEdJf78INC8sWLCgxVj7zRYSae4c48o= Subject key identifier: 3D:E6:43:2C:BF:30:ED:98:36:06:AA:F0:27:47:D1:F3:7B:FF:91:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11C384D1B59B01D5D7B28 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.22.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1c:38:4d:1b:59:b0:1d:5d:7b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=915724e0-b7ce-4646-9c66-1814ff9ae1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fb:cf:91:5b:c5:23:dd:4a:8b:fa:3d:a0:cf: 40:b6:e5:0c:a8:30:e9:18:8a:c8:78:6f:74:f2:53: 00:a9:88:03:f0:29:09:43:79:18:29:d4:6f:1a:9a: 20:08:b2:6d:84:14:4a:e1:be:7c:b6:a3:8d:04:06: ff:fc:73:83:e1:32:61:97:e6:c1:63:c5:2b:30:97: fa:67:39:b7:3f:24:81:9f:0c:f3:68:0b:9d:56:f7: d9:f6:26:fd:a6:de:96:63:21:81:10:5a:71:4b:ce: de:49:4a:f9:4d:3a:10:b4:b3:19:25:a8:92:1a:bf: fc:41:69:ca:5a:b2:c0:70:2e:53:6e:41:c5:9c:18: 00:59:98:10:51:f0:19:9f:aa:fc:31:99:26:15:24: cc:92:2b:a0:3e:79:f5:b3:95:62:c5:43:93:c2:83: b7:92:31:8a:cf:fb:86:47:b8:16:f3:04:ce:99:3b: 19:56:12:00:cc:8f:80:66:5a:8f:d9:04:5a:33:b5: 85:84:df:a7:7b:fe:16:d9:c8:8e:2e:60:52:8e:c4: 21:bc:63:c2:5e:24:9e:4f:06:fd:3c:da:77:a7:e4: d3:d5:2e:8b:28:d0:e4:28:8d:99:c3:c1:cb:55:ee: 13:53:60:4e:e2:50:f5:6d:70:5c:e0:f7:cd:3b:bd: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E6:43:2C:BF:30:ED:98:36:06:AA:F0:27:47:D1:F3:7B:FF:91:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:36:c2:8e:9e:5b:23:07:49:72:a7:d4:b0:6c:a5:bc:30:a6: 40:ab:9a:29:a8:9d:8d:23:7b:52:f7:f6:a4:89:8a:0b:47:a5: d9:7b:36:d9:6f:8b:2d:b5:9b:8e:ed:43:71:6c:18:d6:ad:85: be:18:2f:e4:a6:37:35:fc:b1:2c:39:a0:ab:fa:06:ec:c7:7f: 3c:8e:98:c4:6b:9b:98:fe:ea:82:11:d9:83:e8:32:ee:71:5f: 1c:80:c1:7a:f9:05:9d:12:92:98:a4:a2:20:c5:3a:f1:ea:85: 5d:0b:4b:e6:e1:93:0e:23:8b:dd:e9:f2:29:05:f9:31:95:e2: b1:4b:c0:ce:69:b8:34:ba:cc:a7:ab:86:7f:94:4a:71:f3:99: b2:0d:2c:b1:88:8c:06:5f:d1:7f:51:73:74:2e:1d:c3:a2:da: dd:11:7f:5a:66:79:89:d2:be:5f:1a:7a:fc:c5:21:bf:23:c9: 16:cb:9b:28:b7:ef:e6:ca:5c:be:ed:2a:63:50:c1:52:2d:a5: f0:5e:a5:90:7f:1c:a7:a7:5d:9a:b5:19:d6:b5:a5:2b:a7:08: e9:e5:72:fe:22:b5:89:f6:e2:3f:05:ff:18:77:61:c4:6f:bd: 2a:b2:8f:8b:e3:52:25:72:a7:b2:5e:4e:79:9b:e7:4b:f4:02: 5a:07:b5:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rw4TRtZsB1deygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OTE1NzI0ZTAtYjdjZS00NjQ2LTljNjYtMTgxNGZmOWFlMWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/vPkVvFI91Ki/o9oM9AtuUMqDDpGIrIeG90 8lMAqYgD8CkJQ3kYKdRvGpogCLJthBRK4b58tqONBAb//HOD4TJhl+bBY8UrMJf6 Zzm3PySBnwzzaAudVvfZ9ib9pt6WYyGBEFpxS87eSUr5TToQtLMZJaiSGr/8QWnK WrLAcC5TbkHFnBgAWZgQUfAZn6r8MZkmFSTMkiugPnn1s5VixUOTwoO3kjGKz/uG R7gW8wTOmTsZVhIAzI+AZlqP2QRaM7WFhN+ne/4W2ciOLmBSjsQhvGPCXiSeTwb9 PNp3p+TT1S6LKNDkKI2Zw8HLVe4TU2BO4lD1bXBc4PfNO70kpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3mQyy/MO2YNgaq8CdH0fN7/5GiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFjYmQwZDQtZDM0OC0z YWVlLTgzMDktMDk4OTEyM2Y3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIU2wo6eWyMHSXKn1LBspbwwpkCrmimonY0je1L39qSJigtHpdl7Ntlv iy21m47tQ3FsGNathb4YL+SmNzX8sSw5oKv6BuzHfzyOmMRrm5j+6oIR2YPoMu5x XxyAwXr5BZ0SkpikoiDFOvHqhV0LS+bhkw4ji93p8ikF+TGV4rFLwM5puDS6zKer hn+USnHzmbINLLGIjAZf0X9Rc3QuHcOi2t0Rf1pmeYnSvl8aevzFIb8jyRbLmyi3 7+bKXL7tKmNQwVItpfBepZB/HKenXZq1Gda1pSunCOnlcv4itYn24j8F/xh3YcRv vSqyj4vjUiVyp7JeTnmb50v0AloHtcI= -----END CERTIFICATE-----Generated at Fri Mar 14 09:50:11 2025 by rpki-client