$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa File: fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa (raw, json) Hash identifier: 5MafC3Ihab98D+3Qoym232oldSSU2G1JN6PTIC1TUyw= Subject key identifier: 70:77:7D:5C:22:9C:D8:5B:20:B6:B8:C0:79:E0:4C:64:84:B1:9C:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584929142DE98CB3354B8EEE1A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa Signing time: Wed 12 Mar 2025 06:02:38 +0000 ROA not before: Wed 12 Mar 2025 06:02:38 +0000 ROA not after: Tue 10 Jun 2025 06:02:38 +0000 asID: 7029 IP address blocks: 98.19.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:29:14:2d:e9:8c:b3:35:4b:8e:ee:1a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 12 06:02:38 2025 GMT Not After : Jun 10 06:02:38 2025 GMT Subject: CN=767b2643-a457-4f7f-9342-bf5699227c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:cc:5f:ea:6b:2a:af:f6:3c:56:64:5a:24: 23:b9:b0:af:92:d4:48:42:c0:1e:d0:a5:c4:ef:93: 24:d8:74:fd:ed:8e:6f:3d:d9:e8:60:f2:79:19:70: 51:2a:c0:9a:8e:7e:a5:1b:82:22:52:0c:bd:68:1a: ee:44:6d:a8:e9:8e:bb:4d:a4:2c:87:94:00:c2:9f: 3a:8d:10:23:9e:0b:b4:a0:b5:5f:20:e1:28:21:af: 42:7d:ef:ca:ec:76:d6:f0:dc:a0:63:d5:a7:4e:c5: 56:03:13:ef:d8:32:82:54:39:83:fc:9b:ec:ab:3d: ea:1a:f8:97:0a:f6:57:ca:7a:c9:1d:35:f8:c9:14: 44:84:a1:be:21:92:2f:c3:32:49:cc:b8:e4:1f:d4: 0d:2c:e8:d5:13:c9:1d:68:2f:95:de:5d:67:88:ff: 6e:05:db:d7:17:c4:72:df:17:38:a2:38:f6:ab:2b: 61:f1:aa:dd:df:87:50:1d:cc:9a:b6:5f:46:18:80: d6:30:a9:6d:2b:96:ab:77:fa:03:af:a9:8a:60:31: 2c:be:5b:e9:01:eb:e2:91:cd:6a:43:f5:a5:cf:a4: fb:c5:ab:45:01:e8:df:e1:a3:53:86:d4:2a:18:e6: 32:ca:b1:1b:1b:02:c0:41:be:d3:89:5a:d5:60:31: fe:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:77:7D:5C:22:9C:D8:5B:20:B6:B8:C0:79:E0:4C:64:84:B1:9C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fddfcf9c-16cf-3885-b0de-a829dadb1d0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ff:e8:8d:39:b5:67:47:fe:9c:13:c7:c0:66:cd:23:17:b4: 72:86:52:41:f4:35:aa:4d:ac:f2:dc:6d:7b:65:96:27:43:75: 2d:c4:6e:8e:55:a7:b6:0b:3c:ab:b6:36:e0:42:27:0c:c3:a6: 33:ef:48:f3:d6:55:db:79:32:f0:f9:80:4e:73:ef:e0:61:46: 6f:36:77:c2:3b:01:8f:9f:53:fe:39:85:89:cc:18:56:57:92: b2:9f:c7:13:61:86:4d:80:12:af:75:8d:2b:e5:82:97:6a:f5: 1d:3c:f3:17:fc:1d:4d:9b:00:6b:1b:b6:de:73:19:8d:45:04: 7f:26:5c:90:02:a6:bb:33:f9:d7:16:a5:f1:b5:5c:72:fa:e5: ce:5d:1c:a9:b4:ab:e7:38:1c:59:07:c9:7a:51:03:d0:a6:e5: 11:b5:c6:4d:07:98:be:48:f3:8a:31:3d:52:ef:fc:b5:3c:6f: 32:13:1d:cd:11:63:0a:91:9a:70:ad:b8:b7:41:76:40:16:84: 23:5f:64:c5:dc:9c:35:6b:b4:7c:f7:39:f3:7c:26:5e:e9:31: 6c:d0:b0:08:9e:b4:a7:f5:6d:98:b0:14:75:8c:2d:c8:4f:02: 38:20:5c:e6:9e:7b:50:13:8f:9f:a3:1c:c5:1c:a8:3e:84:74: 44:38:ae:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkpFC3pjLM1S47uGkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMxMjA2MDIzOFoXDTI1MDYxMDA2MDIzOFowLzEtMCsGA1UEAxMk NzY3YjI2NDMtYTQ1Ny00ZjdmLTkzNDItYmY1Njk5MjI3YzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuznMX+prKq/2PFZkWiQjubCvktRIQsAe0KXE 75Mk2HT97Y5vPdnoYPJ5GXBRKsCajn6lG4IiUgy9aBruRG2o6Y67TaQsh5QAwp86 jRAjngu0oLVfIOEoIa9Cfe/K7HbW8NygY9WnTsVWAxPv2DKCVDmD/Jvsqz3qGviX CvZXynrJHTX4yRREhKG+IZIvwzJJzLjkH9QNLOjVE8kdaC+V3l1niP9uBdvXF8Ry 3xc4ojj2qyth8ard34dQHcyatl9GGIDWMKltK5ard/oDr6mKYDEsvlvpAevikc1q Q/Wlz6T7xatFAejf4aNThtQqGOYyyrEbGwLAQb7TiVrVYDH+5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHB3fVwinNhbILa4wHngTGSEsZxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRkZmNmOWMtMTZjZi0z ODg1LWIwZGUtYTgyOWRhZGIxZDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhOUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn/6I05tWdH/pwTx8BmzSMXtHKGUkH0NapNrPLcbXtllidDdS3Ebo5V p7YLPKu2NuBCJwzDpjPvSPPWVdt5MvD5gE5z7+BhRm82d8I7AY+fU/45hYnMGFZX krKfxxNhhk2AEq91jSvlgpdq9R088xf8HU2bAGsbtt5zGY1FBH8mXJACprsz+dcW pfG1XHL65c5dHKm0q+c4HFkHyXpRA9Cm5RG1xk0HmL5I84oxPVLv/LU8bzITHc0R YwqRmnCtuLdBdkAWhCNfZMXcnDVrtHz3OfN8Jl7pMWzQsAietKf1bZiwFHWMLchP AjggXOaee1ATj5+jHMUcqD6EdEQ4rkk= -----END CERTIFICATE-----Generated at Sun Apr 6 04:43:49 2025 by rpki-client