$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03d8e77b-9fea-37c1-897b-87889c4e560e.roa File: 03d8e77b-9fea-37c1-897b-87889c4e560e.roa (raw, json) Hash identifier: ywut1GcG4N6XGAV4IYOW+xyoXJwjxUi9i43FSTx6Xno= Subject key identifier: 9C:4C:FF:BC:9D:7D:B5:43:A2:CF:E1:D8:AF:9E:2E:E5:B9:C4:10:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1ADCB9D27F416C2B7880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03d8e77b-9fea-37c1-897b-87889c4e560e.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.19.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1a:dc:b9:d2:7f:41:6c:2b:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=4d60debd-8967-46e0-a0b5-7089506d5626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ef:fe:e6:51:54:eb:8a:9c:75:98:77:fb:a6: 00:16:5f:a9:6c:12:43:2f:0a:68:96:ae:8d:5d:f0: 42:85:38:da:ca:dc:ef:3e:bf:86:af:5b:0b:cb:20: 21:e9:95:94:d4:22:d7:6b:27:42:48:11:52:6d:8b: e5:82:38:6b:72:e9:f0:7b:73:fc:5b:42:cb:8c:fd: df:44:07:16:a7:0b:5c:82:82:10:41:9c:71:86:88: e2:9e:30:c3:c0:54:62:fd:4c:40:65:3f:70:07:22: ca:d2:71:0c:93:39:99:96:1b:e9:51:e7:fe:69:59: 77:93:58:a1:2b:15:c9:25:20:1a:ba:f1:e3:09:09: 66:0b:d0:87:44:9d:b1:54:34:65:32:ff:68:5c:49: 1e:60:3b:0c:01:42:20:99:87:0e:1c:1c:f9:c5:f7: 55:70:09:10:37:39:33:3b:c9:7d:5f:bf:40:ee:7c: fa:45:8f:a1:21:11:4d:48:51:e8:bb:86:10:34:6e: 88:bf:47:6f:fb:1a:e0:21:16:7b:87:f7:45:b1:1e: 26:a3:b8:27:35:b7:ae:5f:1b:d9:f6:c0:a1:dd:38: 71:5f:db:cb:14:5c:38:55:c6:11:d0:67:d3:2f:aa: ac:56:15:da:d3:28:9f:16:4e:4a:7f:df:9a:68:ca: 19:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:4C:FF:BC:9D:7D:B5:43:A2:CF:E1:D8:AF:9E:2E:E5:B9:C4:10:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03d8e77b-9fea-37c1-897b-87889c4e560e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:5b:11:39:92:1d:21:19:12:00:24:22:9f:cf:44:67:f5:84: 77:2d:30:66:0b:42:3f:cd:ce:88:05:77:58:7c:02:92:0f:56: 83:95:3d:3c:c6:ee:51:88:c6:36:f5:c3:ba:66:b6:74:dc:ac: 6c:a8:d3:66:46:f2:a7:92:ef:d1:4a:e4:52:ae:0a:fb:03:85: 95:c8:c5:a2:77:6a:bf:84:eb:4f:4b:20:5b:8b:61:a2:31:42: e4:17:c1:e4:70:0a:7e:3b:7f:7c:62:15:ab:da:de:6e:81:08: 42:40:bc:54:b2:4f:0d:95:e1:b7:7c:cd:03:f5:20:f1:6d:09: e3:9d:28:72:ee:2f:37:4f:be:3b:18:a7:64:58:78:6d:49:4a: 7c:89:8d:69:14:5b:b4:de:62:b9:11:bb:f4:03:44:de:e0:c9: 5d:65:80:43:84:e2:00:e0:27:28:32:b4:2c:3a:b6:4d:26:1b: 2c:42:1b:bf:e0:31:94:90:97:82:5b:e6:b0:fe:a5:bf:af:d2: 1b:52:12:2b:4c:a5:e2:2a:2f:10:a4:56:2b:95:d6:14:a1:10: 43:37:10:71:9d:ea:35:ab:e8:36:0e:f9:a1:20:d0:4e:fd:8d: c6:57:c9:25:62:39:f2:2e:e5:b8:9b:dd:70:e5:77:9f:71:a0: 40:58:f3:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhrcudJ/QWwreIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NGQ2MGRlYmQtODk2Ny00NmUwLWEwYjUtNzA4OTUwNmQ1NjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe/+5lFU64qcdZh3+6YAFl+pbBJDLwpolq6N XfBChTjaytzvPr+Gr1sLyyAh6ZWU1CLXaydCSBFSbYvlgjhrcunwe3P8W0LLjP3f RAcWpwtcgoIQQZxxhojinjDDwFRi/UxAZT9wByLK0nEMkzmZlhvpUef+aVl3k1ih KxXJJSAauvHjCQlmC9CHRJ2xVDRlMv9oXEkeYDsMAUIgmYcOHBz5xfdVcAkQNzkz O8l9X79A7nz6RY+hIRFNSFHou4YQNG6Iv0dv+xrgIRZ7h/dFsR4mo7gnNbeuXxvZ 9sCh3ThxX9vLFFw4VcYR0GfTL6qsVhXa0yifFk5Kf9+aaMoZEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxM/7ydfbVDos/h2K+eLuW5xBDbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDNkOGU3N2ItOWZlYS0z N2MxLTg5N2ItODc4ODljNGU1NjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChbETmSHSEZEgAkIp/PRGf1hHctMGYLQj/NzogFd1h8ApIPVoOVPTzG 7lGIxjb1w7pmtnTcrGyo02ZG8qeS79FK5FKuCvsDhZXIxaJ3ar+E609LIFuLYaIx QuQXweRwCn47f3xiFava3m6BCEJAvFSyTw2V4bd8zQP1IPFtCeOdKHLuLzdPvjsY p2RYeG1JSnyJjWkUW7TeYrkRu/QDRN7gyV1lgEOE4gDgJygytCw6tk0mGyxCG7/g MZSQl4Jb5rD+pb+v0htSEitMpeIqLxCkViuV1hShEEM3EHGd6jWr6DYO+aEg0E79 jcZXySViOfIu5bib3XDld59xoEBY80Y= -----END CERTIFICATE-----Generated at Mon Apr 28 16:33:00 2025 by rpki-client