$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa File: 040f0daa-4901-3c20-af2f-533b29edcc22.roa (raw, json) Hash identifier: ZAU3Ib+Dz2+GXSc6fAOxlj7/9vam//jd23QEiEc5bSQ= Subject key identifier: B5:57:35:8D:75:3A:A8:CC:C6:C3:1C:19:DA:1A:31:7D:EB:A0:40:6B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A14E3716479A823278397 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.16.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:14:e3:71:64:79:a8:23:27:83:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=6bd545b2-d636-438b-bd95-0f3c2a588f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:38:1e:4a:27:39:d7:54:8f:28:ff:f7:9c:1b: 2b:f8:e1:4d:99:c7:51:ae:ae:12:1f:fc:73:44:30: 59:5b:e7:62:f1:72:fd:f0:23:56:a7:f5:33:9f:49: cd:8d:6a:16:c5:4b:30:fe:b1:79:a1:0a:1d:4c:89: 3f:ab:16:25:89:d5:95:84:49:86:ff:0f:a1:51:c0: 89:ab:22:69:01:4d:9b:4a:8e:2d:f1:78:ef:31:fe: 5d:04:13:88:09:dc:67:14:63:ff:db:66:2b:d3:e0: ab:e7:f5:b5:9d:f4:84:60:7c:4c:d9:1a:a5:05:ca: da:ee:3e:0b:44:1a:bb:e2:28:91:e3:e3:98:ea:8e: 7e:62:26:2f:a0:23:0e:ce:cb:a3:38:22:eb:5d:7b: 12:f7:02:a1:3a:16:6b:6d:97:2e:48:64:1e:28:21: d9:b6:ac:44:30:91:4e:38:57:b6:51:78:b8:c4:2b: 6b:b8:81:30:8c:c1:96:49:0d:11:2b:14:18:ac:7c: 5b:e1:84:7c:d0:7a:17:a4:19:53:22:79:9e:1f:ba: 61:94:c1:45:ec:26:65:80:00:c6:32:a8:41:8f:0e: cc:73:12:85:52:6c:b8:45:6b:e6:a0:a9:e0:8d:d7: e6:a0:e8:eb:37:46:90:95:8f:79:2f:50:2d:fa:cb: 80:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:57:35:8D:75:3A:A8:CC:C6:C3:1C:19:DA:1A:31:7D:EB:A0:40:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:9f:52:37:fe:28:56:aa:63:ff:ed:28:c8:1c:ec:16:0b:53: f7:71:c6:64:c6:e7:22:70:e7:01:2a:16:97:14:dc:c5:9b:ff: 6d:e0:51:d5:fa:9d:79:f8:59:58:6d:5d:c6:4f:b5:8b:ab:93: 17:23:b6:50:70:61:b4:ac:16:1c:23:1a:51:a8:fc:a7:91:3d: 9d:7f:55:f8:73:8d:26:35:1a:ac:d8:85:17:c9:8b:79:c7:f4: 9f:24:4b:99:c4:e7:f7:2e:0d:ee:59:d8:ab:9e:0a:17:85:b7: ff:69:e0:d8:72:74:bd:58:aa:b3:95:e9:d8:d0:2b:72:45:68: a7:1f:13:8b:16:ca:61:5e:fc:c0:cd:57:4d:b0:80:d7:30:fe: f1:85:c5:d5:ad:d8:13:33:6e:6f:83:8c:1b:b6:51:6f:b0:e6: e2:37:db:7a:5b:ee:13:fb:9f:69:b4:04:83:b6:b5:bb:81:6c: b5:71:41:20:d4:3d:c4:0e:0e:41:96:58:0a:2e:91:54:9c:59: 64:40:eb:c4:db:ed:87:ce:3a:ce:61:9b:97:90:1c:bb:b9:0a: 69:54:e7:52:95:45:fb:74:17:24:a5:12:80:91:79:8b:55:ff: d5:d7:93:48:05:e7:e0:22:09:31:15:5a:f3:44:f8:2d:c2:f1: 57:0f:1d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhTjcWR5qCMng5cwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NmJkNTQ1YjItZDYzNi00MzhiLWJkOTUtMGYzYzJhNTg4ZjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjgeSic511SPKP/3nBsr+OFNmcdRrq4SH/xz RDBZW+di8XL98CNWp/Uzn0nNjWoWxUsw/rF5oQodTIk/qxYlidWVhEmG/w+hUcCJ qyJpAU2bSo4t8XjvMf5dBBOICdxnFGP/22Yr0+Cr5/W1nfSEYHxM2RqlBcra7j4L RBq74iiR4+OY6o5+YiYvoCMOzsujOCLrXXsS9wKhOhZrbZcuSGQeKCHZtqxEMJFO OFe2UXi4xCtruIEwjMGWSQ0RKxQYrHxb4YR80HoXpBlTInmeH7phlMFF7CZlgADG MqhBjw7McxKFUmy4RWvmoKngjdfmoOjrN0aQlY95L1At+suAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVXNY11OqjMxsMcGdoaMX3roEBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQwZjBkYWEtNDkwMS0z YzIwLWFmMmYtNTMzYjI5ZWRjYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmfUjf+KFaqY//tKMgc7BYLU/dxxmTG5yJw5wEqFpcU3MWb/23gUdX6 nXn4WVhtXcZPtYurkxcjtlBwYbSsFhwjGlGo/KeRPZ1/VfhzjSY1GqzYhRfJi3nH 9J8kS5nE5/cuDe5Z2KueCheFt/9p4NhydL1YqrOV6djQK3JFaKcfE4sWymFe/MDN V02wgNcw/vGFxdWt2BMzbm+DjBu2UW+w5uI323pb7hP7n2m0BIO2tbuBbLVxQSDU PcQODkGWWAoukVScWWRA68Tb7YfOOs5hm5eQHLu5CmlU51KVRft0FySlEoCReYtV /9XXk0gF5+AiCTEVWvNE+C3C8VcPHQk= -----END CERTIFICATE-----Generated at Sun Jun 15 12:36:36 2025 by rpki-client