$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa File: 06397e4a-5944-3cf6-9cd6-202ce248026d.roa (raw, json) Hash identifier: g2iiK6C79iraFHpPIv40vTqg65bLAVQiFqh50HEx+AI= Subject key identifier: FA:8C:E5:06:15:E1:30:AC:1F:81:1C:44:FD:9A:E6:E5:75:5B:C4:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DF9DE4BBCB5BE2BA6B325C7A Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa Signing time: Thu 13 Feb 2025 22:30:17 +0000 ROA not before: Thu 13 Feb 2025 22:30:17 +0000 ROA not after: Wed 14 May 2025 21:30:17 +0000 asID: 7029 IP address blocks: 98.20.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:9d:e4:bb:cb:5b:e2:ba:6b:32:5c:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 13 22:30:17 2025 GMT Not After : May 14 21:30:17 2025 GMT Subject: CN=aeb128c2-37a5-4b03-8178-6a8ce43f57f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7f:bb:e1:94:54:64:1a:9e:04:fa:0a:f3:ab: 78:32:6e:91:52:12:29:54:0b:8d:2a:09:db:25:b5: 66:75:20:e8:44:47:29:76:5e:19:30:ce:6f:a1:ae: a6:a7:4b:63:0d:ee:bd:b1:05:f5:5f:e3:53:16:d7: 6f:11:3f:99:0a:1e:c6:83:00:25:97:f1:8e:d0:5a: 6c:70:b0:e5:3f:81:2f:c6:d9:c0:92:a8:17:ca:02: 00:7a:85:af:ac:fc:26:a4:c6:b6:48:61:6b:ea:f7: 83:0d:a7:d9:b1:b7:29:30:7b:f5:59:b2:b9:77:0a: 5a:73:21:fc:14:8f:85:73:92:6b:4f:5d:1f:78:a5: b5:9e:40:02:bb:18:d2:d6:a6:ca:01:ba:06:ac:15: c3:93:8c:bd:72:60:34:21:16:93:fb:90:9c:39:bd: 40:c3:e4:d4:c6:dc:f8:e1:84:da:e8:ca:ab:ab:7b: 3f:0d:3b:ba:c2:2b:33:dc:13:d3:58:12:e7:4a:89: 0a:5c:33:a0:b6:de:9c:4a:fd:db:57:07:e9:31:3a: b3:cd:b0:ef:a4:4a:6e:8f:4f:4b:7f:eb:95:fd:16: 32:f1:6a:ef:d5:f4:c3:e6:7d:b5:5d:c5:dd:2e:e7: 71:23:3f:eb:41:f3:46:73:b7:1d:28:5b:86:49:8e: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8C:E5:06:15:E1:30:AC:1F:81:1C:44:FD:9A:E6:E5:75:5B:C4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:45:4b:b7:d6:52:c4:08:26:73:b4:12:5f:33:05:10:10:2d: 19:79:85:63:d5:9d:b9:23:1d:c7:f8:66:dc:58:ed:d6:1d:1d: 20:e8:8f:87:33:96:d8:a8:9f:20:61:64:74:a1:82:d6:e9:10: af:41:eb:b6:89:b0:96:3c:44:b8:d8:de:78:03:db:fd:8e:d1: bb:7a:5f:e0:3f:d5:a5:a6:32:97:f6:e4:81:a7:df:5a:ef:34: 56:3f:9f:91:86:79:2f:1f:39:39:1c:c5:bd:1a:55:f5:d5:8f: de:87:87:62:a4:45:14:c6:f6:2c:00:50:24:9e:2c:b1:14:f1: 14:0f:16:e0:61:d5:cf:8c:e5:89:e9:20:11:3f:de:73:47:9c: 25:d1:06:bf:76:37:e4:75:86:02:f7:a1:0c:55:87:0f:9c:8e: 93:71:23:9a:2d:4c:0b:44:34:59:a7:ff:b7:7c:89:c1:14:c5: 1e:64:97:0c:94:a1:d0:43:17:7e:ea:e7:e4:45:27:d7:91:e0: c4:7a:27:0d:22:b1:2f:25:a4:e2:08:ab:82:f0:6b:cc:e1:1d: 26:59:a9:d1:6e:b0:24:c1:dd:a2:09:8a:6a:1d:39:30:fd:0b: 3a:52:86:08:b0:c4:93:cf:bd:7f:9f:c1:d5:e8:ea:c0:15:22: 86:b6:8a:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfneS7y1viumsyXHowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMzIyMzAxN1oXDTI1MDUxNDIxMzAxN1owLzEtMCsGA1UEAxMk YWViMTI4YzItMzdhNS00YjAzLTgxNzgtNmE4Y2U0M2Y1N2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX+74ZRUZBqeBPoK86t4Mm6RUhIpVAuNKgnb JbVmdSDoREcpdl4ZMM5voa6mp0tjDe69sQX1X+NTFtdvET+ZCh7GgwAll/GO0Fps cLDlP4EvxtnAkqgXygIAeoWvrPwmpMa2SGFr6veDDafZsbcpMHv1WbK5dwpacyH8 FI+Fc5JrT10feKW1nkACuxjS1qbKAboGrBXDk4y9cmA0IRaT+5CcOb1Aw+TUxtz4 4YTa6Mqrq3s/DTu6wisz3BPTWBLnSokKXDOgtt6cSv3bVwfpMTqzzbDvpEpuj09L f+uV/RYy8Wrv1fTD5n21XcXdLudxIz/rQfNGc7cdKFuGSY7nAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqM5QYV4TCsH4EcRP2a5uV1W8RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDYzOTdlNGEtNTk0NC0z Y2Y2LTljZDYtMjAyY2UyNDgwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZFS7fWUsQIJnO0El8zBRAQLRl5hWPVnbkjHcf4ZtxY7dYdHSDoj4cz ltionyBhZHShgtbpEK9B67aJsJY8RLjY3ngD2/2O0bt6X+A/1aWmMpf25IGn31rv NFY/n5GGeS8fOTkcxb0aVfXVj96Hh2KkRRTG9iwAUCSeLLEU8RQPFuBh1c+M5Ynp IBE/3nNHnCXRBr92N+R1hgL3oQxVhw+cjpNxI5otTAtENFmn/7d8icEUxR5klwyU odBDF37q5+RFJ9eR4MR6Jw0isS8lpOIIq4Lwa8zhHSZZqdFusCTB3aIJimodOTD9 CzpShgiwxJPPvX+fwdXo6sAVIoa2in0= -----END CERTIFICATE-----Generated at Tue Apr 29 15:26:41 2025 by rpki-client