$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b39ea26-2298-3450-b177-b7dce26c149d.roa File: 0b39ea26-2298-3450-b177-b7dce26c149d.roa (raw, json) Hash identifier: ZpASzI8ybSVzVwcW0m5MgqZlLQ7qLCAxQVEjRFQNMVI= Subject key identifier: 4C:8E:09:92:A7:01:3A:AE:7F:E1:2D:D4:5C:DA:6E:32:6E:7D:24:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7161A8B05FAA2263592780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b39ea26-2298-3450-b177-b7dce26c149d.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.22.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:61:a8:b0:5f:aa:22:63:59:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=87583d7d-4250-44a9-b77a-b63fd3e9fec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:0a:03:f7:06:ba:c8:2e:7a:6e:b3:14:76: 35:56:8a:9e:00:d2:a0:b6:64:ce:0e:f4:ab:f8:a1: 17:68:a5:dd:99:39:4d:45:f6:92:45:67:72:c9:6e: 18:87:d1:76:3a:59:f8:b4:35:47:a1:9b:f4:1c:78: d2:06:50:c5:5d:03:a7:7a:bb:ae:f3:db:dc:6d:c5: 18:88:3e:41:0a:d9:42:9e:9c:9e:a1:98:83:dd:ef: 3c:23:6f:ed:d4:c6:d4:7d:18:f0:c9:c7:ee:16:87: 86:10:ff:48:1a:c7:b3:fc:30:4e:70:7f:be:5c:e0: 6d:57:0d:d9:51:4f:f8:ff:42:65:af:c0:4d:bb:f2: 98:8c:fe:9c:22:06:9c:9c:99:f1:95:73:7d:87:99: 09:75:9b:b8:71:7e:e9:42:63:a7:b4:2a:80:99:61: fd:c8:37:2e:9c:5c:7e:73:53:ae:7e:b2:53:72:63: 25:16:a1:bb:97:6b:1e:9f:da:87:ab:b3:cc:ac:c2: 2d:be:94:d7:de:5c:8f:03:a9:ff:6d:29:f4:1d:c4: 0b:8f:f5:eb:d0:46:7c:81:83:aa:07:6d:cd:41:60: 95:b0:5f:0a:7b:de:b7:eb:29:de:fd:9c:35:78:79: f4:f8:40:39:f4:9b:3c:62:16:73:52:d6:b0:db:25: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8E:09:92:A7:01:3A:AE:7F:E1:2D:D4:5C:DA:6E:32:6E:7D:24:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b39ea26-2298-3450-b177-b7dce26c149d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:32:a0:4f:f6:b5:6a:f6:79:48:86:79:f1:82:a5:a5:31:78: 59:bd:c4:6c:e4:59:a4:d3:13:68:99:f3:c8:cb:56:fc:41:3f: 44:72:16:04:26:16:fc:47:06:7d:03:37:f6:f4:6b:c9:ef:77: 15:2e:af:49:7d:e7:50:5d:8f:ad:64:6d:52:2a:f4:e7:65:6d: 59:63:66:2c:97:8b:46:8e:50:85:c1:8f:b9:7a:dd:69:72:ca: bc:40:cb:f3:a3:71:04:f9:38:b8:b2:c4:1d:33:e8:56:e0:d2: fe:bf:8f:7c:95:bd:b9:dc:79:92:f9:e5:24:1d:62:95:84:ea: fe:b0:a8:6a:5a:27:06:5b:09:83:98:d2:10:75:1b:09:3c:68: 4a:61:01:7a:9a:b3:6f:2f:c3:af:b6:e3:5c:ba:ee:d7:eb:96: d6:b2:98:5b:e2:d6:8f:3f:ae:ae:e3:1a:fa:77:3c:c0:75:b5: ea:2d:a9:64:3e:cd:99:e0:eb:35:fc:58:56:31:2b:43:96:77: 46:e8:dd:c7:d7:2c:06:12:23:da:0e:12:67:09:00:4b:60:73: a1:49:43:c4:8e:07:bc:c1:69:20:c5:d2:8a:7a:55:1b:be:7b: 51:c5:5d:c1:cd:02:04:33:c6:5f:3d:cd:1f:46:6c:7a:ee:31: 8c:d6:f3:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWGosF+qImNZJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODc1ODNkN2QtNDI1MC00NGE5LWI3N2EtYjYzZmQzZTlmZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT8KA/cGusguem6zFHY1VoqeANKgtmTODvSr +KEXaKXdmTlNRfaSRWdyyW4Yh9F2Oln4tDVHoZv0HHjSBlDFXQOneruu89vcbcUY iD5BCtlCnpyeoZiD3e88I2/t1MbUfRjwycfuFoeGEP9IGsez/DBOcH++XOBtVw3Z UU/4/0Jlr8BNu/KYjP6cIgacnJnxlXN9h5kJdZu4cX7pQmOntCqAmWH9yDcunFx+ c1OufrJTcmMlFqG7l2sen9qHq7PMrMItvpTX3lyPA6n/bSn0HcQLj/Xr0EZ8gYOq B23NQWCVsF8Ke9636yne/Zw1eHn0+EA59Js8YhZzUtaw2yU2bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyOCZKnATquf+Et1FzabjJufSRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGIzOWVhMjYtMjI5OC0z NDUwLWIxNzctYjdkY2UyNmMxNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsyoE/2tWr2eUiGefGCpaUxeFm9xGzkWaTTE2iZ88jLVvxBP0RyFgQm FvxHBn0DN/b0a8nvdxUur0l951Bdj61kbVIq9OdlbVljZiyXi0aOUIXBj7l63Wly yrxAy/OjcQT5OLiyxB0z6Fbg0v6/j3yVvbnceZL55SQdYpWE6v6wqGpaJwZbCYOY 0hB1Gwk8aEphAXqas28vw6+241y67tfrltaymFvi1o8/rq7jGvp3PMB1teotqWQ+ zZng6zX8WFYxK0OWd0bo3cfXLAYSI9oOEmcJAEtgc6FJQ8SOB7zBaSDF0op6VRu+ e1HFXcHNAgQzxl89zR9GbHruMYzW8xg= -----END CERTIFICATE-----Generated at Sun Apr 27 22:12:21 2025 by rpki-client