$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa File: 0c00ee32-7cf1-3b20-9a9f-257687840587.roa (raw, json) Hash identifier: R9DnvTgPD7xPpA0fqyARgYzW8HUU3FF1Sh4iaFz3d3E= Subject key identifier: 2A:5D:FF:79:BE:85:79:A7:C6:90:FC:A1:4D:D8:E7:A9:0D:24:D0:C9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F099EF8D90AC229B8350280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 98.21.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:9e:f8:d9:0a:c2:29:b8:35:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=b2126d5a-0239-47e1-8c8d-bebec64b9b71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:bb:eb:6c:41:12:d7:68:38:88:ae:3e:30: 8c:0d:94:0b:76:f9:fe:7f:7a:c9:2d:d2:51:a6:b7: ca:c5:b3:b3:8f:a5:a7:07:b7:a8:fa:96:62:6e:1a: c7:99:37:3a:ef:94:33:86:91:6e:bb:46:db:81:66: e4:07:5b:fa:ef:f4:0f:da:bd:3f:ad:2f:ca:22:33: a6:d9:0c:7a:19:6c:ae:3c:0c:f0:8f:c1:8d:cb:21: 1e:32:3a:98:33:66:9a:2b:a3:b3:f7:d8:22:4d:1f: e8:ec:f6:a6:68:7a:e7:6d:dd:c6:e0:c4:db:32:62: 13:0a:dc:6c:8c:68:ba:b7:0b:b8:52:93:57:db:44: 9b:88:84:f4:32:0d:50:50:a7:ab:ef:14:82:a2:9c: aa:6c:d2:3c:d3:36:6e:0e:de:8c:f8:8b:26:bb:07: 8a:b3:50:40:1f:15:0e:ac:e8:b5:2a:07:55:b0:1a: c9:16:93:18:a2:29:a6:cb:fb:d4:6b:6e:25:12:96: 19:0a:e4:40:b8:ea:04:79:71:4e:0e:4c:55:c6:70: a1:f0:78:dc:33:b3:90:4d:c5:7d:14:2b:27:fb:66: f1:eb:a1:6b:29:b8:f2:41:92:9e:e6:e4:99:93:34: 3a:61:31:88:b5:05:1e:2b:b8:06:13:13:eb:3b:d0: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:5D:FF:79:BE:85:79:A7:C6:90:FC:A1:4D:D8:E7:A9:0D:24:D0:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c00ee32-7cf1-3b20-9a9f-257687840587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e0:e6:65:6c:4e:96:01:64:47:cc:d5:cf:cd:89:ac:a0:18: 24:fb:60:4f:77:bb:6c:32:64:6f:8e:26:7b:eb:4f:63:ab:71: 0b:85:68:d0:35:23:24:d4:71:70:27:9a:0f:31:79:cc:8e:df: 37:55:17:e4:85:15:5d:ad:53:26:49:46:9b:bf:49:1e:d2:a0: 15:52:71:51:ad:e5:2e:16:9a:48:e3:3f:58:75:7d:a0:73:e8: a6:95:81:bb:22:29:ee:b5:85:07:01:f3:e1:27:73:a9:b8:3a: 48:38:87:1b:88:bd:a4:59:47:f5:f3:99:a1:7c:3b:d9:29:2f: 5d:ab:bd:8f:34:9b:07:07:63:35:c7:61:a3:9c:9f:f0:9c:4f: 12:59:74:01:2a:97:e1:92:fd:ee:11:65:22:1b:11:58:7e:d7: fa:0c:0f:17:01:e0:ba:39:a3:19:e4:bd:00:bb:e1:98:8d:bd: c4:bb:6c:69:07:4b:04:da:38:c9:1a:bc:28:49:2d:b1:46:e1: 81:4b:43:0a:e3:f9:ef:a8:bb:5e:f9:d3:a1:d7:60:39:01:17: 4c:4e:d4:50:4e:19:74:8f:67:ab:96:77:20:f2:5a:14:9b:ad: 01:0b:f3:4a:91:01:30:9b:64:bd:95:34:ac:8b:e1:17:19:34: 46:5b:b9:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CZ742QrCKbg1AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk YjIxMjZkNWEtMDIzOS00N2UxLThjOGQtYmViZWM2NGI5YjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB+762xBEtdoOIiuPjCMDZQLdvn+f3rJLdJR prfKxbOzj6WnB7eo+pZibhrHmTc675QzhpFuu0bbgWbkB1v67/QP2r0/rS/KIjOm 2Qx6GWyuPAzwj8GNyyEeMjqYM2aaK6Oz99giTR/o7PamaHrnbd3G4MTbMmITCtxs jGi6twu4UpNX20SbiIT0Mg1QUKer7xSCopyqbNI80zZuDt6M+IsmuweKs1BAHxUO rOi1KgdVsBrJFpMYoimmy/vUa24lEpYZCuRAuOoEeXFODkxVxnCh8HjcM7OQTcV9 FCsn+2bx66FrKbjyQZKe5uSZkzQ6YTGItQUeK7gGExPrO9BD1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpd/3m+hXmnxpD8oU3Y56kNJNDJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGMwMGVlMzItN2NmMS0z YjIwLTlhOWYtMjU3Njg3ODQwNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADg5mVsTpYBZEfM1c/NiaygGCT7YE93u2wyZG+OJnvrT2OrcQuFaNA1 IyTUcXAnmg8xecyO3zdVF+SFFV2tUyZJRpu/SR7SoBVScVGt5S4WmkjjP1h1faBz 6KaVgbsiKe61hQcB8+Enc6m4Okg4hxuIvaRZR/XzmaF8O9kpL12rvY80mwcHYzXH YaOcn/CcTxJZdAEql+GS/e4RZSIbEVh+1/oMDxcB4Lo5oxnkvQC74ZiNvcS7bGkH SwTaOMkavChJLbFG4YFLQwrj+e+ou17506HXYDkBF0xO1FBOGXSPZ6uWdyDyWhSb rQEL80qRATCbZL2VNKyL4RcZNEZbuRI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:16 2025 by rpki-client