$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa File: 0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa (raw, json) Hash identifier: 3WuISnKggh0IClmYx2R4o549cVpg3oy6Le+1aE4/BBI= Subject key identifier: C1:39:8E:BA:52:BA:7D:07:87:BA:B6:BE:D4:95:7F:18:14:EC:A0:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858499F24BB3E56646DFD9B4CA020 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.22.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:bb:3e:56:64:6d:fd:9b:4c:a0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=b1bc1942-5d2f-49e6-a878-065f03773435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fa:f4:f1:d9:6a:a2:9f:96:f8:41:da:27:8d: 7d:5b:85:3e:07:1f:31:83:af:55:4a:c6:b2:b2:d4: f1:51:40:bd:6d:cc:53:e9:24:7d:9e:9a:81:d6:6f: 9b:07:16:6d:32:3a:24:b2:05:56:af:47:e2:12:eb: 20:2b:ea:8e:28:89:ce:24:60:4a:ce:ce:9b:0b:5b: 27:25:cf:87:9f:48:0e:61:20:97:90:f5:e3:89:4d: b7:2f:97:7c:6d:9a:5d:7a:e4:72:6a:08:ff:ce:9b: 30:3b:d4:3a:9f:a3:fa:fa:60:a6:e4:bc:3a:12:72: 0f:20:da:dd:33:90:52:3b:fe:e0:ce:1a:f5:f4:5b: 03:17:c4:ec:ce:ea:87:b3:51:ac:b2:9b:56:f9:5c: be:cf:41:4b:38:6d:af:f1:9c:66:c1:a3:f7:a7:36: c1:69:dc:26:99:23:c3:24:da:0d:35:ca:95:cc:86: d6:e5:1f:4f:14:6d:4e:e7:d7:95:99:c9:03:ed:07: 93:3d:cc:9d:ad:0e:7a:00:68:e3:f7:c4:7b:60:7e: ca:3a:5e:87:d9:a5:10:70:b5:6a:9e:76:2b:6b:9b: 62:ca:4b:69:f6:63:bc:f3:ad:9a:21:f0:ad:72:56: 07:ae:6b:e7:f5:34:b6:27:f5:55:9c:35:8f:9c:c9: 59:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:39:8E:BA:52:BA:7D:07:87:BA:B6:BE:D4:95:7F:18:14:EC:A0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9033ad-7fb5-3b20-8614-8f24adc69c11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:98:14:39:12:22:83:1b:68:40:63:1d:8d:d5:10:57:2e:80: 0a:d0:76:e1:96:b4:6a:a0:a7:1d:89:de:c6:d6:d0:75:cb:99: aa:95:64:e5:9f:45:b8:b9:d5:6b:1f:8f:36:a8:ba:0c:7c:f9: aa:97:d9:5b:6c:a9:74:c2:17:0a:8a:58:ed:ea:0c:6c:f3:5f: 8e:37:1d:3a:35:96:ea:23:91:c1:b0:18:62:8a:5d:a6:c8:83: 58:ac:64:d8:91:7d:14:7a:47:83:aa:16:38:2b:e3:28:49:83: 72:f2:28:6d:0e:db:ae:24:41:d2:6c:77:da:0f:0c:8e:c5:a4: ae:42:03:97:6f:1f:8a:66:22:98:cd:e6:36:67:d8:4d:eb:dc: 2d:46:07:01:6d:13:95:67:b8:eb:35:1f:9a:fc:c6:d7:90:a9: 87:57:62:ba:64:5f:7c:e5:5c:98:90:ee:54:ed:13:28:a3:a5: 44:43:a3:71:84:06:ec:d8:be:29:92:a9:a3:dd:e3:11:ff:5d: 71:e7:91:b2:16:dd:26:bb:99:58:67:a0:c3:ba:70:75:62:23: b4:c6:3c:b2:ae:a2:36:24:6c:18:ca:03:d0:85:90:9f:0e:df: 93:12:11:1a:ab:1a:ab:fe:b6:ba:66:9e:c3:4b:d9:07:2b:b7: 98:7f:d6:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLs+VmRt/ZtMoCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YjFiYzE5NDItNWQyZi00OWU2LWE4NzgtMDY1ZjAzNzczNDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPr08dlqop+W+EHaJ419W4U+Bx8xg69VSsay stTxUUC9bcxT6SR9npqB1m+bBxZtMjoksgVWr0fiEusgK+qOKInOJGBKzs6bC1sn Jc+Hn0gOYSCXkPXjiU23L5d8bZpdeuRyagj/zpswO9Q6n6P6+mCm5Lw6EnIPINrd M5BSO/7gzhr19FsDF8TszuqHs1GssptW+Vy+z0FLOG2v8ZxmwaP3pzbBadwmmSPD JNoNNcqVzIbW5R9PFG1O59eVmckD7QeTPcydrQ56AGjj98R7YH7KOl6H2aUQcLVq nnYra5tiyktp9mO8862aIfCtclYHrmvn9TS2J/VVnDWPnMlZjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME5jrpSun0Hh7q2vtSVfxgU7KBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ5MDMzYWQtN2ZiNS0z YjIwLTg2MTQtOGYyNGFkYzY5YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGYFDkSIoMbaEBjHY3VEFcugArQduGWtGqgpx2J3sbW0HXLmaqVZOWf Rbi51Wsfjzaougx8+aqX2VtsqXTCFwqKWO3qDGzzX443HTo1luojkcGwGGKKXabI g1isZNiRfRR6R4OqFjgr4yhJg3LyKG0O264kQdJsd9oPDI7FpK5CA5dvH4pmIpjN 5jZn2E3r3C1GBwFtE5VnuOs1H5r8xteQqYdXYrpkX3zlXJiQ7lTtEyijpURDo3GE BuzYvimSqaPd4xH/XXHnkbIW3Sa7mVhnoMO6cHViI7TGPLKuojYkbBjKA9CFkJ8O 35MSERqrGqv+trpmnsNL2Qcrt5h/1tA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:11:31 2025 by rpki-client