$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa File: 18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa (raw, json) Hash identifier: ElQm0C/RBj9kzoiebjLESWP0bQ2+5yYP3n41/QJiLtc= Subject key identifier: 5D:25:3B:71:0A:FA:49:AF:59:93:BD:32:A2:0C:76:1E:E1:BF:30:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858499F24BAD986A084DC6D96C780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.18.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ba:d9:86:a0:84:dc:6d:96:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=b85d167f-8ab5-42f9-9d5b-12ebff3cd957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:af:ec:b4:e6:47:b7:a3:e3:75:bc:6c:01:f5: 7c:d0:6c:23:13:90:b0:3a:44:f0:67:ab:17:ac:6c: dc:6f:dd:fe:03:69:85:2d:84:62:a9:7c:36:f1:14: b2:be:99:0c:b0:be:e9:82:8f:5d:b3:c3:d7:b5:2a: cc:a1:4e:31:67:0b:b0:79:35:60:cf:04:ad:c6:58: 86:4d:4a:8b:f1:9a:78:1a:4f:6d:73:ed:7f:7e:f3: f6:b5:a2:04:6c:e9:b2:30:1f:d9:78:7b:30:6f:45: 8e:2f:12:22:46:31:5b:2f:ab:29:fd:24:32:81:68: 66:16:8b:e8:0c:ec:95:c9:02:36:de:9a:af:19:3d: 36:62:ac:3c:bd:44:0a:5b:bc:20:33:51:38:9f:85: 5b:85:3d:24:3c:b1:36:18:dc:f8:5b:7a:13:e0:79: 96:ed:7e:7b:68:92:d2:61:19:82:58:66:cf:68:c8: 12:52:7c:a3:92:1e:38:c3:d1:91:bb:74:56:48:93: ac:98:99:cc:ab:c1:19:f2:f4:92:a9:4d:1e:cf:38: c5:1a:83:ca:f3:bb:bf:cd:fb:6c:b8:89:64:68:67: 6a:64:60:46:e6:05:f1:e2:79:f3:94:7a:27:0c:83: f3:43:d6:09:f1:15:fb:58:eb:4b:cd:6e:17:a9:f7: 24:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:25:3B:71:0A:FA:49:AF:59:93:BD:32:A2:0C:76:1E:E1:BF:30:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18f98b1f-13c1-3fb4-9c04-45c0618529c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f6:a2:1e:05:53:c2:40:81:5b:ed:2e:98:e8:f0:37:2d:be: 59:d0:61:79:c8:7a:d8:d4:40:3e:21:c9:f3:0c:e0:33:85:61: dc:26:1f:26:61:61:57:bc:97:2d:d2:1a:75:f8:b7:d7:2a:fb: 3e:33:c4:2e:8c:fc:c6:03:ee:e9:e3:9e:9e:2c:8a:98:ef:73: b1:d2:b5:6c:9f:08:45:0f:8c:48:ce:25:c8:55:2a:72:b1:14: e9:0e:5b:57:d3:92:25:dc:91:d2:49:c0:00:df:46:b2:9b:92: 3c:e8:0d:f3:08:12:5c:b1:bc:d7:13:fb:c7:75:3c:7a:0e:1b: cb:39:41:25:fa:48:cc:7a:4a:5b:e5:72:f0:f3:df:a3:fd:14: 3c:f7:55:eb:e4:f3:8d:54:b9:6a:c3:c7:b9:ed:c8:cd:2d:7d: 16:0b:29:f4:19:35:1b:15:29:d7:82:be:8c:2e:6b:00:01:9c: 99:cb:38:85:81:6e:ce:f3:af:2d:65:a1:44:d5:de:72:34:7e: f1:f1:50:38:99:53:9e:8e:d8:17:f3:18:77:0e:cf:ce:56:50: 54:85:ac:a0:fe:75:ba:da:44:ae:fb:f6:c4:35:da:2a:e2:27: c4:d5:4d:e5:02:61:25:30:f5:0f:65:34:b4:e7:0f:41:8e:da: f3:40:4b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLrZhqCE3G2Wx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk Yjg1ZDE2N2YtOGFiNS00MmY5LTlkNWItMTJlYmZmM2NkOTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa/stOZHt6PjdbxsAfV80GwjE5CwOkTwZ6sX rGzcb93+A2mFLYRiqXw28RSyvpkMsL7pgo9ds8PXtSrMoU4xZwuweTVgzwStxliG TUqL8Zp4Gk9tc+1/fvP2taIEbOmyMB/ZeHswb0WOLxIiRjFbL6sp/SQygWhmFovo DOyVyQI23pqvGT02Yqw8vUQKW7wgM1E4n4VbhT0kPLE2GNz4W3oT4HmW7X57aJLS YRmCWGbPaMgSUnyjkh44w9GRu3RWSJOsmJnMq8EZ8vSSqU0ezzjFGoPK87u/zfts uIlkaGdqZGBG5gXx4nnzlHonDIPzQ9YJ8RX7WOtLzW4XqfckUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0lO3EK+kmvWZO9MqIMdh7hvzBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMThmOThiMWYtMTNjMS0z ZmI0LTljMDQtNDVjMDYxODUyOWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAX2oh4FU8JAgVvtLpjo8DctvlnQYXnIetjUQD4hyfMM4DOFYdwmHyZh YVe8ly3SGnX4t9cq+z4zxC6M/MYD7unjnp4sipjvc7HStWyfCEUPjEjOJchVKnKx FOkOW1fTkiXckdJJwADfRrKbkjzoDfMIElyxvNcT+8d1PHoOG8s5QSX6SMx6Slvl cvDz36P9FDz3Vevk841UuWrDx7ntyM0tfRYLKfQZNRsVKdeCvowuawABnJnLOIWB bs7zry1loUTV3nI0fvHxUDiZU56O2BfzGHcOz85WUFSFrKD+dbraRK779sQ12iri J8TVTeUCYSUw9Q9lNLTnD0GO2vNAS9E= -----END CERTIFICATE-----Generated at Sun Apr 27 01:00:57 2025 by rpki-client