$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa File: 40e0b31e-01f2-317f-a8d0-77ce927a2303.roa (raw, json) Hash identifier: 6+fXppkjj9puWiaEZPlhkOrzUMMgHa6djWq2hv5xDYs= Subject key identifier: D8:F9:EA:79:4E:97:C9:61:76:8A:90:33:F1:A4:85:74:9E:89:DD:BA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858490F7BF3A40A3DB6823CD24A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.20.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:f3:a4:0a:3d:b6:82:3c:d2:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=27bc819a-e9aa-4e75-8254-9e5835d30871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:3c:1e:e9:82:9e:38:0a:29:f1:60:ad:eb: b2:af:e7:88:9e:7d:c6:ad:d6:d7:2a:0f:38:03:60: 3e:32:7a:be:d6:90:fb:b1:10:c5:8c:20:9d:b0:ad: d4:3d:5f:54:60:f3:4c:7e:d9:50:c9:4a:8c:99:8b: 01:3c:af:de:f6:4a:b7:4c:ee:1f:fc:7e:28:0a:cd: e2:74:ab:22:e4:6d:a3:3d:00:ec:5f:8e:64:1a:cf: 5c:f5:0b:eb:1c:2c:a1:32:9a:a6:08:15:40:89:29: 5e:83:d2:fb:4e:ca:43:81:26:9c:cd:f3:b1:89:2c: b5:3d:c6:a5:27:51:79:d8:68:72:f7:b2:6c:f2:be: 5e:10:a9:58:9b:3f:4c:ed:b6:6c:dd:51:dc:20:45: f2:5d:56:1d:ab:18:f4:c3:21:dd:de:48:38:eb:2c: 58:86:75:9c:9d:e9:89:80:dc:0f:46:bd:4a:94:2c: c4:65:b3:ca:04:54:b1:7a:dc:e4:4a:92:8e:3e:da: fb:0f:d3:36:cf:d4:da:d8:21:4e:1e:54:8b:4b:95: 68:53:74:0f:ad:d7:1a:2c:87:93:af:60:ca:35:33: 3e:ef:56:57:bb:23:7a:92:75:0b:24:63:84:ca:7d: 13:50:54:fa:a8:3f:50:00:77:17:22:98:fe:5b:e7: e2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:EA:79:4E:97:C9:61:76:8A:90:33:F1:A4:85:74:9E:89:DD:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/40e0b31e-01f2-317f-a8d0-77ce927a2303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:30:21:41:ae:08:24:2f:35:a2:2d:99:1e:a7:6a:42:ba:b3: c5:9c:06:c7:ef:29:93:ed:16:a9:72:61:67:cf:81:f1:38:42: ff:18:f1:09:cb:6f:93:14:c9:f5:db:fe:ed:88:2f:c0:bd:7d: f0:b5:f6:78:42:38:79:d6:4f:9f:64:f9:e4:a2:f8:43:5b:9f: a8:7f:cb:a7:d4:35:68:c3:3b:8d:9f:8e:58:c8:fc:3c:5b:96: 0f:4c:66:c5:e9:7d:5f:b3:17:b2:7d:8b:42:12:ff:43:04:9f: 3d:01:22:4f:14:7e:26:70:d3:f5:be:8a:48:0f:cc:3c:1a:9c: a8:f5:ac:16:be:34:7e:b7:27:e7:04:99:14:ee:13:4d:7a:df: 84:e4:1b:3b:e0:d2:be:14:3e:96:bd:b3:b3:71:19:9a:f4:93: 25:81:ed:47:cc:80:d2:1b:8b:f8:46:84:ce:d3:f5:8d:03:2b: da:1b:08:cd:cf:2d:ff:89:04:69:80:58:8f:91:e9:6b:d1:dd: 95:03:00:dd:6a:74:c5:3d:a9:be:43:3d:3d:be:9a:5f:9f:de: 60:15:c1:84:86:3c:80:aa:f8:3c:91:cb:3f:6a:68:ac:8b:2e: db:79:2e:9e:64:ce:26:06:dc:66:ae:51:22:4c:7b:22:f1:89: 15:15:96:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/OkCj22gjzSSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk MjdiYzgxOWEtZTlhYS00ZTc1LTgyNTQtOWU1ODM1ZDMwODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpo8HumCnjgKKfFgreuyr+eInn3GrdbXKg84 A2A+Mnq+1pD7sRDFjCCdsK3UPV9UYPNMftlQyUqMmYsBPK/e9kq3TO4f/H4oCs3i dKsi5G2jPQDsX45kGs9c9QvrHCyhMpqmCBVAiSleg9L7TspDgSaczfOxiSy1Pcal J1F52Ghy97Js8r5eEKlYmz9M7bZs3VHcIEXyXVYdqxj0wyHd3kg46yxYhnWcnemJ gNwPRr1KlCzEZbPKBFSxetzkSpKOPtr7D9M2z9Ta2CFOHlSLS5VoU3QPrdcaLIeT r2DKNTM+71ZXuyN6knULJGOEyn0TUFT6qD9QAHcXIpj+W+fidwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNj56nlOl8lhdoqQM/GkhXSeid26MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDBlMGIzMWUtMDFmMi0z MTdmLWE4ZDAtNzdjZTkyN2EyMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYwIUGuCCQvNaItmR6nakK6s8WcBsfvKZPtFqlyYWfPgfE4Qv8Y8QnL b5MUyfXb/u2IL8C9ffC19nhCOHnWT59k+eSi+ENbn6h/y6fUNWjDO42fjljI/Dxb lg9MZsXpfV+zF7J9i0IS/0MEnz0BIk8UfiZw0/W+ikgPzDwanKj1rBa+NH63J+cE mRTuE01634TkGzvg0r4UPpa9s7NxGZr0kyWB7UfMgNIbi/hGhM7T9Y0DK9obCM3P Lf+JBGmAWI+R6WvR3ZUDAN1qdMU9qb5DPT2+ml+f3mAVwYSGPICq+DyRyz9qaKyL Ltt5Lp5kziYG3GauUSJMeyLxiRUVloo= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:46 2025 by rpki-client