$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42336d28-126e-3d39-a701-01430f1bcc91.roa File: 42336d28-126e-3d39-a701-01430f1bcc91.roa (raw, json) Hash identifier: WZjwC9D/+3mA3O7/uFerKc3ky1a9itsJVxwF2NKIeTI= Subject key identifier: D2:58:13:B3:E2:EF:86:0D:78:8C:A3:58:F6:4F:F1:F4:D9:E6:B1:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A188410CF9191EBD70C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42336d28-126e-3d39-a701-01430f1bcc91.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.16.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:18:84:10:cf:91:91:eb:d7:0c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a7025dfe-308b-42f2-8fa1-be2eb79e6232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:47:c0:02:7d:bf:28:51:15:3e:f1:09:f1:34: 85:b7:b1:a2:1e:c7:85:bb:fa:e0:a3:fd:fe:67:53: a7:9a:6f:7d:de:72:4e:da:be:8a:fe:bc:d2:6c:e6: 3b:61:7a:7f:61:12:f0:d7:31:6b:0a:54:d9:ec:56: 52:cb:26:23:81:47:60:f7:2a:69:92:d8:76:d0:45: 13:0b:40:01:e1:c1:7e:71:42:16:9a:b6:be:b2:e1: 09:1b:3c:1a:38:a3:5f:f4:62:d2:d5:5d:6b:3a:49: 8a:b9:d9:bc:fe:d4:8f:63:6a:b8:17:1f:6f:2d:5a: 21:0f:49:ff:43:1d:14:b8:8e:97:cd:88:52:3a:26: b4:e0:bf:69:3f:b3:61:c0:2e:cc:f5:b2:2a:a7:6b: 5a:36:37:23:32:ab:9d:30:34:6a:74:f1:b2:9a:c3: 22:63:b8:70:f5:e1:ba:05:f3:51:7e:66:4d:1c:ec: 70:3f:ba:28:a6:ed:6b:1d:2d:95:c2:97:5c:34:a4: 62:09:55:e1:93:ae:f2:24:e3:c5:b0:1c:b5:88:c0: e1:a7:ea:54:6a:66:65:5a:66:e6:9d:b0:65:77:c0: 38:7c:cc:62:51:09:73:67:87:3b:c6:69:64:ca:1a: df:ca:f9:22:d0:84:e0:44:e8:e3:60:6b:2b:7b:cb: 0f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:58:13:B3:E2:EF:86:0D:78:8C:A3:58:F6:4F:F1:F4:D9:E6:B1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/42336d28-126e-3d39-a701-01430f1bcc91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5f:82:44:42:aa:24:fb:8e:44:ff:ba:04:8d:96:a7:cb:00: fd:15:4e:a1:c0:40:39:75:51:11:92:34:ec:c4:e5:54:fa:9a: 91:d5:29:e6:a2:ec:b2:30:03:d7:c0:7f:5a:ba:3c:97:45:c6: 57:ea:e1:71:52:5d:e5:35:73:24:75:88:4e:cc:ee:83:79:4a: 02:8a:23:a2:b4:71:9f:ba:04:7b:ce:03:17:d9:ba:c9:59:60: b1:09:e3:b9:83:31:47:cf:8f:65:90:12:9b:50:b4:1c:6c:c5: 10:df:60:a8:94:66:b2:cb:e2:53:22:e5:60:27:b2:18:01:b7: 91:51:b7:46:68:5f:0e:2b:92:5b:61:2c:55:49:32:3b:b9:95: cf:43:6c:b1:d5:de:07:c3:10:db:b5:1a:43:7e:3f:4c:79:8a: 7a:1c:6e:09:12:11:a7:1e:ac:06:85:77:b1:e8:12:e1:e9:5c: bf:b7:fd:ec:49:6d:28:8e:c6:16:1e:32:4a:d6:06:cc:ed:1a: cf:76:b0:7f:1e:f0:bb:8b:48:62:c8:85:6c:34:65:67:aa:38: b8:37:a9:d7:40:12:94:18:60:27:07:2a:1e:3b:e4:d5:f7:ba: 07:08:5d:c7:02:92:da:ca:4f:39:28:57:c2:09:33:cb:2c:4d: 01:56:51:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhiEEM+RkevXDEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTcwMjVkZmUtMzA4Yi00MmYyLThmYTEtYmUyZWI3OWU2MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEfAAn2/KFEVPvEJ8TSFt7GiHseFu/rgo/3+ Z1Onmm993nJO2r6K/rzSbOY7YXp/YRLw1zFrClTZ7FZSyyYjgUdg9yppkth20EUT C0AB4cF+cUIWmra+suEJGzwaOKNf9GLS1V1rOkmKudm8/tSPY2q4Fx9vLVohD0n/ Qx0UuI6XzYhSOia04L9pP7NhwC7M9bIqp2taNjcjMqudMDRqdPGymsMiY7hw9eG6 BfNRfmZNHOxwP7oopu1rHS2VwpdcNKRiCVXhk67yJOPFsBy1iMDhp+pUamZlWmbm nbBld8A4fMxiUQlzZ4c7xmlkyhrfyvki0ITgROjjYGsre8sP0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNJYE7Pi74YNeIyjWPZP8fTZ5rHoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDIzMzZkMjgtMTI2ZS0z ZDM5LWE3MDEtMDE0MzBmMWJjYzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhCiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpfgkRCqiT7jkT/ugSNlqfLAP0VTqHAQDl1URGSNOzE5VT6mpHVKeai 7LIwA9fAf1q6PJdFxlfq4XFSXeU1cyR1iE7M7oN5SgKKI6K0cZ+6BHvOAxfZuslZ YLEJ47mDMUfPj2WQEptQtBxsxRDfYKiUZrLL4lMi5WAnshgBt5FRt0ZoXw4rklth LFVJMju5lc9DbLHV3gfDENu1GkN+P0x5inocbgkSEacerAaFd7HoEuHpXL+3/exJ bSiOxhYeMkrWBsztGs92sH8e8LuLSGLIhWw0ZWeqOLg3qddAEpQYYCcHKh475NX3 ugcIXccCktrKTzkoV8IJM8ssTQFWUaI= -----END CERTIFICATE-----Generated at Sun Jun 15 13:15:50 2025 by rpki-client