$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/705ba21e-07be-33a8-a79d-3a77a4020648.roa File: 705ba21e-07be-33a8-a79d-3a77a4020648.roa (raw, json) Hash identifier: HMKtZvkSRQVvVqNL3upCbK2eaasCdRGzzYw6B9nWxXk= Subject key identifier: 80:5B:B8:A7:6F:3A:37:60:5C:B5:E0:F8:99:D6:38:94:F1:BD:51:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849780F1EE97B67268341028E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/705ba21e-07be-33a8-a79d-3a77a4020648.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.23.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:1e:e9:7b:67:26:83:41:02:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=77a1f35d-a17f-4494-ac18-1d572e68639e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:9e:69:1c:5f:a6:ff:4a:a0:d2:1c:5c:fd:e5: 57:b8:be:cb:3d:7c:78:07:3f:c3:77:0a:c1:70:a8: 19:f4:c3:b1:0f:45:b7:b3:6e:d3:f1:13:71:37:89: 31:ca:db:93:73:dc:09:f2:96:a0:e2:e9:e5:dc:c5: 2f:a5:65:6b:0a:69:3a:a8:6f:a2:ff:19:e7:5d:de: a4:dd:4c:cc:da:f9:e3:9e:4f:ed:ea:0a:b0:f3:68: 9a:68:90:be:eb:4f:a2:d8:bb:6f:d1:41:37:94:01: 71:f2:66:0a:62:a9:27:86:15:7f:0c:cb:c7:c3:09: 7e:16:c3:e6:e1:cb:59:92:17:f8:f1:6f:04:4a:7b: 85:1f:09:d6:2f:91:39:e0:49:d0:c4:93:cd:01:15: 7a:57:66:b8:e6:26:08:6e:b0:c6:8a:dd:aa:13:ac: 81:90:8b:b0:d4:46:7e:6c:9d:43:c5:8f:e3:76:3f: ba:91:e8:4a:1e:46:13:d3:18:5c:29:09:38:cf:01: 37:2a:2f:f9:f8:5a:f1:8f:6f:62:28:7f:6a:6e:31: 31:92:d7:7e:7d:a2:52:27:ef:a0:c8:4c:08:db:42: 16:90:8c:2e:2a:05:b7:64:99:90:c3:4c:fd:39:67: ce:3c:3a:f3:49:e7:ca:8b:52:dd:f7:7d:f9:f1:3d: 07:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5B:B8:A7:6F:3A:37:60:5C:B5:E0:F8:99:D6:38:94:F1:BD:51:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/705ba21e-07be-33a8-a79d-3a77a4020648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b3:e4:7a:a7:86:fa:87:5b:2c:f8:59:b6:a1:3d:9b:28:71: ec:37:5a:66:61:e0:b2:fe:86:0b:ec:30:b8:a5:93:d8:f3:d0: 5c:7a:fe:c8:96:74:a9:5f:86:b8:06:6f:25:3e:5c:cc:3e:c5: 75:7a:18:fb:2c:44:67:92:a5:f7:96:4f:b7:50:ee:0f:78:c1: 09:ea:d0:d2:17:34:a4:1d:cb:b4:69:b5:01:42:37:82:f7:56: 11:91:a5:ae:d5:e0:86:ed:84:ed:81:68:f0:dc:28:f2:93:05: 76:df:78:34:f7:8e:3a:6e:22:79:07:2f:41:64:7c:09:28:d9: 63:8b:e2:aa:e8:c1:8c:c5:ad:47:67:2f:be:e0:59:b5:e6:c5: 20:1e:d7:81:29:94:3a:fd:b5:16:79:8e:e9:c7:7f:df:8d:f2: 2d:03:59:12:bb:5b:2e:c3:7f:b6:c2:0d:77:33:3e:8b:8b:76: f8:d2:c1:4e:3e:19:d8:31:80:68:b4:11:0a:9d:5d:e6:24:48: 12:a7:a6:35:34:55:35:b4:74:6e:65:76:5d:d9:82:67:18:d7: eb:3d:12:ae:4f:7b:e4:fa:b4:1c:68:04:0f:ee:1c:82:4c:fe: 53:43:a9:e5:cd:8d:46:6d:57:b2:fd:ac:79:e3:17:b8:f6:90: e8:4b:9a:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dx7pe2cmg0ECjkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk NzdhMWYzNWQtYTE3Zi00NDk0LWFjMTgtMWQ1NzJlNjg2MzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA155pHF+m/0qg0hxc/eVXuL7LPXx4Bz/DdwrB cKgZ9MOxD0W3s27T8RNxN4kxytuTc9wJ8pag4unl3MUvpWVrCmk6qG+i/xnnXd6k 3UzM2vnjnk/t6gqw82iaaJC+60+i2Ltv0UE3lAFx8mYKYqknhhV/DMvHwwl+FsPm 4ctZkhf48W8ESnuFHwnWL5E54EnQxJPNARV6V2a45iYIbrDGit2qE6yBkIuw1EZ+ bJ1DxY/jdj+6kehKHkYT0xhcKQk4zwE3Ki/5+Frxj29iKH9qbjExktd+faJSJ++g yEwI20IWkIwuKgW3ZJmQw0z9OWfOPDrzSefKi1Ld93358T0HoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBbuKdvOjdgXLXg+JnWOJTxvVE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzA1YmEyMWUtMDdiZS0z M2E4LWE3OWQtM2E3N2E0MDIwNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhf0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOz5HqnhvqHWyz4WbahPZsocew3WmZh4LL+hgvsMLilk9jz0Fx6/siW dKlfhrgGbyU+XMw+xXV6GPssRGeSpfeWT7dQ7g94wQnq0NIXNKQdy7RptQFCN4L3 VhGRpa7V4IbthO2BaPDcKPKTBXbfeDT3jjpuInkHL0FkfAko2WOL4qrowYzFrUdn L77gWbXmxSAe14EplDr9tRZ5junHf9+N8i0DWRK7Wy7Df7bCDXczPouLdvjSwU4+ GdgxgGi0EQqdXeYkSBKnpjU0VTW0dG5ldl3ZgmcY1+s9Eq5Pe+T6tBxoBA/uHIJM /lNDqeXNjUZtV7L9rHnjF7j2kOhLmno= -----END CERTIFICATE-----Generated at Sun Apr 27 01:51:55 2025 by rpki-client