$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82baf898-a085-3f00-9524-75dcd6077316.roa File: 82baf898-a085-3f00-9524-75dcd6077316.roa (raw, json) Hash identifier: 5/Ze/4qshEc8DI00SXuO2KWEHcbCufD5Yujr6jkgfR8= Subject key identifier: 29:DC:07:9F:29:3C:9F:7A:D4:1D:D9:EE:38:8C:2D:22:CC:52:6F:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B3DCDC0F5DDF1DE94900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82baf898-a085-3f00-9524-75dcd6077316.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.22.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b3:dc:dc:0f:5d:df:1d:e9:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=64653ecc-aa26-4ec3-ab8a-5c0ffede25dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f6:02:05:3a:08:e4:f2:f1:54:43:7e:e2:4c: 59:ed:72:9c:73:70:8f:dc:a2:4d:4f:fd:26:3d:58: 3e:34:0c:24:2a:c1:7b:33:27:f1:de:cf:ce:57:29: 90:34:87:71:a6:cd:fa:59:d6:30:a8:1e:f1:83:64: 3c:cd:b7:3e:3f:6e:3a:f6:3e:da:db:4a:ee:c8:72: 6a:c3:e6:2e:f6:3c:3d:b5:a9:4c:6c:73:c8:b0:45: 60:04:b0:1c:b2:a1:9b:60:ea:1d:36:07:25:cc:12: 23:23:60:65:1a:ab:29:52:84:8b:0a:d6:94:8f:2a: ff:42:07:f1:ad:7d:3f:ad:e1:bd:ca:07:74:c7:23: 83:da:31:36:48:86:6e:3e:17:44:15:0e:d7:a5:e5: 46:4f:6c:82:f9:1c:cc:93:26:ab:8c:77:22:1c:fb: 26:8c:31:a9:ff:16:e9:2b:32:c8:be:36:0e:d4:bd: de:e4:5a:2a:d1:35:9c:83:2f:0a:31:82:86:56:77: 06:d9:f3:1e:90:2b:da:2b:9f:5e:80:13:7b:c9:15: 91:26:e2:39:3c:31:69:0d:88:e7:08:82:6b:05:d4: aa:de:24:0b:8b:0c:0e:54:eb:87:f8:c0:61:a8:c6: f4:88:26:54:b4:f4:83:3f:8a:e8:3b:82:05:d8:7f: d7:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DC:07:9F:29:3C:9F:7A:D4:1D:D9:EE:38:8C:2D:22:CC:52:6F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82baf898-a085-3f00-9524-75dcd6077316.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:aa:f6:62:59:78:e9:85:5e:cd:70:83:d7:d3:5f:c6:87:81: 3c:dd:a8:fd:bd:a4:d0:01:ba:37:ab:76:12:8f:0b:ff:a7:76: b9:43:79:46:51:69:28:93:0c:68:f4:4e:b3:0e:74:da:7e:bb: 6e:bb:f8:4d:67:e2:1d:24:f9:a6:f8:b4:1d:87:32:41:48:e9: 4e:e9:e4:b4:90:ba:0a:d8:d4:7d:c2:8f:a5:ca:78:9f:06:90: 62:cf:e1:5b:f4:9e:57:67:04:2b:1d:d0:61:d3:0f:75:ef:8f: 11:2c:55:69:93:d5:7a:d5:e7:d8:61:b9:7d:01:de:90:a3:69: b3:3d:18:bf:c9:d2:38:e8:9c:1a:32:c5:bc:7c:57:c6:07:e6: 93:76:3a:6e:df:bd:e0:e8:84:a0:5b:66:b2:ec:5d:3c:73:9e: 6d:da:af:e1:c5:3d:d4:32:e4:7d:ba:dd:51:16:ff:1f:a5:d3: 06:ec:60:3b:16:8a:80:f7:71:b4:bb:14:75:c6:f3:c2:64:47: bf:0e:38:c2:d7:3e:7e:9c:b4:a5:66:a8:6f:2b:4f:1c:58:5d: 88:9d:a9:06:49:39:58:a9:20:e1:9f:06:92:34:84:41:75:70: 98:6c:44:51:d9:e7:5d:ec:2f:23:e4:e6:21:59:e2:46:22:7b: 70:8c:d5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbPc3A9d3x3pSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NjQ2NTNlY2MtYWEyNi00ZWMzLWFiOGEtNWMwZmZlZGUyNWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfYCBToI5PLxVEN+4kxZ7XKcc3CP3KJNT/0m PVg+NAwkKsF7Myfx3s/OVymQNIdxps36WdYwqB7xg2Q8zbc+P2469j7a20ruyHJq w+Yu9jw9talMbHPIsEVgBLAcsqGbYOodNgclzBIjI2BlGqspUoSLCtaUjyr/Qgfx rX0/reG9ygd0xyOD2jE2SIZuPhdEFQ7XpeVGT2yC+RzMkyarjHciHPsmjDGp/xbp KzLIvjYO1L3e5Foq0TWcgy8KMYKGVncG2fMekCvaK59egBN7yRWRJuI5PDFpDYjn CIJrBdSq3iQLiwwOVOuH+MBhqMb0iCZUtPSDP4roO4IF2H/XQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCncB58pPJ961B3Z7jiMLSLMUm96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODJiYWY4OTgtYTA4NS0z ZjAwLTk1MjQtNzVkY2Q2MDc3MzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYha0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuq9mJZeOmFXs1wg9fTX8aHgTzdqP29pNABujerdhKPC/+ndrlDeUZR aSiTDGj0TrMOdNp+u267+E1n4h0k+ab4tB2HMkFI6U7p5LSQugrY1H3Cj6XKeJ8G kGLP4Vv0nldnBCsd0GHTD3XvjxEsVWmT1XrV59hhuX0B3pCjabM9GL/J0jjonBoy xbx8V8YH5pN2Om7fveDohKBbZrLsXTxznm3ar+HFPdQy5H263VEW/x+l0wbsYDsW ioD3cbS7FHXG88JkR78OOMLXPn6ctKVmqG8rTxxYXYidqQZJOVipIOGfBpI0hEF1 cJhsRFHZ513sLyPk5iFZ4kYie3CM1Vo= -----END CERTIFICATE-----Generated at Sun Apr 27 04:01:34 2025 by rpki-client