$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa File: 904128b2-0813-339d-a2fa-b676181812c8.roa (raw, json) Hash identifier: zoh4aDNHi87Mkp7mcXqya+JmLN6icI93owlRDpbGCp0= Subject key identifier: 5A:6C:ED:9B:45:8D:D1:E6:21:5A:DD:BA:C1:7D:28:52:25:8B:FC:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B7D8804B7887C5F6F9F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.22.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b7:d8:80:4b:78:87:c5:f6:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=dc7f3d7f-13ca-4022-9ef3-ae82750145a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:09:c2:3d:d9:a1:0f:6c:4a:77:08:58:f3: 04:40:b5:e7:56:0b:47:28:60:a6:ba:f8:f3:07:98: 9b:15:ba:17:b7:bb:96:db:e5:b3:99:f9:00:c9:fd: ff:62:3c:2c:7c:0f:97:ba:78:37:54:84:2e:29:c0: fa:a0:9f:41:52:88:95:fa:35:ab:f5:c4:5f:21:06: b8:79:f7:48:6c:b3:81:24:b9:ed:d0:6a:a4:d2:01: 35:d9:9c:b7:e7:fd:24:f9:1d:60:f1:8a:08:b4:bc: d0:b0:f2:3b:eb:36:de:f1:38:c1:5c:4c:cb:ea:fe: 20:f4:44:70:95:0b:88:6f:30:12:b6:a5:0a:8b:3e: a5:65:7b:00:bd:e4:93:be:96:2d:ff:9b:0b:ce:00: 05:a3:fa:f5:36:03:a5:9a:12:40:66:60:11:f8:03: c9:15:a1:00:73:23:ff:83:54:24:4d:4f:0f:5c:0f: 76:34:31:46:01:a7:2c:f5:41:b6:e2:ac:ba:a4:1d: 66:6a:93:94:74:2b:c2:0f:58:73:45:8d:dd:7f:40: d7:b3:2b:d0:0f:69:19:44:2b:b8:e1:c8:16:fb:b2: 7a:e1:8c:96:82:7d:ce:58:42:c8:72:50:15:b5:0b: da:68:f1:9b:43:be:fe:4c:99:e7:00:df:c5:59:26: e7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6C:ED:9B:45:8D:D1:E6:21:5A:DD:BA:C1:7D:28:52:25:8B:FC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/904128b2-0813-339d-a2fa-b676181812c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:1a:a9:9a:0b:e0:1f:e8:3c:d8:47:1d:97:07:c6:28:a5:92: c8:31:ae:09:58:50:66:73:86:18:f7:f9:ce:d4:31:74:07:b3: fe:c7:0b:dc:2a:85:f1:46:db:fc:32:9e:48:09:ee:6b:a1:78: 8c:06:b3:92:c5:0a:51:da:0b:f9:f6:fe:b6:66:a3:9e:67:1f: f8:ae:78:25:bb:53:9d:58:19:2f:df:59:59:cb:f1:4b:43:b8: 89:5e:3c:41:7f:7a:16:f2:e1:72:99:c7:fe:53:24:08:24:09: ea:33:ea:80:ff:28:e5:d2:3b:2e:c6:87:a3:41:11:60:37:47: 83:b4:1d:4c:15:ee:d6:c4:15:57:9e:0a:43:ad:de:1e:02:d5: bd:ae:90:69:f7:5c:3a:43:5a:56:88:75:71:7c:0b:d2:61:81: 4f:8f:ce:c3:f4:06:88:59:2f:cf:ad:8a:91:50:cf:a3:a8:f7: 7c:b3:a7:8e:99:3a:97:b9:ec:98:b6:21:43:33:77:3c:15:7e: 61:32:5d:be:ac:4e:1c:0a:cc:4e:25:d7:ff:77:b5:5b:d2:87: 49:0e:82:8a:bd:9c:01:6f:43:e7:8a:53:62:ab:44:81:4c:22: a0:4f:7a:e6:4d:5d:62:62:ad:61:b0:3c:e0:af:d3:53:3b:62: 2b:84:2e:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbfYgEt4h8X2+fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ZGM3ZjNkN2YtMTNjYS00MDIyLTllZjMtYWU4Mjc1MDE0NWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmAJwj3ZoQ9sSncIWPMEQLXnVgtHKGCmuvjz B5ibFboXt7uW2+WzmfkAyf3/YjwsfA+Xung3VIQuKcD6oJ9BUoiV+jWr9cRfIQa4 efdIbLOBJLnt0Gqk0gE12Zy35/0k+R1g8YoItLzQsPI76zbe8TjBXEzL6v4g9ERw lQuIbzAStqUKiz6lZXsAveSTvpYt/5sLzgAFo/r1NgOlmhJAZmAR+APJFaEAcyP/ g1QkTU8PXA92NDFGAacs9UG24qy6pB1mapOUdCvCD1hzRY3df0DXsyvQD2kZRCu4 4cgW+7J64YyWgn3OWELIclAVtQvaaPGbQ77+TJnnAN/FWSbnKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFps7ZtFjdHmIVrdusF9KFIli/zSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTA0MTI4YjItMDgxMy0z MzlkLWEyZmEtYjY3NjE4MTgxMmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4aqZoL4B/oPNhHHZcHxiilksgxrglYUGZzhhj3+c7UMXQHs/7HC9wq hfFG2/wynkgJ7muheIwGs5LFClHaC/n2/rZmo55nH/iueCW7U51YGS/fWVnL8UtD uIlePEF/ehby4XKZx/5TJAgkCeoz6oD/KOXSOy7Gh6NBEWA3R4O0HUwV7tbEFVee CkOt3h4C1b2ukGn3XDpDWlaIdXF8C9JhgU+PzsP0BohZL8+tipFQz6Oo93yzp46Z Ope57Ji2IUMzdzwVfmEyXb6sThwKzE4l1/93tVvSh0kOgoq9nAFvQ+eKU2KrRIFM IqBPeuZNXWJirWGwPOCv01M7YiuELnw= -----END CERTIFICATE-----Generated at Mon Apr 28 02:48:13 2025 by rpki-client