$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa File: 942824f6-6070-3132-8cee-ad290f982789.roa (raw, json) Hash identifier: ixpifVkKjxjpfm6FfgYmyLHPD3WAUh3niBCzqODIQ5M= Subject key identifier: B7:99:5A:E3:6D:42:4E:49:29:ED:03:E2:1B:84:EF:AE:5D:FE:3B:7E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA9320A118A80C9A5AB180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 98.17.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:93:20:a1:18:a8:0c:9a:5a:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=7a35b169-6b93-48e7-9049-c07daf710b95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:db:6e:db:2e:2f:46:d2:e5:94:94:e1:74:94: 3b:73:3c:2b:2f:e5:21:cd:29:73:3c:15:73:0c:15: 25:3a:e2:9f:0f:84:27:17:85:83:5d:2b:e1:81:b6: 30:ad:67:66:f5:28:55:15:18:1c:74:61:a9:51:10: 2a:3b:1b:b0:de:f7:84:75:0e:10:4f:0b:75:e8:9c: e0:f8:d6:c7:ca:e2:f3:66:3e:9b:ab:60:df:d9:c3: 60:2d:1e:54:a6:aa:7c:5d:07:e2:bf:fe:44:32:1c: a1:b5:fd:56:11:1d:d5:25:77:6f:5d:65:81:09:3e: 74:27:f9:cc:83:ad:01:89:8e:a9:f8:89:f6:12:86: 5d:6c:0a:a2:f6:b7:0b:78:c7:08:f6:95:19:88:ec: a6:96:34:e8:b8:94:62:01:75:1f:f2:af:9c:4a:08: f8:1f:33:93:9d:96:5e:28:24:67:69:3a:3e:d1:2f: c7:93:71:bf:9f:83:26:4e:e0:a3:15:78:bf:3d:e5: 6c:0b:ff:ed:58:7a:19:23:e2:92:c5:a5:a3:66:35: de:ac:aa:2d:b0:69:8a:c0:f3:4a:9e:15:ce:99:94: 50:51:8e:2b:cd:4d:f2:c9:63:80:9c:07:60:da:52: 8c:1b:8a:e1:0b:54:d9:bf:2a:9d:9f:a6:c7:44:2c: 7a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:99:5A:E3:6D:42:4E:49:29:ED:03:E2:1B:84:EF:AE:5D:FE:3B:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942824f6-6070-3132-8cee-ad290f982789.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:31:51:61:7d:9a:ab:e4:54:0c:83:dd:28:f8:93:ac:d1:58: 3d:d1:45:32:94:b5:4e:ef:40:60:76:52:09:ae:f7:d5:4e:0a: b1:e0:d3:09:fa:e5:06:67:b1:db:30:94:d6:c6:e1:51:86:54: 76:90:a1:4e:9e:cd:32:f2:cd:02:56:da:6b:de:76:3e:f1:53: 54:1e:42:77:eb:b1:b6:9d:60:29:1c:df:21:65:a9:e6:f1:14: da:77:1d:70:a5:b8:49:d3:2c:73:2a:b6:ec:d5:b5:aa:dc:d5: 61:94:84:d5:b6:a8:98:15:44:d8:21:95:46:49:78:18:81:c4: 67:ce:3c:a4:a2:19:e7:ae:23:45:99:7d:56:dd:0f:63:db:0d: 51:70:2b:6d:81:79:85:35:04:30:0b:8c:be:7d:8d:65:73:50: 37:f7:15:2f:2e:09:61:e7:66:70:12:d8:f7:fb:c2:41:5f:85: 38:93:7d:06:7d:6e:8f:a3:b3:6e:da:4d:d5:5c:c0:a3:c8:97: 32:a5:ee:c8:dd:75:9f:5a:cf:40:17:7b:97:a4:35:d8:3f:2c: 8f:8b:fd:6e:8b:bd:e5:2f:27:cf:1a:cd:ae:21:d9:0e:46:82: 7e:a7:f8:c1:ec:8d:56:12:d9:d1:5b:d3:b0:21:ae:e9:2b:bf: c0:2b:f4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpMgoRioDJpasYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk N2EzNWIxNjktNmI5My00OGU3LTkwNDktYzA3ZGFmNzEwYjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ntu2y4vRtLllJThdJQ7czwrL+UhzSlzPBVz DBUlOuKfD4QnF4WDXSvhgbYwrWdm9ShVFRgcdGGpURAqOxuw3veEdQ4QTwt16Jzg +NbHyuLzZj6bq2Df2cNgLR5Upqp8XQfiv/5EMhyhtf1WER3VJXdvXWWBCT50J/nM g60BiY6p+In2EoZdbAqi9rcLeMcI9pUZiOymljTouJRiAXUf8q+cSgj4HzOTnZZe KCRnaTo+0S/Hk3G/n4MmTuCjFXi/PeVsC//tWHoZI+KSxaWjZjXerKotsGmKwPNK nhXOmZRQUY4rzU3yyWOAnAdg2lKMG4rhC1TZvyqdn6bHRCx6IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeZWuNtQk5JKe0D4huE765d/jt+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQyODI0ZjYtNjA3MC0z MTMyLThjZWUtYWQyOTBmOTgyNzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkxUWF9mqvkVAyD3Sj4k6zRWD3RRTKUtU7vQGB2Ugmu99VOCrHg0wn6 5QZnsdswlNbG4VGGVHaQoU6ezTLyzQJW2mvedj7xU1QeQnfrsbadYCkc3yFlqebx FNp3HXCluEnTLHMqtuzVtarc1WGUhNW2qJgVRNghlUZJeBiBxGfOPKSiGeeuI0WZ fVbdD2PbDVFwK22BeYU1BDALjL59jWVzUDf3FS8uCWHnZnAS2Pf7wkFfhTiTfQZ9 bo+js27aTdVcwKPIlzKl7sjddZ9az0AXe5ekNdg/LI+L/W6LveUvJ88aza4h2Q5G gn6n+MHsjVYS2dFb07Ahrukrv8Ar9FQ= -----END CERTIFICATE-----Generated at Wed Jun 18 17:57:30 2025 by rpki-client