$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa File: 9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa (raw, json) Hash identifier: FBdQP/ZHHBJGf0R8MG9PrNYsmTjJd/o/o/iJz5dBjBM= Subject key identifier: 21:0B:CB:AB:2E:A7:06:E1:1C:1F:E1:AC:52:80:61:7A:4E:93:3B:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858499F24BA8B77FF7281762DE380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 98.17.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ba:8b:77:ff:72:81:76:2d:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=bc838962-799e-4c09-ab2c-9f62c250a653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:b1:43:65:8c:f6:7f:9b:ac:5b:e7:5a:84: 7b:1f:1b:17:8a:77:c3:8b:db:50:30:f6:9a:b2:87: 23:8c:77:a1:35:68:97:9f:3a:8a:78:65:a7:78:5e: 98:38:32:ad:9a:21:7c:bf:05:02:78:d5:2a:49:50: 32:11:1a:69:ce:37:80:ba:58:83:ba:c1:6a:29:77: 67:f9:3a:3c:da:35:d6:04:ea:3b:7e:7e:96:94:83: 7d:44:77:f3:eb:22:70:aa:a2:a2:1d:bb:22:b3:9b: 0b:e5:14:ce:55:8b:a3:96:99:75:52:82:bb:68:b5: 30:4a:19:99:82:6d:79:0d:1f:d6:37:53:65:a8:58: e7:bf:a6:a0:80:ba:ea:e6:9c:d4:ac:38:ff:8b:2d: a5:3a:31:94:f0:6b:e0:d1:45:82:a8:a9:3d:f2:34: 51:e5:45:fc:96:1a:d1:96:3a:9d:ed:f1:59:0a:39: 10:f7:e9:6d:4a:cc:a5:c2:86:2e:ec:d3:4c:c9:bc: 0e:65:43:fe:46:24:fd:af:b3:0a:6e:4e:05:4f:1f: e5:26:27:a6:ce:31:87:bf:81:ca:ce:e4:33:af:bb: c9:0a:fe:05:df:0a:ef:66:e6:6c:a6:f7:8f:af:48: 32:a8:31:05:14:00:3e:ee:69:30:84:cd:94:b2:96: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:0B:CB:AB:2E:A7:06:E1:1C:1F:E1:AC:52:80:61:7A:4E:93:3B:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a5359b7-3b6d-395b-aaa5-32ec89ab1cd9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:fd:cc:8d:c0:e3:49:76:12:cd:ed:b1:c0:31:63:b2:d4:d7: 42:22:66:7e:08:4a:ee:6c:d2:89:57:7e:49:b7:54:e7:0f:68: f5:f9:b1:d8:f5:24:24:05:b1:aa:6b:4f:bf:dd:60:c7:2d:57: ab:33:54:8d:ea:43:8d:82:34:48:72:37:e4:95:91:ea:88:bc: a9:9b:b9:53:89:9b:e2:9e:ca:34:54:9f:80:74:64:8f:47:1e: 60:e6:3c:0a:de:40:61:d1:e8:1d:d7:19:22:ef:6d:37:e4:ec: 0c:89:5f:1b:b5:e5:ca:95:77:a1:ab:c5:54:a1:a6:fb:d3:8f: bb:ea:35:63:a2:47:62:22:67:34:ae:54:f4:ab:70:67:f4:d1: d0:29:dc:82:b2:9c:e0:81:0f:e8:be:af:51:dc:30:d5:58:54: 16:99:90:96:66:b0:03:27:f8:f2:88:d7:01:52:b9:87:35:01: 39:dd:2b:df:6d:cc:92:39:90:1b:a4:86:1e:d7:1b:c1:e4:c0: fd:ce:d0:53:2e:69:8e:1f:bc:5f:c1:86:93:65:b3:ec:e1:50: a6:d1:de:bf:05:41:5f:78:39:8f:54:0c:a0:7d:8f:f0:cb:a3: 69:b1:1a:be:48:dc:bb:02:66:1d:0f:39:cd:ef:d4:da:b5:ab: 3e:f5:27:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLqLd/9ygXYt44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YmM4Mzg5NjItNzk5ZS00YzA5LWFiMmMtOWY2MmMyNTBhNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon2xQ2WM9n+brFvnWoR7HxsXinfDi9tQMPaa socjjHehNWiXnzqKeGWneF6YODKtmiF8vwUCeNUqSVAyERppzjeAuliDusFqKXdn +To82jXWBOo7fn6WlIN9RHfz6yJwqqKiHbsis5sL5RTOVYujlpl1UoK7aLUwShmZ gm15DR/WN1NlqFjnv6aggLrq5pzUrDj/iy2lOjGU8Gvg0UWCqKk98jRR5UX8lhrR ljqd7fFZCjkQ9+ltSsylwoYu7NNMybwOZUP+RiT9r7MKbk4FTx/lJiemzjGHv4HK zuQzr7vJCv4F3wrvZuZspvePr0gyqDEFFAA+7mkwhM2Uspa5/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCELy6supwbhHB/hrFKAYXpOkztwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWE1MzU5YjctM2I2ZC0z OTViLWFhYTUtMzJlYzg5YWIxY2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX9zI3A40l2Es3tscAxY7LU10IiZn4ISu5s0olXfkm3VOcPaPX5sdj1 JCQFsaprT7/dYMctV6szVI3qQ42CNEhyN+SVkeqIvKmbuVOJm+KeyjRUn4B0ZI9H HmDmPAreQGHR6B3XGSLvbTfk7AyJXxu15cqVd6GrxVShpvvTj7vqNWOiR2IiZzSu VPSrcGf00dAp3IKynOCBD+i+r1HcMNVYVBaZkJZmsAMn+PKI1wFSuYc1ATndK99t zJI5kBukhh7XG8HkwP3O0FMuaY4fvF/BhpNls+zhUKbR3r8FQV94OY9UDKB9j/DL o2mxGr5I3LsCZh0POc3v1Nq1qz71J2M= -----END CERTIFICATE-----Generated at Mon Apr 28 22:44:18 2025 by rpki-client