$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa File: a900db9d-6c9c-3739-b1a1-9441dc45040e.roa (raw, json) Hash identifier: dMi7M0oIyMQot3wTcq7DrDYXThapqrPdzBg48PxTK/s= Subject key identifier: 6F:B2:B8:42:B1:73:80:C4:8B:F7:AA:E4:7D:12:EE:FE:54:9D:C0:78 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F099EA6FEA75025491F8F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 98.19.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:9e:a6:fe:a7:50:25:49:1f:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=7564f0a7-7027-4bb4-8569-5ca47cfe53d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ac:94:b4:b0:ce:0f:bc:12:64:f6:55:ce:5b: 66:d9:ff:d8:1f:c1:59:f8:b6:ef:d0:66:3a:9f:e8: 86:3c:d6:fa:8c:3b:86:52:11:96:5b:bc:3a:5a:69: aa:4f:b0:90:a6:70:21:db:bd:a0:f3:41:73:82:68: 54:00:5e:d0:33:56:0f:1d:0a:09:a0:a8:dc:dd:81: 1a:a2:12:37:f4:d6:17:7a:88:14:0b:0c:a1:70:49: 78:1a:2e:37:2f:2e:a6:5c:b0:86:3b:76:fc:86:d8: 43:36:82:43:13:c4:a7:68:9a:c1:16:c1:07:d0:02: f9:cc:e4:6d:69:08:a8:83:b7:0e:d7:73:b3:56:03: c7:be:93:a8:24:58:30:99:8f:c0:0c:69:af:3a:7d: c7:e0:82:00:cd:2b:1e:99:fd:b3:0d:ae:6a:26:78: 02:1b:65:6d:32:39:4e:b2:12:66:36:c4:6c:ce:88: 38:e9:6b:53:39:87:dc:e4:1f:fd:5b:f0:b8:2b:e2: 1f:50:f0:60:4f:61:e0:18:a5:cf:78:e8:24:4b:ac: e3:b6:cd:1c:6f:2f:82:24:31:ab:3e:ac:ab:7a:10: 64:05:3f:fe:f1:5c:24:4a:f8:de:08:b8:f9:e0:e0: 3d:b0:81:99:f5:0c:bd:9c:f8:a4:74:53:3c:86:47: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B2:B8:42:B1:73:80:C4:8B:F7:AA:E4:7D:12:EE:FE:54:9D:C0:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a900db9d-6c9c-3739-b1a1-9441dc45040e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:df:3d:21:7a:99:b1:e0:1b:cc:0a:77:ea:69:35:8d:ca:0f: dd:46:2d:62:96:da:e5:50:64:02:a9:79:43:fa:37:fd:90:41: 5d:bc:90:19:0c:6f:fe:c8:2c:78:48:ac:de:46:a0:df:0c:92: 72:1d:7e:2d:28:7e:05:56:94:3d:8a:aa:ab:d6:3d:0d:d2:a4: 86:b1:7a:42:54:24:6a:29:b5:51:eb:0c:b5:6f:47:28:40:40: d6:de:88:30:03:76:ee:96:b8:a6:a6:be:09:9a:e7:5c:8d:49: f5:d7:1c:89:4a:d3:41:49:92:e7:91:f9:8f:a9:3d:79:19:aa: 1b:e1:2a:a9:91:8c:ea:fe:53:20:a8:80:48:26:f9:b4:5b:78: ff:75:71:fb:5b:a1:12:6b:ab:cb:3e:e3:8c:e9:44:81:f8:6d: c6:b2:23:7b:ff:ba:91:71:a3:b8:7e:03:7a:9f:fa:94:cd:91: e2:f8:f6:b9:db:25:c6:0b:c5:fe:9f:9c:b7:68:74:28:52:41: fc:43:aa:d2:f7:e4:e7:72:c6:8b:53:72:0b:84:36:22:0b:b8: f6:6e:55:3d:a7:99:15:fb:00:7f:d6:54:ef:a3:2b:13:82:1b: ed:79:79:2f:bd:44:40:35:d3:38:7a:2d:7b:94:4f:05:43:bc: 53:7d:14:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CZ6m/qdQJUkfj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk NzU2NGYwYTctNzAyNy00YmI0LTg1NjktNWNhNDdjZmU1M2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ayUtLDOD7wSZPZVzltm2f/YH8FZ+Lbv0GY6 n+iGPNb6jDuGUhGWW7w6WmmqT7CQpnAh272g80FzgmhUAF7QM1YPHQoJoKjc3YEa ohI39NYXeogUCwyhcEl4Gi43Ly6mXLCGO3b8hthDNoJDE8SnaJrBFsEH0AL5zORt aQiog7cO13OzVgPHvpOoJFgwmY/ADGmvOn3H4IIAzSsemf2zDa5qJngCG2VtMjlO shJmNsRszog46WtTOYfc5B/9W/C4K+IfUPBgT2HgGKXPeOgkS6zjts0cby+CJDGr PqyrehBkBT/+8VwkSvjeCLj54OA9sIGZ9Qy9nPikdFM8hkefkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+yuEKxc4DEi/eq5H0S7v5UncB4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTkwMGRiOWQtNmM5Yy0z NzM5LWIxYTEtOTQ0MWRjNDUwNDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjfPSF6mbHgG8wKd+ppNY3KD91GLWKW2uVQZAKpeUP6N/2QQV28kBkM b/7ILHhIrN5GoN8MknIdfi0ofgVWlD2KqqvWPQ3SpIaxekJUJGoptVHrDLVvRyhA QNbeiDADdu6WuKamvgma51yNSfXXHIlK00FJkueR+Y+pPXkZqhvhKqmRjOr+UyCo gEgm+bRbeP91cftboRJrq8s+44zpRIH4bcayI3v/upFxo7h+A3qf+pTNkeL49rnb JcYLxf6fnLdodChSQfxDqtL35OdyxotTcguENiILuPZuVT2nmRX7AH/WVO+jKxOC G+15eS+9REA10zh6LXuUTwVDvFN9FAc= -----END CERTIFICATE-----Generated at Sun Apr 27 01:38:03 2025 by rpki-client