$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa File: aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa (raw, json) Hash identifier: ARLVDG6DSqrHeRgNBNK5MpuO0IOLnMEcFG8er0vU82Q= Subject key identifier: B0:97:33:D4:BC:75:02:DC:BB:16:06:94:2C:60:9A:23:2C:9A:4F:71 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716A197D8F2D1FCC23B000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.22.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6a:19:7d:8f:2d:1f:cc:23:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=483458db-dad4-447f-93a6-4ea5eff6e41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:a7:7b:d8:aa:ba:3a:89:39:d6:e9:f4:d9: 1a:8e:6d:b9:03:0f:b2:88:e0:6f:de:9f:f9:3a:9f: 07:2c:2a:aa:a6:11:a1:16:9c:82:7f:11:cd:4c:9e: 20:26:d5:ea:94:cc:af:3d:2b:2c:4a:67:67:bd:ef: bd:68:6c:45:85:84:36:3d:cb:fb:2c:e1:93:19:95: dd:1f:ba:c9:73:f1:8d:86:77:65:1f:78:38:94:09: 2d:41:b4:6a:52:17:f9:39:bf:e4:04:b4:26:3f:d3: 9a:51:d0:db:31:45:ce:96:9a:0e:af:15:af:a4:c9: b5:d8:3f:04:67:02:c4:38:6a:ff:d1:12:24:a6:16: d4:d8:77:39:fd:e6:02:05:53:14:78:fa:53:61:13: 5d:ef:0f:8e:ed:c1:2d:53:8f:76:b1:fc:64:b5:cd: d8:10:7c:8f:ea:7a:8d:a4:30:39:1f:6a:d5:00:aa: e4:d2:e3:7f:00:09:25:d6:1c:c7:68:56:ae:bc:20: be:c6:57:5e:ff:3c:f1:7a:61:97:d4:97:dd:ba:13: df:ba:f3:22:32:70:44:7f:0d:f9:ed:a8:f5:49:e4: 17:94:a2:ca:18:c1:1b:dd:cf:39:df:4a:7a:1d:86: 8f:16:da:31:a2:09:58:af:30:46:c8:dc:64:d9:e9: a2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:97:33:D4:BC:75:02:DC:BB:16:06:94:2C:60:9A:23:2C:9A:4F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa3ef101-67d0-3d54-90ae-2f94cf6ac4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1b:ae:40:14:33:47:24:50:5d:2f:66:9b:0f:2b:0f:87:fb: 9d:d4:cc:39:ff:85:e0:d2:ea:de:24:b9:a6:17:8e:af:24:cc: 04:ae:fb:81:9b:50:33:ba:3d:1c:43:ba:0d:e6:8b:09:1e:f1: 4f:31:57:53:56:aa:60:8b:21:3c:ab:e1:81:ba:8a:dd:f3:f0: 0c:27:03:16:72:93:78:3c:66:c8:40:47:d2:18:38:6e:03:c4: d2:2a:c6:d0:7f:ed:e6:2d:1c:d9:e8:b0:93:cc:26:cf:2a:c2: 72:e9:9f:d0:6e:05:51:9b:c1:a7:be:d9:a2:15:30:ef:20:7c: 08:a4:0c:be:e9:c0:c3:42:39:ad:d2:d4:82:94:48:62:2f:1e: 37:e1:3e:64:21:08:13:46:1e:3b:16:8d:9a:cc:2e:12:e3:2b: 10:3b:cd:e1:d5:cc:29:a5:25:c7:89:45:dc:d3:34:10:e3:49: ce:3f:49:fc:6e:6e:f6:87:37:b7:7e:8b:71:a1:26:c9:2a:57: 61:21:0b:28:63:81:2b:26:5a:fb:65:48:fc:ab:b6:ad:cb:c8: d5:9a:08:02:ce:8e:cf:cf:76:be:36:9c:e5:5a:0c:fa:9d:2f: f4:3d:53:52:9b:df:2f:52:be:99:91:54:bb:00:4d:0a:8e:c1: 43:af:46:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWoZfY8tH8wjsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NDgzNDU4ZGItZGFkNC00NDdmLTkzYTYtNGVhNWVmZjZlNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHene9iqujqJOdbp9Nkajm25Aw+yiOBv3p/5 Op8HLCqqphGhFpyCfxHNTJ4gJtXqlMyvPSssSmdnve+9aGxFhYQ2Pcv7LOGTGZXd H7rJc/GNhndlH3g4lAktQbRqUhf5Ob/kBLQmP9OaUdDbMUXOlpoOrxWvpMm12D8E ZwLEOGr/0RIkphbU2Hc5/eYCBVMUePpTYRNd7w+O7cEtU492sfxktc3YEHyP6nqN pDA5H2rVAKrk0uN/AAkl1hzHaFauvCC+xlde/zzxemGX1JfduhPfuvMiMnBEfw35 7aj1SeQXlKLKGMEb3c8530p6HYaPFtoxoglYrzBGyNxk2emiRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCXM9S8dQLcuxYGlCxgmiMsmk9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWEzZWYxMDEtNjdkMC0z ZDU0LTkwYWUtMmY5NGNmNmFjNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhagMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwbrkAUM0ckUF0vZpsPKw+H+53UzDn/heDS6t4kuaYXjq8kzASu+4Gb UDO6PRxDug3miwke8U8xV1NWqmCLITyr4YG6it3z8AwnAxZyk3g8ZshAR9IYOG4D xNIqxtB/7eYtHNnosJPMJs8qwnLpn9BuBVGbwae+2aIVMO8gfAikDL7pwMNCOa3S 1IKUSGIvHjfhPmQhCBNGHjsWjZrMLhLjKxA7zeHVzCmlJceJRdzTNBDjSc4/Sfxu bvaHN7d+i3GhJskqV2EhCyhjgSsmWvtlSPyrtq3LyNWaCALOjs/Pdr42nOVaDPqd L/Q9U1Kb3y9SvpmRVLsATQqOwUOvRi0= -----END CERTIFICATE-----Generated at Sun Apr 27 13:02:48 2025 by rpki-client