$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3260289-e950-3329-8ccf-d74a8d989b43.roa File: b3260289-e950-3329-8ccf-d74a8d989b43.roa (raw, json) Hash identifier: Hv22s7Zs6N0zlVcTEV6Sm08dYKhnLD/it6RiDoPDfDI= Subject key identifier: C0:DE:A9:08:D1:B2:70:DF:36:40:BA:1C:18:A4:D7:F4:40:BF:3A:BC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B7E4FEAEF8840F91D0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3260289-e950-3329-8ccf-d74a8d989b43.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.23.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b7:e4:fe:ae:f8:84:0f:91:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=7ce3510e-9858-4026-bfe9-304b851121b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:1b:03:55:c2:d7:81:b3:94:ed:cd:cd:91:e8: 68:39:e9:d4:ee:cd:e2:88:49:48:d1:ff:8f:4c:b8: a6:ca:25:60:f7:4d:c8:8f:12:e9:e5:b7:93:9a:fb: 30:f7:b4:ca:3d:69:61:3f:1f:25:9f:e9:d9:5b:d2: ea:bc:d7:ed:2b:9e:b4:47:b2:cd:eb:ac:e3:16:6b: b1:cc:ef:e1:d3:1e:39:e0:bc:0e:ea:da:7c:f4:e7: 82:16:4f:8b:d2:9a:c4:3f:03:8b:eb:cf:5e:8b:d0: 0d:47:35:76:f2:14:ab:8c:43:fc:03:ed:e7:be:64: 93:31:49:5f:0f:49:57:d6:1b:3f:49:aa:b2:ca:19: 0a:69:88:57:87:73:c0:84:d2:ce:d7:e3:bf:98:2b: 3b:18:dc:48:30:89:3e:e7:38:2a:51:e7:c5:ce:39: 9a:91:4d:c4:90:37:77:4e:c6:1d:30:89:08:5c:e6: 35:3e:9b:76:cc:0d:cf:e4:c0:ff:69:1d:a9:47:ff: 7e:81:96:63:5f:02:5c:b6:e1:6a:93:ed:70:4c:c8: 6b:e9:1c:32:d7:4c:18:e4:90:18:2b:af:02:5c:5d: c5:88:54:6d:18:9a:c8:4d:c0:98:c7:b0:3f:d7:88: 5f:81:f4:38:0d:4b:2f:95:57:37:05:ab:d7:94:81: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DE:A9:08:D1:B2:70:DF:36:40:BA:1C:18:A4:D7:F4:40:BF:3A:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b3260289-e950-3329-8ccf-d74a8d989b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:52:73:e1:f8:57:ff:02:2e:0c:10:f1:f8:d3:81:7c:fa:fe: f0:28:fa:29:b4:98:40:de:43:4f:a2:e6:38:b0:b6:26:f1:84: 5d:3c:94:72:b2:1d:b0:25:f2:41:0c:3d:f1:06:16:59:ad:ca: de:c7:c6:95:58:49:fa:0c:b8:58:d1:4b:d7:3f:1b:c8:61:f4: 95:c4:8b:70:f8:43:20:14:00:10:85:35:5c:6f:80:82:67:1b: 04:0e:2f:4d:fc:3e:76:fe:47:cc:89:d5:87:95:a3:3d:0b:da: 27:c7:fe:e4:58:dc:92:9e:e8:02:2b:2b:49:6f:1e:83:3e:58: 91:fc:a6:ff:05:16:4e:b6:f3:96:2e:18:a5:29:00:b0:2e:28: c9:4a:6b:c4:6f:5f:2a:48:56:f2:88:1c:4a:1f:1a:2d:3b:76: 9f:f9:38:78:8a:fa:6f:56:e8:ce:12:5e:0a:3a:35:7c:1b:53: dc:3e:a9:92:d6:e8:3e:1d:08:8f:5c:3d:d6:17:b8:26:bd:c1: fb:d9:44:2f:33:00:40:09:d5:12:04:ad:50:03:a8:5e:47:ed: 1c:4b:36:9e:71:44:a2:44:c6:10:d1:10:71:8e:ff:a3:4e:3c: 00:34:20:b0:81:00:b5:5e:30:48:ac:2a:0c:1f:fc:36:e0:b9: c7:f4:85:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbfk/q74hA+R0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk N2NlMzUxMGUtOTg1OC00MDI2LWJmZTktMzA0Yjg1MTEyMWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghsDVcLXgbOU7c3NkehoOenU7s3iiElI0f+P TLimyiVg903IjxLp5beTmvsw97TKPWlhPx8ln+nZW9LqvNftK560R7LN66zjFmux zO/h0x454LwO6tp89OeCFk+L0prEPwOL689ei9ANRzV28hSrjEP8A+3nvmSTMUlf D0lX1hs/SaqyyhkKaYhXh3PAhNLO1+O/mCs7GNxIMIk+5zgqUefFzjmakU3EkDd3 TsYdMIkIXOY1Ppt2zA3P5MD/aR2pR/9+gZZjXwJctuFqk+1wTMhr6Rwy10wY5JAY K68CXF3FiFRtGJrITcCYx7A/14hfgfQ4DUsvlVc3BavXlIHLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDeqQjRsnDfNkC6HBik1/RAvzq8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjMyNjAyODktZTk1MC0z MzI5LThjY2YtZDc0YThkOTg5YjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhdEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZSc+H4V/8CLgwQ8fjTgXz6/vAo+im0mEDeQ0+i5jiwtibxhF08lHKy HbAl8kEMPfEGFlmtyt7HxpVYSfoMuFjRS9c/G8hh9JXEi3D4QyAUABCFNVxvgIJn GwQOL038Pnb+R8yJ1YeVoz0L2ifH/uRY3JKe6AIrK0lvHoM+WJH8pv8FFk6285Yu GKUpALAuKMlKa8RvXypIVvKIHEofGi07dp/5OHiK+m9W6M4SXgo6NXwbU9w+qZLW 6D4dCI9cPdYXuCa9wfvZRC8zAEAJ1RIErVADqF5H7RxLNp5xRKJExhDREHGO/6NO PAA0ILCBALVeMEisKgwf/Dbgucf0hSY= -----END CERTIFICATE-----Generated at Sun Apr 27 03:34:43 2025 by rpki-client