$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df7d30b1-9a63-3f41-9f92-833f1d702097.roa File: df7d30b1-9a63-3f41-9f92-833f1d702097.roa (raw, json) Hash identifier: /OQ5T5XpQ837Boce+9QpRgX0B1sXVBJUsK1eYUGdLMk= Subject key identifier: EA:6C:64:A3:DE:0B:19:2D:B1:AE:B6:04:44:C4:5B:04:D6:2E:57:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA2614666BCF97765A6980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df7d30b1-9a63-3f41-9f92-833f1d702097.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.17.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:26:14:66:6b:cf:97:76:5a:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=fd97af3b-1bec-4a3d-b2d7-2dc49339b2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:70:f4:73:88:0f:d3:80:3c:8b:24:f0:77: 2e:c6:8d:8c:4a:03:e8:50:49:14:0f:b3:53:c4:cf: 79:a1:75:ec:13:5f:b9:f0:9a:19:2a:bc:38:9b:5a: 68:34:08:b6:98:ef:29:6c:37:65:2e:5b:57:35:d8: 11:74:0a:8b:39:fe:24:26:b2:34:81:6a:bf:4d:6e: 68:0a:13:54:53:20:7d:bc:d6:59:d5:81:a8:30:35: 90:b8:d1:8d:e2:a2:15:a5:82:5c:af:5d:a6:fa:e2: 07:7d:7a:99:c3:37:42:17:8c:04:a9:4a:f2:52:d1: 5f:ba:5d:f5:12:f6:c1:5c:50:79:0a:a8:69:c0:32: 76:87:40:7b:3f:c4:37:a1:df:95:91:fa:68:b6:ef: 3d:e1:bc:f3:c3:8a:a4:29:7e:d6:2d:2e:e5:d0:de: 6d:74:81:74:42:f0:a3:0b:8c:bb:dc:4c:54:7a:d6: 23:bf:89:78:98:9a:96:d2:0b:16:fc:ea:5f:7e:7e: 00:fe:88:6e:2b:24:0a:f4:72:83:01:b5:ba:a2:67: 78:aa:e3:97:9a:5c:80:f5:31:da:fa:57:15:5e:1c: b2:80:da:3d:a2:74:13:26:7d:25:72:4c:7b:f2:86: 3c:32:78:42:99:88:1f:d6:7b:07:23:76:7a:34:55: b6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6C:64:A3:DE:0B:19:2D:B1:AE:B6:04:44:C4:5B:04:D6:2E:57:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df7d30b1-9a63-3f41-9f92-833f1d702097.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:a6:7a:04:d0:fe:ba:e5:26:7c:53:ca:20:bf:b6:e8:b5:2d: f9:77:44:d3:de:99:65:5b:51:84:0f:00:31:f1:54:3a:a7:91: cd:bf:46:a8:1e:26:bb:e8:fd:87:87:ec:64:54:6e:65:b0:29: 1d:1b:59:9b:ff:17:66:c8:b8:5d:be:ce:7d:f4:8f:01:69:31: 7b:d2:46:7d:66:76:e7:63:0e:fc:ac:c6:52:d7:17:2e:91:31: 9c:71:1a:a0:cb:91:8a:2d:58:75:ee:aa:ad:a3:a5:06:22:6a: 20:1c:43:0e:5c:e4:cd:c6:2c:4b:fb:aa:a9:71:24:8e:08:ea: 00:16:fa:9b:30:02:d5:90:16:9c:7c:94:1d:72:e9:2d:d2:cf: 1d:b7:26:67:3b:9c:1a:dc:65:71:90:2d:3d:b3:ed:ed:1d:7c: b3:bd:8c:0e:b9:6a:5f:e5:a0:af:5e:78:c0:fe:80:d5:fd:42: 8f:4e:42:12:82:66:4c:ca:9f:37:22:25:26:07:5b:01:82:0a: c3:bf:8c:e7:ec:88:c8:0f:02:15:aa:b1:05:a0:8a:47:c8:27: 02:00:df:40:64:c1:7a:ad:b4:5f:04:c0:11:24:04:76:20:10: 87:a5:a1:27:43:0e:f4:fe:de:54:05:0c:39:da:b7:be:db:c2: 1a:fe:b4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiYUZmvPl3ZaaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZmQ5N2FmM2ItMWJlYy00YTNkLWIyZDctMmRjNDkzMzliMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8Fw9HOID9OAPIsk8Hcuxo2MSgPoUEkUD7NT xM95oXXsE1+58JoZKrw4m1poNAi2mO8pbDdlLltXNdgRdAqLOf4kJrI0gWq/TW5o ChNUUyB9vNZZ1YGoMDWQuNGN4qIVpYJcr12m+uIHfXqZwzdCF4wEqUryUtFful31 EvbBXFB5CqhpwDJ2h0B7P8Q3od+Vkfpotu894bzzw4qkKX7WLS7l0N5tdIF0QvCj C4y73ExUetYjv4l4mJqW0gsW/Opffn4A/ohuKyQK9HKDAbW6omd4quOXmlyA9THa +lcVXhyygNo9onQTJn0lckx78oY8MnhCmYgf1nsHI3Z6NFW2IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpsZKPeCxktsa62BETEWwTWLldFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGY3ZDMwYjEtOWE2My0z ZjQxLTlmOTItODMzZjFkNzAyMDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+megTQ/rrlJnxTyiC/tui1Lfl3RNPemWVbUYQPADHxVDqnkc2/Rqge Jrvo/YeH7GRUbmWwKR0bWZv/F2bIuF2+zn30jwFpMXvSRn1mdudjDvysxlLXFy6R MZxxGqDLkYotWHXuqq2jpQYiaiAcQw5c5M3GLEv7qqlxJI4I6gAW+pswAtWQFpx8 lB1y6S3Szx23Jmc7nBrcZXGQLT2z7e0dfLO9jA65al/loK9eeMD+gNX9Qo9OQhKC ZkzKnzciJSYHWwGCCsO/jOfsiMgPAhWqsQWgikfIJwIA30BkwXqttF8EwBEkBHYg EIeloSdDDvT+3lQFDDnat77bwhr+tFA= -----END CERTIFICATE-----Generated at Mon Jun 16 20:12:09 2025 by rpki-client