$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa48a363-67be-332c-8e2f-91a514810e30.roa File: fa48a363-67be-332c-8e2f-91a514810e30.roa (raw, json) Hash identifier: ZzadseXGccD2p6k9gacYxTpU6KQwDBcGV2DV26XVn9w= Subject key identifier: 59:15:39:36:50:7F:CE:25:8D:CE:D1:D9:0B:FC:55:48:74:9B:3E:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA2627542BF28F3DCECFA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa48a363-67be-332c-8e2f-91a514810e30.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.17.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:26:27:54:2b:f2:8f:3d:ce:cf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=da2d02a4-4d17-4404-a65f-24b97beb5f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:dc:e7:31:ac:28:0b:c8:db:7b:2c:ba:8a: 8b:da:6d:2f:b4:51:e8:b0:5d:cb:8e:cc:6e:dd:44: 18:a2:e3:14:4b:e4:18:94:78:05:23:27:00:7d:99: 10:f7:5f:6d:7a:09:25:77:55:95:0a:cf:de:ed:11: 6e:9c:04:c9:07:34:11:37:e1:8c:d1:66:45:2f:c9: 15:8f:a6:e9:26:97:61:81:80:9f:8c:e1:6b:84:19: c9:24:f3:52:68:13:b0:3d:e0:bc:1a:01:a2:2d:16: 3e:77:8b:78:57:d4:c0:7d:a0:5a:e9:d2:8e:dc:f1: 63:4f:5a:8d:c5:e8:20:af:bc:6e:c4:b0:fa:c2:d1: 6b:fb:04:90:1e:25:a4:bf:29:94:02:a5:18:a4:31: 37:1e:1e:31:de:28:1a:bc:07:b9:b8:94:86:c9:61: 4f:0a:5a:81:fa:b1:c4:5c:d1:f0:63:e3:ba:ec:a3: b7:63:0b:f7:4c:6f:6e:20:2d:d8:c5:ac:35:01:8b: 5e:46:32:8c:13:e3:07:1f:eb:ff:2b:38:28:7f:23: da:1c:7f:0b:f5:a3:ba:18:75:a4:b2:80:4b:ef:d2: a3:78:2d:5b:69:6a:5e:10:e4:03:a6:27:83:43:c6: 36:db:e4:0f:71:90:2a:57:78:75:0c:ee:96:77:24: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:15:39:36:50:7F:CE:25:8D:CE:D1:D9:0B:FC:55:48:74:9B:3E:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa48a363-67be-332c-8e2f-91a514810e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:1c:14:5a:32:4d:84:69:22:6b:89:e3:32:d5:49:a7:8e:88: 95:86:8b:25:ba:ca:cd:48:51:89:df:a7:e2:cf:ed:b3:a7:9c: 4f:e1:9e:4f:e5:17:38:92:a2:6a:d6:8b:c6:6e:d2:0c:8e:39: 7f:65:1d:f1:ad:55:84:b5:34:bf:38:c7:25:ce:f3:fc:e1:5c: aa:00:77:3d:f0:b3:ea:6e:41:b1:62:7b:b7:48:dd:33:c1:bd: 42:61:75:1f:32:34:13:0f:2b:b6:7a:1f:d8:10:10:64:24:30: dd:de:b4:1d:19:90:c9:79:e8:0d:eb:03:56:b4:89:05:e9:81: 84:37:c0:89:7a:06:66:5b:f6:6e:24:e9:a3:48:43:7e:ef:a6: 87:c3:6e:d7:4f:76:97:1f:9d:60:2d:12:0d:f8:1a:f1:84:af: f6:2a:b6:38:dd:84:df:dc:ff:66:d6:2c:2e:1d:d0:a4:55:0c: 61:48:bc:a6:68:78:12:46:89:7e:42:87:ad:ef:63:ea:57:e4: bb:e9:59:d7:4e:88:4a:3f:9c:74:4d:b0:ee:c3:e5:1d:a5:0a: 14:ad:2f:ed:1c:b2:37:2a:cf:6c:b8:3a:9f:d8:40:0e:17:08: c1:43:b6:25:70:1a:9f:9e:32:c4:95:22:b4:15:dc:d9:83:61: 0b:7f:d4:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiYnVCvyjz3Oz6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZGEyZDAyYTQtNGQxNy00NDA0LWE2NWYtMjRiOTdiZWI1Zjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKrc5zGsKAvI23ssuoqL2m0vtFHosF3Ljsxu 3UQYouMUS+QYlHgFIycAfZkQ919tegkld1WVCs/e7RFunATJBzQRN+GM0WZFL8kV j6bpJpdhgYCfjOFrhBnJJPNSaBOwPeC8GgGiLRY+d4t4V9TAfaBa6dKO3PFjT1qN xeggr7xuxLD6wtFr+wSQHiWkvymUAqUYpDE3Hh4x3igavAe5uJSGyWFPClqB+rHE XNHwY+O67KO3Ywv3TG9uIC3Yxaw1AYteRjKME+MHH+v/KzgofyPaHH8L9aO6GHWk soBL79KjeC1baWpeEOQDpieDQ8Y22+QPcZAqV3h1DO6WdySFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkVOTZQf84ljc7R2Qv8VUh0mz7DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE0OGEzNjMtNjdiZS0z MzJjLThlMmYtOTFhNTE0ODEwZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkcFFoyTYRpImuJ4zLVSaeOiJWGiyW6ys1IUYnfp+LP7bOnnE/hnk/l FziSomrWi8Zu0gyOOX9lHfGtVYS1NL84xyXO8/zhXKoAdz3ws+puQbFie7dI3TPB vUJhdR8yNBMPK7Z6H9gQEGQkMN3etB0ZkMl56A3rA1a0iQXpgYQ3wIl6BmZb9m4k 6aNIQ37vpofDbtdPdpcfnWAtEg34GvGEr/YqtjjdhN/c/2bWLC4d0KRVDGFIvKZo eBJGiX5Ch63vY+pX5LvpWddOiEo/nHRNsO7D5R2lChStL+0csjcqz2y4Op/YQA4X CMFDtiVwGp+eMsSVIrQV3NmDYQt/1Jk= -----END CERTIFICATE-----Generated at Sun Jun 15 22:03:59 2025 by rpki-client