$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa File: 05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa (raw, json) Hash identifier: F8WoGZ5cVsSp8ND5BAtiGtfeqDGDF5ElmYzmiGmurS4= Subject key identifier: 61:74:05:9D:8F:BB:16:D4:2E:C8:64:07:0A:B5:63:3D:9C:9B:FA:61 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3E9949731F31B2BE43F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.20.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3e:99:49:73:1f:31:b2:be:43:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=247c3cc3-a5c8-4ae7-aa40-d5d02368c9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:b8:da:8c:14:d4:50:37:58:97:7e:c0:c8: f5:04:c2:a2:e2:78:49:2e:c2:23:ac:5c:cf:3f:b4: dd:a8:7f:dc:23:37:28:ae:cf:9f:a4:2e:09:9d:ac: 4c:15:58:85:bf:f1:59:e4:12:b5:5c:92:5f:77:a1: 24:bc:d8:4b:f4:cc:b5:b0:9f:fc:25:11:01:8e:fa: 87:0a:8d:ac:ba:d3:df:22:0c:0f:05:16:05:69:c5: e8:52:a1:76:53:ca:d3:87:8e:4f:b7:ae:70:23:d9: 26:1d:2c:3e:ec:89:0c:33:6f:67:c4:ce:b2:67:22: ea:7f:28:b9:7b:39:f6:ce:07:71:0b:da:ce:07:c2: 0e:89:7e:c8:e3:a8:38:8b:5c:2e:78:b2:93:f3:d2: d2:25:7b:b0:48:de:80:aa:e5:27:65:92:34:9e:c7: d5:3d:7d:b0:bb:40:3d:99:3f:17:f4:14:fd:27:44: 84:d0:cd:d7:c7:30:a1:92:77:6c:8f:ab:3a:fe:1e: ac:7e:85:0a:02:54:c6:84:f1:f1:8a:79:b2:7d:d4: 9b:b4:39:03:3c:38:57:10:19:d9:4d:77:43:cc:0c: ae:01:f0:cb:97:27:64:7f:0a:b1:85:07:a2:59:17: b5:c7:b2:1b:44:15:1e:3b:af:86:1a:c5:fb:a1:ae: 83:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:74:05:9D:8F:BB:16:D4:2E:C8:64:07:0A:B5:63:3D:9C:9B:FA:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05779e38-e15b-3f56-bb88-b4f824dfbfb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:2b:02:e7:63:c3:b5:38:ab:01:fd:ff:a0:58:5b:15:3c:ea: e9:50:d8:14:b6:4e:ff:f4:1a:c4:f2:08:a1:17:22:7f:f8:7e: 1f:89:6a:6b:47:7e:cd:6d:0f:42:27:59:37:d6:c2:ea:61:e2: c4:70:e1:44:93:d2:a3:1e:33:03:07:e0:09:91:5d:99:8c:92: 00:1c:c9:70:34:c0:c9:cd:ee:1f:59:96:fe:19:70:03:8b:ab: 74:9c:f3:6d:17:d8:a3:ab:bc:32:20:40:36:33:01:8c:8c:d2: 32:f4:24:b8:13:4d:1f:b9:2e:01:9e:43:aa:c4:3c:c3:40:dd: 3d:44:c6:aa:1b:72:6f:07:a8:81:a9:df:52:6e:11:63:b6:d2: fb:58:f9:32:98:53:9a:c8:24:95:38:3d:ca:78:78:41:f7:5e: 9e:5f:b2:29:ae:00:c8:f4:9d:6b:f1:75:54:4d:c6:4d:98:77: 48:3a:6f:7c:79:4d:c2:bc:24:34:5a:48:b9:83:d7:19:b3:59: 24:ac:15:18:f3:3d:c9:5f:97:ce:88:a0:01:8d:4e:27:28:4d: 35:2b:bf:45:26:20:5a:69:a7:47:10:68:eb:99:93:28:f7:b0: 55:b1:c1:35:3a:8c:a8:11:37:8f:b8:d8:6b:f5:b5:21:b7:b0: 63:e7:e6:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj6ZSXMfMbK+Q/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjQ3YzNjYzMtYTVjOC00YWU3LWFhNDAtZDVkMDIzNjhjOWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9u42owU1FA3WJd+wMj1BMKi4nhJLsIjrFzP P7TdqH/cIzcors+fpC4JnaxMFViFv/FZ5BK1XJJfd6EkvNhL9My1sJ/8JREBjvqH Co2sutPfIgwPBRYFacXoUqF2U8rTh45Pt65wI9kmHSw+7IkMM29nxM6yZyLqfyi5 ezn2zgdxC9rOB8IOiX7I46g4i1wueLKT89LSJXuwSN6AquUnZZI0nsfVPX2wu0A9 mT8X9BT9J0SE0M3XxzChkndsj6s6/h6sfoUKAlTGhPHxinmyfdSbtDkDPDhXEBnZ TXdDzAyuAfDLlydkfwqxhQeiWRe1x7IbRBUeO6+GGsX7oa6DVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGF0BZ2PuxbULshkBwq1Yz2cm/phMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDU3NzllMzgtZTE1Yi0z ZjU2LWJiODgtYjRmODI0ZGZiZmIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIrAudjw7U4qwH9/6BYWxU86ulQ2BS2Tv/0GsTyCKEXIn/4fh+JamtH fs1tD0InWTfWwuph4sRw4UST0qMeMwMH4AmRXZmMkgAcyXA0wMnN7h9Zlv4ZcAOL q3Sc820X2KOrvDIgQDYzAYyM0jL0JLgTTR+5LgGeQ6rEPMNA3T1Exqobcm8HqIGp 31JuEWO20vtY+TKYU5rIJJU4Pcp4eEH3Xp5fsimuAMj0nWvxdVRNxk2Yd0g6b3x5 TcK8JDRaSLmD1xmzWSSsFRjzPclfl86IoAGNTicoTTUrv0UmIFppp0cQaOuZkyj3 sFWxwTU6jKgRN4+42Gv1tSG3sGPn5i4= -----END CERTIFICATE-----Generated at Sat May 10 16:41:19 2025 by rpki-client