$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa File: 06397e4a-5944-3cf6-9cd6-202ce248026d.roa (raw, json) Hash identifier: xgO8QD6wCeWPdLpWO96+lmGbO1vUVVJxzc05xDeOoZs= Subject key identifier: 7F:BA:2A:43:2C:A7:36:52:21:05:60:58:4B:3A:0E:5A:42:0B:20:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F5D2347D190A5721475C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.20.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:5d:23:47:d1:90:a5:72:14:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=c5973d3d-7e98-4503-989a-12c1530317a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:af:06:a6:5b:71:de:a3:7a:88:50:c7:a6:92: 2c:fc:27:bf:9d:8e:d9:f2:d4:7b:9a:3e:6b:47:1f: 75:ba:26:8f:23:8b:d8:a2:5f:d5:35:c3:67:4b:37: e6:54:c6:21:53:8c:f8:ea:95:a8:c7:db:87:4a:54: 6b:d9:ca:30:56:45:d2:03:1a:ec:c1:9e:3e:fd:2f: f2:6b:60:44:2e:25:32:5e:98:e7:06:3b:31:c6:01: e4:46:0b:b8:7f:4e:71:92:fe:3c:f9:5d:10:5d:a6: 46:e2:5d:42:ba:00:60:a9:a2:1d:80:c3:a6:13:49: 25:c3:6f:a1:06:cc:69:80:d9:70:85:16:59:d0:40: 3f:b3:bf:61:db:e1:70:11:df:f3:41:64:f8:77:62: 58:7b:7b:85:14:47:b1:3c:8b:17:74:5f:9a:9c:de: ea:7d:05:92:36:c6:32:8d:b4:9f:e7:4d:71:ea:b1: 45:f4:4f:d8:45:39:0b:ec:93:08:56:54:1a:d5:9e: fd:0e:5f:b7:54:3e:c5:66:2b:9e:1e:22:c6:9d:a3: cc:62:8a:50:e3:f6:fb:f2:b4:65:14:95:61:68:8b: c5:7c:a2:b2:b5:42:9f:c8:2a:b9:4f:4e:2c:5d:d5: 2b:bd:51:0e:92:37:4b:ad:00:95:bd:3d:48:48:08: 4c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BA:2A:43:2C:A7:36:52:21:05:60:58:4B:3A:0E:5A:42:0B:20:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06397e4a-5944-3cf6-9cd6-202ce248026d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5b:4f:28:97:fd:80:46:6d:24:97:f2:ec:3b:15:5d:6e:6d: 79:26:26:30:97:d3:2d:69:30:b9:95:24:4d:a6:21:c3:ea:2f: e5:9b:6a:48:c2:a1:36:ad:e0:8f:5a:90:3c:bf:34:0d:78:65: 96:6f:18:a1:11:1e:5e:1d:5b:b1:3f:15:07:77:71:56:cf:cf: c4:67:22:c7:50:ed:ca:8e:b8:24:37:0e:47:01:fb:fd:c5:0c: f2:1c:d1:6d:08:87:26:3f:e3:44:1a:28:7e:c8:b2:77:79:45: 90:77:3d:28:ad:77:e9:5f:1d:d9:80:3e:22:85:f4:74:71:ac: bd:94:f4:63:2b:56:28:48:f7:f0:36:04:38:bf:0b:68:d7:5b: 0f:1d:3a:10:f1:ce:84:5c:a8:95:b6:91:52:25:5a:02:bb:c2: af:4f:67:c8:e9:84:eb:11:06:5b:74:2f:51:7f:22:49:b6:a6: 33:6f:c6:16:d3:b3:6b:e6:b0:86:b4:95:1f:57:0a:f4:15:bb: 67:2c:3e:82:f7:ce:44:9d:85:d7:81:f2:55:42:dc:81:62:6f: d4:54:a4:64:1f:8b:dc:cd:6e:93:d2:63:94:da:bd:05:c1:51: 2f:04:d6:59:38:c0:8f:e0:b0:aa:cb:0e:46:f2:0d:ac:c4:94: c8:15:3b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P10jR9GQpXIUdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YzU5NzNkM2QtN2U5OC00NTAzLTk4OWEtMTJjMTUzMDMxN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq8Gpltx3qN6iFDHppIs/Ce/nY7Z8tR7mj5r Rx91uiaPI4vYol/VNcNnSzfmVMYhU4z46pWox9uHSlRr2cowVkXSAxrswZ4+/S/y a2BELiUyXpjnBjsxxgHkRgu4f05xkv48+V0QXaZG4l1CugBgqaIdgMOmE0klw2+h BsxpgNlwhRZZ0EA/s79h2+FwEd/zQWT4d2JYe3uFFEexPIsXdF+anN7qfQWSNsYy jbSf501x6rFF9E/YRTkL7JMIVlQa1Z79Dl+3VD7FZiueHiLGnaPMYopQ4/b78rRl FJVhaIvFfKKytUKfyCq5T04sXdUrvVEOkjdLrQCVvT1ISAhMqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+6KkMspzZSIQVgWEs6DlpCCyDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDYzOTdlNGEtNTk0NC0z Y2Y2LTljZDYtMjAyY2UyNDgwMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhT+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdbTyiX/YBGbSSX8uw7FV1ubXkmJjCX0y1pMLmVJE2mIcPqL+WbakjC oTat4I9akDy/NA14ZZZvGKERHl4dW7E/FQd3cVbPz8RnIsdQ7cqOuCQ3DkcB+/3F DPIc0W0IhyY/40QaKH7Isnd5RZB3PSitd+lfHdmAPiKF9HRxrL2U9GMrVihI9/A2 BDi/C2jXWw8dOhDxzoRcqJW2kVIlWgK7wq9PZ8jphOsRBlt0L1F/Ikm2pjNvxhbT s2vmsIa0lR9XCvQVu2csPoL3zkSdhdeB8lVC3IFib9RUpGQfi9zNbpPSY5TavQXB US8E1lk4wI/gsKrLDkbyDazElMgVO1k= -----END CERTIFICATE-----Generated at Sun May 11 04:17:36 2025 by rpki-client