$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa File: 2a428851-c296-3ffd-83aa-596e36f896f0.roa (raw, json) Hash identifier: dKgTDYmxgbKD7lhbXs/3pEuQBVMF81DGQPB5rZDUfVM= Subject key identifier: 88:D3:B8:81:D5:77:C2:B6:96:79:BF:5F:81:92:14:D4:19:79:B9:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A148BBE2EAEFBAB973400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.16.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:8b:be:2e:ae:fb:ab:97:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ffb24358-80dc-4bbe-bba3-1cc5b268edaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:cd:7c:bb:ff:cb:26:62:65:43:7f:f1:c5:96: b3:8a:c8:f4:2a:81:1e:68:10:5e:62:17:05:19:be: 9d:e5:89:a6:f0:23:bb:42:b6:2a:02:1a:96:b0:ef: 32:ca:87:f7:2d:63:cb:50:8a:b4:6e:45:34:95:dd: 51:b8:f4:f6:b5:d3:03:0f:8c:e9:72:dc:a1:43:85: 20:13:4b:5b:7e:f7:2d:64:02:16:0c:9c:b7:2d:9a: a8:ed:91:d9:ac:a6:2c:79:ec:82:48:12:34:5c:da: 07:32:df:5a:19:14:13:29:13:78:c6:3e:20:12:48: a0:67:0d:88:4e:34:a2:2f:3a:12:84:e1:bf:e1:a0: 7d:7f:95:99:e3:39:1c:94:7e:c3:03:fe:be:eb:30: ba:f2:20:54:df:fa:29:fd:b8:26:00:d2:69:99:95: 87:cd:75:34:bf:25:cc:c0:6b:21:00:ed:8f:24:00: 5e:22:61:0d:30:a7:f6:b7:3f:b0:e2:14:cf:3d:ea: b1:11:fd:f9:03:7a:5b:bd:e0:4a:de:11:b4:55:8e: d0:83:78:3a:7d:26:b4:81:20:9e:b9:dc:06:c1:c5: 68:5f:cd:ae:65:3a:f0:47:ff:fb:87:f8:b8:0d:9f: f6:44:91:2d:70:64:d1:c2:e7:1a:83:8e:12:ab:0e: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D3:B8:81:D5:77:C2:B6:96:79:BF:5F:81:92:14:D4:19:79:B9:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:e0:0f:95:5d:bc:85:87:1a:be:7a:ec:c8:a6:71:b3:27:0c: 13:ce:a1:7b:8e:ff:22:96:44:b2:0c:63:56:f3:ba:92:93:a1: 66:2d:59:db:80:cd:cf:fe:5b:51:7e:4a:9f:38:34:32:bd:12: 02:1c:31:ab:92:be:86:5d:d0:9a:6e:af:64:db:79:28:e3:b2: 3a:f4:de:a7:78:3f:b8:55:7e:13:db:c0:df:99:ad:48:c9:3e: ca:d5:0e:6f:b0:dc:33:6f:a2:8f:99:bf:e6:14:9f:98:45:a0: e1:a6:71:6a:68:a6:10:a8:ba:f8:81:b6:d8:bc:2b:6e:73:f6: f8:57:bf:97:cd:06:c1:99:fa:cb:bd:e7:09:e7:22:c3:f9:75: 04:6f:c3:3b:6f:22:a5:85:3f:19:9a:ae:9e:88:f0:75:78:04: 43:9a:8f:6c:47:a0:bf:4b:b2:d3:9b:ef:1b:aa:1d:53:83:72: ba:bd:25:b3:2c:53:92:ec:3f:86:ee:c0:1a:3e:e6:3b:14:14: d6:ba:da:07:80:9e:bb:68:ac:ae:62:d3:81:27:56:a0:e0:1d: 81:36:21:82:3d:6b:5f:6d:10:42:ef:31:c1:f5:7f:c2:35:b9: 71:66:20:d2:08:87:ff:86:5c:6e:7b:1a:04:d7:44:a5:97:a7: d4:1a:4d:59 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShSLvi6u+6uXNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmZiMjQzNTgtODBkYy00YmJlLWJiYTMtMWNjNWIyNjhlZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc18u//LJmJlQ3/xxZazisj0KoEeaBBeYhcF Gb6d5Ymm8CO7QrYqAhqWsO8yyof3LWPLUIq0bkU0ld1RuPT2tdMDD4zpctyhQ4Ug E0tbfvctZAIWDJy3LZqo7ZHZrKYseeyCSBI0XNoHMt9aGRQTKRN4xj4gEkigZw2I TjSiLzoShOG/4aB9f5WZ4zkclH7DA/6+6zC68iBU3/op/bgmANJpmZWHzXU0vyXM wGshAO2PJABeImENMKf2tz+w4hTPPeqxEf35A3pbveBK3hG0VY7Qg3g6fSa0gSCe udwGwcVoX82uZTrwR//7h/i4DZ/2RJEtcGTRwucag44Sqw4vowIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIjTuIHVd8K2lnm/X4GSFNQZebmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0Mjg4NTEtYzI5Ni0z ZmZkLTgzYWEtNTk2ZTM2Zjg5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDYhAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKeAPlV28hYcavnrsyKZxsycME86he47/IpZEsgxjVvO6kpOhZi1Z24DN z/5bUX5Knzg0Mr0SAhwxq5K+hl3Qmm6vZNt5KOOyOvTep3g/uFV+E9vA35mtSMk+ ytUOb7DcM2+ij5m/5hSfmEWg4aZxamimEKi6+IG22LwrbnP2+Fe/l80GwZn6y73n Ceciw/l1BG/DO28ipYU/GZqunojwdXgEQ5qPbEegv0uy05vvG6odU4Nyur0lsyxT kuw/hu7AGj7mOxQU1rraB4Ceu2isrmLTgSdWoOAdgTYhgj1rX20QQu8xwfV/wjW5 cWYg0giH/4ZcbnsaBNdEpZen1BpNWQ== -----END CERTIFICATE-----Generated at Sat May 10 21:09:27 2025 by rpki-client