$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa File: 2df1ec2d-c15c-37ee-9be8-f210775488b5.roa (raw, json) Hash identifier: cvGUEoqyIpLyrFXJ1aPdfb7qrMr+0uLUamfNaLk2eZc= Subject key identifier: 14:41:80:9C:68:B5:FF:AC:2B:9E:A2:F7:7F:90:44:F8:EF:C1:FB:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA82029B29826EAA73890 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.17.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a8:20:29:b2:98:26:ea:a7:38:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=d0344c6f-a85e-4182-beff-f85180a30acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:38:2d:73:c5:2c:ab:cf:2c:c1:25:74:39:ab: 41:cf:cd:fe:b3:2a:13:da:2e:8f:7a:ce:32:12:ce: 5a:3a:fc:9f:af:d4:04:9c:b6:13:df:16:86:fe:bd: 58:f5:58:b5:10:b3:c1:a0:1b:af:b9:d1:7b:cf:24: bd:52:e1:5f:aa:b3:49:43:e2:3a:50:72:58:9b:5e: c7:3e:b4:c0:8e:5e:b5:b8:ea:f1:1a:19:28:54:44: 22:93:24:9e:34:33:2b:5b:e0:e7:b7:e1:d4:26:f3: 32:c3:8b:d7:1a:21:53:8d:2f:62:cb:6d:15:be:a2: 2f:ea:e6:6f:87:14:98:24:cd:40:28:91:c5:3c:0b: 8e:f6:d7:7c:01:bc:cf:90:ce:79:40:06:77:74:04: 0f:7a:8c:86:cd:f1:a1:62:55:19:ef:79:15:d2:fa: 80:30:53:67:7b:7e:3c:85:ca:70:68:49:47:ee:2b: 7b:66:89:da:b8:a4:e0:53:0f:80:b8:e9:8e:ae:3c: e8:9f:68:b0:ff:cf:1a:25:17:de:af:af:a4:26:85: d9:7b:a9:e4:f5:67:ea:84:cd:b2:ba:06:98:92:84: 3a:3e:df:5a:eb:0f:cc:0f:bf:ee:5e:01:e8:29:d3: 62:86:84:5b:d8:01:82:20:5b:ab:1e:4f:f9:c5:ce: 98:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:41:80:9C:68:B5:FF:AC:2B:9E:A2:F7:7F:90:44:F8:EF:C1:FB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2df1ec2d-c15c-37ee-9be8-f210775488b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:f8:fb:08:42:e3:07:50:aa:44:fd:3b:99:84:62:a4:ae:1e: 07:b8:bf:30:8f:69:19:a2:39:63:dc:7b:47:9b:1e:65:18:2f: e3:ff:3a:61:5a:35:1c:0f:0f:80:61:2c:a0:44:4b:e2:59:e0: 82:3b:28:29:9a:24:65:21:d0:57:18:60:13:e1:d3:89:8a:21: df:e9:ad:34:14:b2:d3:7d:95:1a:c2:55:11:87:68:a8:70:46: cc:9f:3e:d3:ac:29:a9:ee:c1:5d:aa:ba:26:ed:55:42:1e:26: 47:bf:89:00:aa:39:8d:c2:6f:df:4b:e7:2e:0e:b1:71:76:f0: b6:0a:6f:08:37:d7:df:72:7a:29:fd:47:b3:7f:22:e1:7d:1a: a9:6c:b3:a9:6c:08:1c:1f:63:d6:4d:b4:2b:6b:b0:07:84:17: 75:b8:50:d0:17:b0:43:d5:5e:96:d1:a7:72:86:0f:02:6b:e2: 76:d4:ff:cf:aa:c0:12:c7:98:8d:3d:75:7c:4a:98:02:48:5e: af:5e:98:fe:fb:ba:fa:f9:ff:1e:cf:78:51:85:69:96:c8:6c: c8:04:e6:81:de:87:5e:ba:b3:aa:77:00:8e:3d:d9:6f:39:86: d5:3c:c6:fd:90:f0:3e:47:2c:ce:21:29:67:c9:4f:c6:3c:b0: 17:38:bb:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6ggKbKYJuqnOJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ZDAzNDRjNmYtYTg1ZS00MTgyLWJlZmYtZjg1MTgwYTMwYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTgtc8Usq88swSV0OatBz83+syoT2i6Pes4y Es5aOvyfr9QEnLYT3xaG/r1Y9Vi1ELPBoBuvudF7zyS9UuFfqrNJQ+I6UHJYm17H PrTAjl61uOrxGhkoVEQikySeNDMrW+Dnt+HUJvMyw4vXGiFTjS9iy20VvqIv6uZv hxSYJM1AKJHFPAuO9td8AbzPkM55QAZ3dAQPeoyGzfGhYlUZ73kV0vqAMFNne348 hcpwaElH7it7ZonauKTgUw+AuOmOrjzon2iw/88aJRfer6+kJoXZe6nk9WfqhM2y ugaYkoQ6Pt9a6w/MD7/uXgHoKdNihoRb2AGCIFurHk/5xc6YNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRBgJxotf+sK56i93+QRPjvwftCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRmMWVjMmQtYzE1Yy0z N2VlLTliZTgtZjIxMDc3NTQ4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhFxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIv4+whC4wdQqkT9O5mEYqSuHge4vzCPaRmiOWPce0ebHmUYL+P/OmFa NRwPD4BhLKBES+JZ4II7KCmaJGUh0FcYYBPh04mKId/prTQUstN9lRrCVRGHaKhw RsyfPtOsKanuwV2quibtVUIeJke/iQCqOY3Cb99L5y4OsXF28LYKbwg3199yein9 R7N/IuF9Gqlss6lsCBwfY9ZNtCtrsAeEF3W4UNAXsEPVXpbRp3KGDwJr4nbU/8+q wBLHmI09dXxKmAJIXq9emP77uvr5/x7PeFGFaZbIbMgE5oHeh166s6p3AI492W85 htU8xv2Q8D5HLM4hKWfJT8Y8sBc4u+c= -----END CERTIFICATE-----Generated at Thu May 8 14:06:32 2025 by rpki-client