$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa File: 3195ad33-c3b1-3618-884d-17725318a065.roa (raw, json) Hash identifier: i2oixdmhdwZaYc4Ey89NkjQ5UEVQfgO4OsRG2iubyIg= Subject key identifier: 1F:9E:7C:D3:70:8C:69:1C:B7:AD:D9:40:EB:23:F8:6D:7D:B1:AD:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A19B06F81FBC306813F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.20.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:19:b0:6f:81:fb:c3:06:81:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=8327a59c-5045-445d-9df9-4063c5f5a3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:5d:c3:22:99:56:58:20:f9:96:80:0b:f7: be:08:07:8c:0d:79:a5:e5:34:4a:64:92:1f:7a:04: 07:c8:cf:47:48:34:9d:eb:2d:52:15:41:cb:07:74: 8b:0a:47:32:0c:f4:a3:92:f9:3e:6f:f7:8a:2c:b8: 4e:b2:22:a3:ab:a8:09:a7:7c:b5:d1:40:ba:0f:cb: 5e:13:49:c7:76:1a:51:a2:e3:21:d8:09:dc:7b:28: db:49:98:b4:48:1b:a2:27:82:a5:5e:d7:75:eb:19: 6f:af:72:f9:7a:25:59:0a:f2:df:0d:01:e7:dc:e7: 38:be:2d:65:02:b1:d2:96:a7:95:ce:04:43:86:7d: ca:c3:bf:5d:25:78:37:51:c2:42:36:26:2a:3c:b0: 17:1c:6e:26:ca:d0:01:5d:3b:84:72:2d:cb:4e:34: 10:87:2d:ba:c2:50:1f:54:88:50:5e:2b:03:0e:60: 72:ce:f8:ed:fc:c8:ad:0f:fc:a4:e7:09:7f:8c:e8: 57:b4:cc:94:0d:73:b2:eb:66:db:0e:be:72:b1:41: 55:4d:e3:3c:d2:4d:3f:50:4a:32:cb:c3:d4:cb:3e: 43:62:36:72:cd:b5:75:44:3a:d9:d9:c0:a5:7d:2a: ee:26:dd:f7:b8:58:68:8b:80:76:fe:e4:00:a7:84: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:9E:7C:D3:70:8C:69:1C:B7:AD:D9:40:EB:23:F8:6D:7D:B1:AD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f9:6b:dc:a9:6e:cf:fc:68:8e:f6:d6:92:81:45:1e:12:6c: 42:a2:9b:ad:99:60:67:a1:e9:70:1d:b6:d4:90:63:12:24:9d: 7d:00:25:d8:64:32:7d:19:73:ee:3e:fa:0f:55:44:34:ba:f9: f8:f5:55:30:f6:59:7b:f1:05:99:1c:da:57:09:02:ca:a5:4e: 74:fc:e8:b2:ef:11:7f:91:b7:ff:37:35:19:c5:45:46:ff:0e: a9:50:5e:ad:10:08:e8:72:f1:42:a9:b7:ed:5f:f0:c0:f0:1f: 86:ff:bf:de:3f:45:e3:8a:7d:76:5d:95:00:22:94:e0:90:42: f5:58:0e:e3:40:9b:d5:f2:7a:99:8f:fc:f0:0f:1b:b2:3e:88: 06:8a:4c:de:02:52:73:63:fc:0a:66:6c:ae:21:f6:bb:b9:d5: 37:34:5c:c1:fc:50:7c:28:d3:7d:8e:7d:0c:17:ea:d3:be:48: ee:03:30:bb:d7:6d:5d:97:38:51:fa:2f:0e:b7:6b:81:b4:94: ac:52:5f:6d:bf:ee:6e:3d:6c:67:1d:96:f5:da:07:98:6f:c9: 9c:1a:8e:4e:c6:f8:a9:46:1e:07:e6:9c:0d:d9:64:32:12:54: 0f:8d:d3:4c:6f:af:f8:94:e4:15:cb:ee:1b:44:a7:75:bf:85: cc:c9:eb:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhmwb4H7wwaBPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ODMyN2E1OWMtNTA0NS00NDVkLTlkZjktNDA2M2M1ZjVhM2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgntdwyKZVlgg+ZaAC/e+CAeMDXml5TRKZJIf egQHyM9HSDSd6y1SFUHLB3SLCkcyDPSjkvk+b/eKLLhOsiKjq6gJp3y10UC6D8te E0nHdhpRouMh2AnceyjbSZi0SBuiJ4KlXtd16xlvr3L5eiVZCvLfDQHn3Oc4vi1l ArHSlqeVzgRDhn3Kw79dJXg3UcJCNiYqPLAXHG4mytABXTuEci3LTjQQhy26wlAf VIhQXisDDmByzvjt/MitD/yk5wl/jOhXtMyUDXOy62bbDr5ysUFVTeM80k0/UEoy y8PUyz5DYjZyzbV1RDrZ2cClfSruJt33uFhoi4B2/uQAp4QEaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+efNNwjGkct63ZQOsj+G19sa08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE5NWFkMzMtYzNiMS0z NjE4LTg4NGQtMTc3MjUzMThhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED5a9ypbs/8aI721pKBRR4SbEKim62ZYGeh6XAdttSQYxIknX0AJdhk Mn0Zc+4++g9VRDS6+fj1VTD2WXvxBZkc2lcJAsqlTnT86LLvEX+Rt/83NRnFRUb/ DqlQXq0QCOhy8UKpt+1f8MDwH4b/v94/ReOKfXZdlQAilOCQQvVYDuNAm9XyepmP /PAPG7I+iAaKTN4CUnNj/ApmbK4h9ru51Tc0XMH8UHwo032OfQwX6tO+SO4DMLvX bV2XOFH6Lw63a4G0lKxSX22/7m49bGcdlvXaB5hvyZwajk7G+KlGHgfmnA3ZZDIS VA+N00xvr/iU5BXL7htEp3W/hczJ69k= -----END CERTIFICATE-----Generated at Mon May 12 04:31:44 2025 by rpki-client