$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa File: 3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa (raw, json) Hash identifier: 32RquYaC13mFDgoH+ovKi4/Oipy9hmGnMZm/IOWC02Y= Subject key identifier: EF:92:83:24:C7:6E:41:CC:4C:DE:C2:81:79:2F:09:C3:89:D5:A0:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1552B3A4F8B57AECD800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.23.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:15:52:b3:a4:f8:b5:7a:ec:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b21da107-0261-4d74-8e4e-3a8576a3a809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fe:de:7f:31:85:61:0e:b9:14:ea:5b:ab:53: 0e:25:3b:58:1f:b1:a7:50:90:e8:d5:fc:61:14:22: 5e:29:99:d3:cf:37:5a:69:8e:df:aa:48:69:87:d3: 00:31:ae:e7:0f:0c:3b:47:22:3a:b5:31:2a:96:2d: 7c:f3:78:43:f2:18:e1:a4:9f:bd:7a:8b:88:ef:fe: ad:5f:f7:fa:45:3a:14:af:f0:0d:03:6d:f0:b9:a1: 3b:5d:1d:78:e3:1f:15:c0:32:ad:75:8c:66:e3:13: 62:aa:20:d7:f0:cf:cb:1f:07:43:b7:32:29:87:8b: d3:6d:eb:30:32:dc:4c:5d:93:be:f8:e9:d1:70:38: 40:f2:9a:95:31:92:1c:db:ad:45:15:f5:d7:01:f4: de:32:6f:a7:ab:8d:3f:8d:97:b0:1d:c3:ef:24:d9: ca:5e:42:35:b8:d4:5f:73:8e:4f:25:cf:82:ca:11: 02:f9:bf:2e:fd:9c:56:a7:01:e0:0b:4b:97:32:14: ad:ce:f7:d6:02:75:2e:78:41:3d:d4:74:7f:ae:8b: 29:04:ec:f3:52:e6:db:48:a7:90:c5:9e:51:6e:af: 29:f3:61:92:14:9b:59:66:01:b1:b9:69:e0:bf:7a: a0:e7:c3:a9:fe:c1:09:ff:e3:dd:ec:63:6b:0f:3b: 35:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:92:83:24:C7:6E:41:CC:4C:DE:C2:81:79:2F:09:C3:89:D5:A0:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bb9d82a-3aff-3211-96cb-a463e6b85d7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d1:e6:a2:b6:90:be:c6:61:28:98:2e:4b:5c:9b:26:c3:f0: 06:e5:b9:88:14:63:89:62:d7:2c:25:be:f5:dc:a1:88:0c:b9: d6:fb:63:fd:cb:91:5c:c1:9f:5d:3b:51:8c:b1:b2:80:f6:c9: 23:ff:a3:5e:17:08:05:1f:97:d6:71:88:6b:b9:7a:4a:f5:5b: 86:f3:c9:67:ca:74:da:8c:c9:0c:4a:00:7c:08:47:38:e9:2f: 09:7a:31:4d:a8:dc:64:78:b5:0f:00:f5:69:c9:39:e7:26:7e: 7f:93:43:a6:d2:d7:1f:48:34:38:6d:3f:20:d3:fa:08:2d:ed: ef:3a:f0:48:9c:5a:74:5c:8d:5f:59:b9:08:72:39:3d:38:00: 61:a3:c4:50:69:2e:a0:5c:62:f9:7e:aa:f0:b0:00:1d:84:c3: 33:4d:d2:85:63:ee:0b:ac:56:72:40:4e:86:6c:30:b4:e0:11: 49:4c:4e:a4:ea:a2:67:cb:2c:ad:58:4c:56:c9:0a:7e:bb:42: 1e:25:b7:d3:6c:4a:13:35:c6:0c:ce:47:e1:56:17:a7:45:44: d5:58:28:e2:f4:57:02:59:9a:83:49:73:72:6a:08:d2:f0:39: 8a:8e:86:de:73:f7:14:73:eb:a9:eb:5d:0c:33:94:59:82:bc: cf:1c:58:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShVSs6T4tXrs2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjIxZGExMDctMDI2MS00ZDc0LThlNGUtM2E4NTc2YTNhODA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv7efzGFYQ65FOpbq1MOJTtYH7GnUJDo1fxh FCJeKZnTzzdaaY7fqkhph9MAMa7nDww7RyI6tTEqli1883hD8hjhpJ+9eouI7/6t X/f6RToUr/ANA23wuaE7XR144x8VwDKtdYxm4xNiqiDX8M/LHwdDtzIph4vTbesw MtxMXZO++OnRcDhA8pqVMZIc261FFfXXAfTeMm+nq40/jZewHcPvJNnKXkI1uNRf c45PJc+CyhEC+b8u/ZxWpwHgC0uXMhStzvfWAnUueEE91HR/rospBOzzUubbSKeQ xZ5Rbq8p82GSFJtZZgGxuWngv3qg58Op/sEJ/+Pd7GNrDzs11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+SgyTHbkHMTN7CgXkvCcOJ1aAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JiOWQ4MmEtM2FmZi0z MjExLTk2Y2ItYTQ2M2U2Yjg1ZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbR5qK2kL7GYSiYLktcmybD8AbluYgUY4li1ywlvvXcoYgMudb7Y/3L kVzBn107UYyxsoD2ySP/o14XCAUfl9ZxiGu5ekr1W4bzyWfKdNqMyQxKAHwIRzjp Lwl6MU2o3GR4tQ8A9WnJOecmfn+TQ6bS1x9INDhtPyDT+ggt7e868EicWnRcjV9Z uQhyOT04AGGjxFBpLqBcYvl+qvCwAB2EwzNN0oVj7gusVnJAToZsMLTgEUlMTqTq omfLLK1YTFbJCn67Qh4lt9NsShM1xgzOR+FWF6dFRNVYKOL0VwJZmoNJc3JqCNLw OYqOht5z9xRz66nrXQwzlFmCvM8cWCw= -----END CERTIFICATE-----Generated at Thu May 8 03:26:32 2025 by rpki-client