$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa File: 41eb1acd-5269-33e7-a21d-fb1a570d829a.roa (raw, json) Hash identifier: QLSwft07sMSuOpAdDe2k2rcQJGsuda+8bzAYNZa9cy0= Subject key identifier: 6C:B0:D8:7B:E6:3F:B0:59:30:5A:1B:6B:FA:FC:84:96:4D:4D:7D:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB48EBB9B55F1F868BC1480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 98.21.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:8e:bb:9b:55:f1:f8:68:bc:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=bf2fba3b-971d-4491-b9a5-d26002dd90dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:b8:50:28:ae:15:2c:ff:4b:e0:d8:c3:be: 9a:ed:72:8e:ab:5f:01:6e:8b:36:a9:18:02:12:13: a9:19:19:23:f2:5d:c0:db:5d:d0:18:87:fc:cd:80: 8a:b7:fd:a1:95:72:38:87:94:e2:82:a6:ed:9d:33: 01:a7:6c:27:35:1a:79:f8:fc:fa:64:0f:b7:c0:75: 5a:3e:32:6a:8b:c5:3d:29:67:5d:dd:fb:ea:26:fe: b2:d5:ae:5b:64:2c:73:80:9b:f1:83:0d:5b:8c:9c: 1e:29:95:46:6b:37:c2:48:83:29:90:68:1b:0f:60: 30:61:8d:4c:b7:cd:99:85:f6:69:ca:8b:c4:e7:b4: 81:15:87:ab:6d:59:52:3e:72:66:8a:ad:69:4a:ee: 07:04:e8:e7:07:aa:29:71:f3:df:16:34:61:8d:c1: 6c:32:ce:9e:77:c9:17:3f:3a:11:38:12:65:e1:6c: 9a:56:e0:b3:02:23:d8:81:27:82:f2:0b:5c:f8:f3: ca:f1:90:79:43:fd:b6:af:3f:1c:0a:39:e9:db:eb: c5:56:54:e2:be:11:67:f7:49:9c:a0:c0:a6:f0:8b: dc:ea:85:d9:6b:99:fc:45:17:35:3e:56:55:c7:e1: 80:a1:e3:8a:21:cb:6a:a3:05:e3:d0:e2:02:f2:45: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B0:D8:7B:E6:3F:B0:59:30:5A:1B:6B:FA:FC:84:96:4D:4D:7D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41eb1acd-5269-33e7-a21d-fb1a570d829a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:34:84:49:eb:2f:b1:e3:39:d8:f0:75:36:10:e6:f3:c4:95: f3:7c:bb:14:2f:5f:69:54:b3:b9:5c:ca:84:20:fc:82:63:af: 48:b1:bf:7b:9e:f4:33:6f:a4:5c:02:c7:f8:fe:d4:62:5c:54: 14:be:96:ac:79:a7:5c:5e:c8:2f:53:39:34:20:c3:46:c0:8c: e7:e3:4a:98:60:52:de:3c:02:e1:21:0d:f1:52:3b:33:ba:8a: c2:28:f7:ab:52:91:88:8a:6a:b1:34:8a:6b:29:7d:6a:fb:c8: 1d:90:f6:bf:28:db:fb:5b:48:10:09:36:e3:bc:a9:7b:57:5c: 7e:84:d5:f5:4c:2a:80:0c:29:c3:94:3a:16:7a:ff:cc:59:12: 4d:c2:1a:d9:5b:5a:83:ae:86:76:b7:6c:f0:b7:38:fc:a0:5e: df:a7:17:1d:d1:8a:02:aa:ff:4c:38:67:ee:77:39:e7:11:a6: 64:fc:ec:d4:80:59:c2:ef:7e:4e:db:8d:c9:ba:2e:cc:63:69: 01:25:c3:b5:fb:d5:6f:5f:73:db:ac:4f:57:98:2c:a0:01:5e: de:01:e4:6c:ff:16:c1:c3:18:f1:38:7c:0d:a5:7f:67:75:1a: e4:ce:5c:b5:be:15:ba:89:c9:e1:93:2d:c5:ab:71:6d:59:4b: c3:03:2d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtI67m1Xx+Gi8FIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YmYyZmJhM2ItOTcxZC00NDkxLWI5YTUtZDI2MDAyZGQ5MGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGi4UCiuFSz/S+DYw76a7XKOq18Bbos2qRgC EhOpGRkj8l3A213QGIf8zYCKt/2hlXI4h5TigqbtnTMBp2wnNRp5+Pz6ZA+3wHVa PjJqi8U9KWdd3fvqJv6y1a5bZCxzgJvxgw1bjJweKZVGazfCSIMpkGgbD2AwYY1M t82ZhfZpyovE57SBFYerbVlSPnJmiq1pSu4HBOjnB6opcfPfFjRhjcFsMs6ed8kX PzoROBJl4WyaVuCzAiPYgSeC8gtc+PPK8ZB5Q/22rz8cCjnp2+vFVlTivhFn90mc oMCm8Ivc6oXZa5n8RRc1PlZVx+GAoeOKIctqowXj0OIC8kVLuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyw2HvmP7BZMFoba/r8hJZNTX1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFlYjFhY2QtNTI2OS0z M2U3LWEyMWQtZmIxYTU3MGQ4MjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABw0hEnrL7HjOdjwdTYQ5vPElfN8uxQvX2lUs7lcyoQg/IJjr0ixv3ue 9DNvpFwCx/j+1GJcVBS+lqx5p1xeyC9TOTQgw0bAjOfjSphgUt48AuEhDfFSOzO6 isIo96tSkYiKarE0imspfWr7yB2Q9r8o2/tbSBAJNuO8qXtXXH6E1fVMKoAMKcOU OhZ6/8xZEk3CGtlbWoOuhna3bPC3OPygXt+nFx3RigKq/0w4Z+53OecRpmT87NSA WcLvfk7bjcm6LsxjaQElw7X71W9fc9usT1eYLKABXt4B5Gz/FsHDGPE4fA2lf2d1 GuTOXLW+FbqJyeGTLcWrcW1ZS8MDLck= -----END CERTIFICATE-----Generated at Sat May 10 07:03:00 2025 by rpki-client