$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa File: 44acb445-26d6-3fdf-8220-9a3adef4f394.roa (raw, json) Hash identifier: 1U5sq2Hu6yp9DkODayeFJu+nilNbv5QyYuukpaDffkI= Subject key identifier: F1:2E:22:78:C0:15:AD:00:67:8B:7F:3A:E2:96:D5:D1:14:38:59:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A14FE973DAAFD4CBEB900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.20.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:14:fe:97:3d:aa:fd:4c:be:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=ea6167f2-8b2f-4f92-8a31-b19c7655f46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:1c:21:d4:08:25:32:6c:6a:7d:6d:d8:59: 2b:c2:8d:06:58:fe:6f:ad:04:07:c3:45:60:1d:2d: 64:67:10:97:1f:d5:bd:82:df:23:10:27:20:3f:29: 12:03:9f:8e:d4:00:46:68:58:9c:26:6a:80:fb:3c: d7:48:23:ec:d2:be:34:4c:50:9d:81:1e:e2:94:bb: e5:6c:11:0d:58:40:4a:53:58:5c:a3:0c:b0:3d:cc: e3:dd:5d:75:50:38:cf:1d:6f:0a:25:50:7a:f5:a8: 3f:0c:24:22:b2:b4:d1:77:71:82:99:52:9c:1c:6f: 38:38:b2:53:55:ff:de:39:1c:22:18:9a:e5:e3:cb: 7f:33:7e:44:2b:a8:a6:92:68:d3:6a:c6:49:aa:06: a7:ed:c8:5f:a1:02:d1:d1:57:87:e0:d2:4e:4d:5b: 8e:bc:83:8c:89:9d:ec:6d:b7:e3:ec:52:1c:ca:05: ac:e7:95:76:46:48:2c:c3:79:69:45:89:7d:55:1d: e2:38:7c:53:c7:cf:f9:c8:dd:5c:8b:00:ba:73:ff: 02:07:d1:ce:3a:d4:94:0c:32:6b:f8:2a:13:b4:c8: be:64:92:18:90:1c:8d:73:15:39:18:30:02:26:94: c1:a5:3f:b2:4f:d4:2f:ab:e4:1a:d0:4d:03:a1:13: 61:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2E:22:78:C0:15:AD:00:67:8B:7F:3A:E2:96:D5:D1:14:38:59:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/44acb445-26d6-3fdf-8220-9a3adef4f394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:df:54:e8:27:2e:79:0b:91:02:49:2d:85:3d:e1:15:15:44: 6a:0f:54:96:8f:b7:a7:43:a4:aa:ae:02:8b:79:f1:49:70:9a: ab:5b:52:e4:c0:79:3e:2a:6e:7f:01:bc:5f:ce:30:fb:1f:e2: 6b:b1:8f:4f:08:52:3a:b3:8d:2f:de:f2:b0:76:a4:eb:c7:f5: 45:3d:df:6f:15:8a:3d:4f:e1:ea:93:17:cf:cf:f2:2c:f7:b5: ae:a8:11:48:2e:74:c4:b0:0f:1f:f1:7e:e9:6a:77:f2:26:61: a3:e6:b5:33:e8:30:50:fc:30:6c:69:9a:19:65:09:54:85:be: 89:17:f2:28:67:4e:fa:e1:05:59:0f:f1:f4:64:e1:be:da:a8: 9b:fa:bd:f3:66:31:59:a9:f6:f7:db:82:a8:9e:45:c5:b5:3b: ac:98:a0:e2:cb:aa:3a:c8:c8:dd:24:ae:5a:08:b6:5b:b7:6e: ad:3d:24:3b:1d:87:49:ac:c2:65:1d:78:d6:f9:ea:52:77:12: 3d:b7:f1:e1:76:0d:72:e1:0e:bb:0d:91:ca:44:02:ea:03:61: 38:69:88:ae:0e:2a:53:e4:ae:08:24:e8:92:30:f7:25:ed:67: 30:58:b0:9a:78:50:ec:e2:dc:60:f2:8f:2d:f9:a1:30:2d:e7: ff:73:18:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhT+lz2q/Uy+uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZWE2MTY3ZjItOGIyZi00ZjkyLThhMzEtYjE5Yzc2NTVmNDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnwcIdQIJTJsan1t2Fkrwo0GWP5vrQQHw0Vg HS1kZxCXH9W9gt8jECcgPykSA5+O1ABGaFicJmqA+zzXSCPs0r40TFCdgR7ilLvl bBENWEBKU1hcowywPczj3V11UDjPHW8KJVB69ag/DCQisrTRd3GCmVKcHG84OLJT Vf/eORwiGJrl48t/M35EK6imkmjTasZJqgan7chfoQLR0VeH4NJOTVuOvIOMiZ3s bbfj7FIcygWs55V2Rkgsw3lpRYl9VR3iOHxTx8/5yN1ciwC6c/8CB9HOOtSUDDJr +CoTtMi+ZJIYkByNcxU5GDACJpTBpT+yT9Qvq+Qa0E0DoRNhrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEuInjAFa0AZ4t/OuKW1dEUOFlmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDRhY2I0NDUtMjZkNi0z ZmRmLTgyMjAtOWEzYWRlZjRmMzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABffVOgnLnkLkQJJLYU94RUVRGoPVJaPt6dDpKquAot58UlwmqtbUuTA eT4qbn8BvF/OMPsf4muxj08IUjqzjS/e8rB2pOvH9UU9328Vij1P4eqTF8/P8iz3 ta6oEUgudMSwDx/xfulqd/ImYaPmtTPoMFD8MGxpmhllCVSFvokX8ihnTvrhBVkP 8fRk4b7aqJv6vfNmMVmp9vfbgqieRcW1O6yYoOLLqjrIyN0krloItlu3bq09JDsd h0mswmUdeNb56lJ3Ej238eF2DXLhDrsNkcpEAuoDYThpiK4OKlPkrggk6JIw9yXt ZzBYsJp4UOzi3GDyjy35oTAt5/9zGLI= -----END CERTIFICATE-----Generated at Sat May 10 09:57:14 2025 by rpki-client