$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46dba63c-df94-396a-93ca-51922f2b5065.roa File: 46dba63c-df94-396a-93ca-51922f2b5065.roa (raw, json) Hash identifier: GN3oWzgv51zqSYfILbmi3IBAjo5xSoMqggGPpHmt0Ls= Subject key identifier: AE:B4:83:9B:6D:39:C9:29:0A:F0:76:F0:3F:FA:66:CD:35:F0:04:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A120350C754687EA82380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46dba63c-df94-396a-93ca-51922f2b5065.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.23.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:12:03:50:c7:54:68:7e:a8:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=2dfd7f86-83ca-4767-aa2d-8e6c6e4f698d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5e:79:49:20:4d:f5:f4:90:5d:29:f7:55:ad: 99:6b:f7:d1:f7:b3:22:2e:91:ef:ee:a1:8a:53:97: 60:ba:d2:4b:36:f5:6a:58:9d:51:4d:22:dc:f7:0a: d5:94:dc:be:66:12:8b:0f:9e:33:9f:2a:aa:42:46: ed:a9:16:c7:7b:94:18:e7:fa:70:13:1a:50:a4:09: 0a:35:dd:dd:de:40:fe:25:17:1a:27:a5:32:f2:b5: 29:d1:09:d1:ce:80:26:ae:f2:d0:1d:91:88:93:d6: 97:56:9e:c1:c0:16:74:8f:b3:17:98:1e:ee:66:c9: 72:ee:a8:ac:9a:ff:9a:59:38:18:2d:8b:e6:b8:b1: bc:4f:12:3a:76:75:10:db:89:75:09:13:73:71:3d: 20:0c:62:f4:41:26:02:79:94:51:38:c2:77:4e:c2: 6d:6c:73:bc:e8:0f:c2:41:79:63:00:22:e9:0b:21: c3:c7:6e:6a:01:af:8d:d9:7e:7f:b4:5b:65:5d:3e: 7d:71:7e:ec:c3:ef:f9:53:de:f6:f8:fe:89:11:5b: c1:71:cd:b2:78:23:33:28:e8:59:fa:8b:e9:86:cc: b0:d7:d8:17:57:3b:b8:10:b2:42:05:ef:39:48:d8: 66:7f:8d:eb:96:75:6d:42:d0:70:7f:04:96:34:ca: 11:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B4:83:9B:6D:39:C9:29:0A:F0:76:F0:3F:FA:66:CD:35:F0:04:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46dba63c-df94-396a-93ca-51922f2b5065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:6e:20:8c:ac:71:61:74:8b:d7:68:8d:ba:ab:92:43:c8:fd: c7:c8:0c:0a:47:34:75:ec:ce:04:f5:e9:6e:34:3f:d6:bd:ec: 9e:89:43:de:c4:98:51:d1:4f:85:dc:a4:78:83:35:ec:30:5a: 74:b9:84:00:1a:24:07:63:f9:98:62:33:ee:1c:45:21:92:47: 3d:1b:7a:c4:4d:33:12:49:7d:08:d2:7b:96:6c:97:19:19:17: 0e:65:da:04:16:53:21:52:96:29:fd:c1:9c:b5:b9:90:4b:cc: c6:e3:ff:52:ee:b7:f7:7d:4f:77:56:de:c8:f8:8a:10:c5:01: 3d:b1:65:d4:85:ac:e4:09:d7:d7:5a:1a:2a:12:a9:75:58:81: c0:3e:16:a2:7f:02:f2:cd:49:6e:4a:de:9c:1a:6e:8d:5c:25: 83:2e:d3:de:3b:7b:1f:1b:0a:65:f5:c4:f0:0b:aa:9d:7a:68: d2:ad:d7:f6:9c:f5:e1:55:dc:0a:93:ec:01:ac:bc:d4:19:ec: 29:64:6e:62:e8:32:4f:5a:69:99:79:94:c9:e6:37:71:bc:a5: 45:51:01:16:fa:c7:c6:cb:11:71:53:02:ce:4b:eb:dd:b2:6f: 5b:fe:b4:f1:fe:96:86:3f:4e:5c:72:7a:16:20:9f:f3:25:a5: d6:8c:8d:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhIDUMdUaH6oI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MmRmZDdmODYtODNjYS00NzY3LWFhMmQtOGU2YzZlNGY2OThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F55SSBN9fSQXSn3Va2Za/fR97MiLpHv7qGK U5dgutJLNvVqWJ1RTSLc9wrVlNy+ZhKLD54znyqqQkbtqRbHe5QY5/pwExpQpAkK Nd3d3kD+JRcaJ6Uy8rUp0QnRzoAmrvLQHZGIk9aXVp7BwBZ0j7MXmB7uZsly7qis mv+aWTgYLYvmuLG8TxI6dnUQ24l1CRNzcT0gDGL0QSYCeZRROMJ3TsJtbHO86A/C QXljACLpCyHDx25qAa+N2X5/tFtlXT59cX7sw+/5U972+P6JEVvBcc2yeCMzKOhZ +ovphsyw19gXVzu4ELJCBe85SNhmf43rlnVtQtBwfwSWNMoROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK60g5ttOckpCvB28D/6Zs018ARCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDZkYmE2M2MtZGY5NC0z OTZhLTkzY2EtNTE5MjJmMmI1MDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABduIIyscWF0i9dojbqrkkPI/cfIDApHNHXszgT16W40P9a97J6JQ97E mFHRT4XcpHiDNewwWnS5hAAaJAdj+ZhiM+4cRSGSRz0besRNMxJJfQjSe5ZslxkZ Fw5l2gQWUyFSlin9wZy1uZBLzMbj/1Lut/d9T3dW3sj4ihDFAT2xZdSFrOQJ19da GioSqXVYgcA+FqJ/AvLNSW5K3pwabo1cJYMu0947ex8bCmX1xPALqp16aNKt1/ac 9eFV3AqT7AGsvNQZ7ClkbmLoMk9aaZl5lMnmN3G8pUVRARb6x8bLEXFTAs5L692y b1v+tPH+loY/TlxyehYgn/MlpdaMjfc= -----END CERTIFICATE-----Generated at Sat May 10 04:52:43 2025 by rpki-client