$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa File: 4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa (raw, json) Hash identifier: a/LF9/GYwWILoqkHuzQ3MVJC/gOotB+PgdVQ4Mc+MxA= Subject key identifier: 54:B9:22:F3:7C:6B:08:0D:52:F3:0E:3A:CD:33:83:EF:B3:6C:95:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F5CDD619401CC72786C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.21.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:5c:dd:61:94:01:cc:72:78:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=a647b4f7-2800-4ad9-88da-04c2376a22ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5b:2b:a7:ac:cb:9a:c1:c4:ed:50:11:ce:7f: 5b:9c:81:1c:dd:ea:32:6a:02:54:e5:72:f8:06:bc: c9:14:26:59:f6:5c:60:ea:5a:6d:04:84:13:57:7b: bc:08:e8:1e:5b:d8:24:86:a8:42:ba:c1:2a:8b:01: a6:2a:e5:ab:ed:b9:ab:b0:ba:a6:73:85:a7:df:c2: 64:c9:31:ee:09:6a:5e:3c:39:50:19:6b:bb:92:d2: 38:ba:a5:56:6b:47:9d:04:3c:51:0e:9b:4a:68:c5: 65:30:67:6b:50:83:f0:af:68:e2:26:2a:65:ec:38: 21:5f:71:31:7c:92:0c:63:dd:33:9a:a2:2f:f9:93: dc:dc:71:3e:41:ff:41:c2:77:0a:1c:1a:96:f2:4b: 96:90:75:db:96:16:1f:77:68:f4:4b:67:92:d0:6e: 70:86:1c:2f:ad:61:db:67:52:39:5f:06:38:7e:7b: 15:be:68:6e:c2:22:ef:50:f6:e4:d9:53:85:91:c8: 65:ed:2f:fc:dd:88:30:c9:8f:44:d0:4d:75:77:87: 30:43:34:21:02:4f:a0:f5:20:1d:39:52:39:30:36: 11:05:26:cf:5b:61:40:3f:b7:a8:0b:8d:f0:50:46: 8c:04:5f:a9:23:b7:a9:9f:b0:fc:21:08:53:29:84: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B9:22:F3:7C:6B:08:0D:52:F3:0E:3A:CD:33:83:EF:B3:6C:95:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c3fdb18-c9b3-3e0b-a097-51d803720b60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e5:b5:08:e8:9e:70:6c:58:98:e5:3e:92:b7:9b:7b:4a:90: de:14:ca:41:9b:46:7f:5a:70:4c:bd:22:3c:e3:22:56:6c:22: 76:a1:de:47:c6:50:8c:53:36:c6:c0:3b:10:36:b3:af:5f:ca: cf:11:76:4d:2f:eb:d8:5b:81:4c:9a:b5:01:05:8d:de:ef:ec: 19:93:2a:ea:91:a7:1a:37:1b:48:a1:b0:53:44:04:dc:c9:6b: 48:fd:5f:22:f1:3a:dd:e0:a0:70:e9:65:d7:86:fb:be:42:57: 50:ad:2d:e8:e7:af:6d:0e:5e:59:be:da:e2:6e:16:ee:60:8f: 49:df:49:b5:12:12:7a:2a:ad:16:0e:5a:b8:83:a9:c5:a2:20: 34:a2:eb:a9:45:28:36:f9:d5:b1:5a:4b:dc:df:cf:3c:91:3f: d2:de:e0:79:aa:38:b3:36:10:0c:b4:13:4c:0a:42:8a:c7:d5: 76:07:52:54:cc:2d:19:c4:7d:49:75:ce:48:3e:86:3c:91:7f: c2:08:16:d9:75:37:dd:28:7b:3f:21:7f:64:80:73:be:78:a1: d4:3b:57:f2:af:86:79:ec:e6:1b:e9:56:61:17:c7:a8:b1:db: a7:49:ff:2e:d7:04:6d:ee:e0:f1:ff:85:71:2c:e5:d9:74:33: cd:46:56:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1zdYZQBzHJ4bIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YTY0N2I0ZjctMjgwMC00YWQ5LTg4ZGEtMDRjMjM3NmEyMmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlsrp6zLmsHE7VARzn9bnIEc3eoyagJU5XL4 BrzJFCZZ9lxg6lptBIQTV3u8COgeW9gkhqhCusEqiwGmKuWr7bmrsLqmc4Wn38Jk yTHuCWpePDlQGWu7ktI4uqVWa0edBDxRDptKaMVlMGdrUIPwr2jiJipl7DghX3Ex fJIMY90zmqIv+ZPc3HE+Qf9BwncKHBqW8kuWkHXblhYfd2j0S2eS0G5whhwvrWHb Z1I5XwY4fnsVvmhuwiLvUPbk2VOFkchl7S/83YgwyY9E0E11d4cwQzQhAk+g9SAd OVI5MDYRBSbPW2FAP7eoC43wUEaMBF+pI7epn7D8IQhTKYS+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFS5IvN8awgNUvMOOs0zg++zbJX6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGMzZmRiMTgtYzliMy0z ZTBiLWEwOTctNTFkODAzNzIwYjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhWcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrltQjonnBsWJjlPpK3m3tKkN4UykGbRn9acEy9IjzjIlZsInah3kfG UIxTNsbAOxA2s69fys8Rdk0v69hbgUyatQEFjd7v7BmTKuqRpxo3G0ihsFNEBNzJ a0j9XyLxOt3goHDpZdeG+75CV1CtLejnr20OXlm+2uJuFu5gj0nfSbUSEnoqrRYO WriDqcWiIDSi66lFKDb51bFaS9zfzzyRP9Le4HmqOLM2EAy0E0wKQorH1XYHUlTM LRnEfUl1zkg+hjyRf8IIFtl1N90oez8hf2SAc754odQ7V/Kvhnns5hvpVmEXx6ix 26dJ/y7XBG3u4PH/hXEs5dl0M81GVp4= -----END CERTIFICATE-----Generated at Sat May 10 16:20:37 2025 by rpki-client