$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa File: 5125e331-f265-3594-a49c-f30257eea820.roa (raw, json) Hash identifier: Oic6jFT2UmkiEomfLykp4npsebTOPW4Pu6mfim5F9Is= Subject key identifier: 03:E2:2E:1D:CB:DC:7E:93:E3:3A:BC:61:1F:40:E3:7F:E8:AD:AE:38 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1514585809B7E1731500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.21.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:15:14:58:58:09:b7:e1:73:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=be2621da-266a-4a0e-a698-05c9cfe5d912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:47:16:b6:c7:65:70:fa:33:f5:39:76:3f:b9: f2:45:1c:49:3c:76:8c:11:b2:fb:ad:f9:26:76:c6: 6e:01:03:64:c9:ec:95:46:78:fb:6e:e2:ac:61:6c: d6:32:89:74:8c:f1:96:94:cd:22:ee:ba:24:af:5f: c6:a1:b5:cb:b8:b2:6f:38:89:de:8e:71:19:dc:ae: 91:4c:65:28:8f:79:1c:ea:e2:69:7c:6f:97:db:2e: cd:0f:c8:de:48:a3:15:61:a5:a6:76:61:42:ea:49: b1:23:f0:0d:68:79:bf:6c:93:63:86:29:6e:48:d9: 99:c4:38:0b:f2:e0:9e:84:ec:e8:7a:91:e8:fc:61: bd:52:de:b1:13:f9:53:e4:a9:e9:a1:2d:08:b9:04: ee:bf:63:a8:15:71:b4:9f:86:c7:5d:29:d2:32:39: 46:3b:35:e1:f1:35:c6:f7:d7:d4:65:32:21:51:7c: a1:e5:46:2c:a7:69:94:c5:da:e3:15:d8:83:fd:67: be:a8:9b:e3:21:47:f0:25:b6:d1:aa:34:bc:9b:05: 32:4e:0f:12:6d:0b:35:d4:6b:80:60:3c:30:a5:92: 04:67:dd:55:71:ae:79:85:f5:eb:9c:59:ea:d5:dc: 65:56:9b:e7:92:3e:ad:03:70:13:88:41:b7:6d:b8: 45:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E2:2E:1D:CB:DC:7E:93:E3:3A:BC:61:1F:40:E3:7F:E8:AD:AE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:28:13:a7:d1:c1:bb:92:99:29:9c:4f:ac:1a:62:cf:ff:d9: 66:df:34:b4:49:3b:f9:14:42:6f:96:ed:a6:97:e0:76:74:9a: c0:b5:a1:49:58:ac:79:6f:ab:7f:5e:5f:2d:7d:4a:d3:a3:af: 5c:25:13:c9:c7:d3:5d:a8:90:d3:c9:af:1e:ae:03:2c:66:ea: e6:78:1d:26:d7:ef:4b:28:ab:51:19:f0:fe:6b:fd:f8:62:99: 40:69:47:6e:49:2f:7f:3c:1d:c3:53:1f:36:bd:0a:61:13:79: 23:7b:fe:66:82:2f:d4:b0:c9:4e:42:d6:b2:d9:41:25:5a:cf: 95:99:11:96:91:37:ae:15:6e:4f:1b:22:bc:96:2f:59:62:90: 69:31:cd:4c:68:ad:f0:8e:cd:58:0b:a0:4e:d7:09:35:e0:da: 66:11:82:fb:24:e2:f8:ca:67:9c:0b:04:17:fb:a5:ac:73:6a: 72:b8:04:57:fa:fd:07:f4:a5:5a:bd:6a:d5:47:f2:20:67:6c: 6b:41:36:f6:f1:fc:23:b7:34:2f:45:ad:20:ac:62:bd:4b:1d: fa:66:96:59:b2:6a:92:1b:3d:cb:48:71:15:a7:62:49:b0:54: 52:c5:70:d2:f6:e9:52:4a:a0:2e:64:74:4f:f0:2e:f0:21:9d: ac:c5:02:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShUUWFgJt+FzFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmUyNjIxZGEtMjY2YS00YTBlLWE2OTgtMDVjOWNmZTVkOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUcWtsdlcPoz9Tl2P7nyRRxJPHaMEbL7rfkm dsZuAQNkyeyVRnj7buKsYWzWMol0jPGWlM0i7rokr1/GobXLuLJvOInejnEZ3K6R TGUoj3kc6uJpfG+X2y7ND8jeSKMVYaWmdmFC6kmxI/ANaHm/bJNjhiluSNmZxDgL 8uCehOzoepHo/GG9Ut6xE/lT5KnpoS0IuQTuv2OoFXG0n4bHXSnSMjlGOzXh8TXG 99fUZTIhUXyh5UYsp2mUxdrjFdiD/We+qJvjIUfwJbbRqjS8mwUyTg8SbQs11GuA YDwwpZIEZ91Vca55hfXrnFnq1dxlVpvnkj6tA3ATiEG3bbhFOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPiLh3L3H6T4zq8YR9A43/ora44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTEyNWUzMzEtZjI2NS0z NTk0LWE0OWMtZjMwMjU3ZWVhODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUoE6fRwbuSmSmcT6waYs//2WbfNLRJO/kUQm+W7aaX4HZ0msC1oUlY rHlvq39eXy19StOjr1wlE8nH012okNPJrx6uAyxm6uZ4HSbX70soq1EZ8P5r/fhi mUBpR25JL388HcNTHza9CmETeSN7/maCL9SwyU5C1rLZQSVaz5WZEZaRN64Vbk8b IryWL1likGkxzUxorfCOzVgLoE7XCTXg2mYRgvsk4vjKZ5wLBBf7paxzanK4BFf6 /Qf0pVq9atVH8iBnbGtBNvbx/CO3NC9FrSCsYr1LHfpmllmyapIbPctIcRWnYkmw VFLFcNL26VJKoC5kdE/wLvAhnazFArw= -----END CERTIFICATE-----Generated at Sun May 11 01:23:35 2025 by rpki-client