$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa File: 522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa (raw, json) Hash identifier: 0EfcMaFYp/PCWVEXwehEqu2VXKIuhTc0HVbyeiVAhb4= Subject key identifier: 84:17:F7:6D:12:5F:73:BC:49:34:1B:77:EE:EC:04:CC:51:3C:56:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A13C1F8B828CCE52D7060 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.23.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:13:c1:f8:b8:28:cc:e5:2d:70:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=87057750-0c5d-423a-a478-5da3e541845f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:98:6b:84:b3:15:da:5c:01:4a:4f:9e:e8:14: fa:2a:4b:49:53:16:87:9e:cc:a4:51:90:88:94:38: fe:df:bc:f5:8b:98:7c:5a:6a:e7:7b:de:26:da:ce: 6f:e9:c8:0d:33:e5:d1:68:5d:d0:ae:3e:75:dc:cd: 55:3f:c5:6f:2e:3e:bc:85:3d:d3:09:9a:2a:0a:57: e9:d8:f4:e8:38:c1:8d:ce:5c:7a:e7:df:0e:e7:3a: 88:34:a7:81:00:7d:08:35:1f:37:40:8b:cc:8a:df: 4b:bd:75:81:7c:8c:66:ba:a2:fb:59:2b:bd:8e:3c: 64:31:69:33:fc:81:2b:ce:2a:5f:d2:e9:2d:4f:69: db:f7:46:3f:71:1c:bd:74:41:32:cd:fb:2e:67:03: d0:9c:50:1d:da:2c:f3:26:a6:46:94:47:c8:33:a1: da:90:9e:5f:c9:21:ba:e6:d5:b1:7e:2c:c2:4d:d9: 40:07:c9:2c:2c:e4:55:b2:65:4c:94:de:74:4f:0a: d7:c6:1a:22:40:ab:d9:f8:cf:95:bb:e9:0a:49:81: de:db:a0:a9:d5:69:a2:c6:9b:76:fc:91:b2:c1:40: dd:88:2d:b5:30:1e:45:8d:bd:41:73:f5:6a:34:58: 9e:1b:a6:a7:6a:ca:fb:10:63:a1:dd:b6:4d:43:09: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:17:F7:6D:12:5F:73:BC:49:34:1B:77:EE:EC:04:CC:51:3C:56:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/522b3d16-d0cc-3519-872e-aa535e2b9c9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:07:a5:19:12:37:f4:56:55:25:ac:07:53:b6:09:c2:ac:a7: bf:82:79:aa:fd:6b:2c:b9:1f:cf:57:7d:7e:ca:af:29:46:30: ba:54:63:69:17:7d:9c:79:fd:44:4f:24:ae:78:15:55:f4:51: a2:65:d9:bb:df:47:df:02:7d:cc:e8:a2:39:5a:45:86:44:0f: 5a:08:98:f7:0b:98:95:d9:cc:9b:39:df:ab:80:21:bb:0b:81: ae:9f:63:1d:33:ad:3d:9c:a2:59:00:9c:f7:3c:cd:b7:b8:32: a2:7d:13:73:d9:3b:65:1f:b7:f3:ca:e0:0c:f6:91:cf:c7:d1: 15:3e:98:34:f9:4e:29:9c:2e:39:61:de:75:44:c5:1f:60:59: d7:f9:47:80:98:b8:00:68:f7:1e:55:2d:b8:28:5f:2b:2c:b8: e3:18:f4:48:6f:dd:82:a2:dc:66:1d:a7:a2:f4:e4:42:37:2e: 3b:39:ed:4f:7a:09:43:43:d4:3b:0a:35:a8:f4:d4:00:83:e3: c5:69:26:87:83:32:cb:06:ad:a7:23:7b:24:01:90:5e:04:98: c1:40:5d:92:56:f9:35:d7:36:72:99:f5:5c:e0:ad:e2:41:f4: 94:c2:9d:30:94:f0:1a:02:4b:fc:2f:05:bb:7e:91:cc:10:72: 26:09:a8:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhPB+LgozOUtcGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ODcwNTc3NTAtMGM1ZC00MjNhLWE0NzgtNWRhM2U1NDE4NDVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJhrhLMV2lwBSk+e6BT6KktJUxaHnsykUZCI lDj+37z1i5h8Wmrne94m2s5v6cgNM+XRaF3Qrj513M1VP8VvLj68hT3TCZoqClfp 2PToOMGNzlx6598O5zqINKeBAH0INR83QIvMit9LvXWBfIxmuqL7WSu9jjxkMWkz /IErzipf0uktT2nb90Y/cRy9dEEyzfsuZwPQnFAd2izzJqZGlEfIM6HakJ5fySG6 5tWxfizCTdlAB8ksLORVsmVMlN50TwrXxhoiQKvZ+M+Vu+kKSYHe26Cp1Wmixpt2 /JGywUDdiC21MB5Fjb1Bc/VqNFieG6anasr7EGOh3bZNQwnLAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQX920SX3O8STQbd+7sBMxRPFYAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTIyYjNkMTYtZDBjYy0z NTE5LTg3MmUtYWE1MzVlMmI5YzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcHpRkSN/RWVSWsB1O2CcKsp7+Cear9ayy5H89XfX7KrylGMLpUY2kX fZx5/URPJK54FVX0UaJl2bvfR98CfczoojlaRYZED1oImPcLmJXZzJs536uAIbsL ga6fYx0zrT2colkAnPc8zbe4MqJ9E3PZO2Uft/PK4Az2kc/H0RU+mDT5TimcLjlh 3nVExR9gWdf5R4CYuABo9x5VLbgoXyssuOMY9Ehv3YKi3GYdp6L05EI3Ljs57U96 CUND1DsKNaj01ACD48VpJoeDMssGracjeyQBkF4EmMFAXZJW+TXXNnKZ9VzgreJB 9JTCnTCU8BoCS/wvBbt+kcwQciYJqHI= -----END CERTIFICATE-----Generated at Fri May 9 08:07:14 2025 by rpki-client