$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa File: 5c4d4390-cf6b-3694-845f-b3f976f482a7.roa (raw, json) Hash identifier: ak7Lxsq6QRQjjD1rtPEi4u8vVrJfbod/nm4/zz/P/OU= Subject key identifier: 0A:11:B5:FB:E3:8D:B7:40:3B:5D:A6:FB:4E:28:D1:4F:33:62:85:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A14F795470CA4BA2A12E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.20.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:f7:95:47:0c:a4:ba:2a:12:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fe7808e6-3ad0-4784-9baa-752940490d9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:df:be:87:9c:ec:d8:b8:30:f5:0d:26:b9: d1:8a:c8:ec:98:7a:ae:cd:06:56:64:25:71:ed:8f: 33:99:be:b6:9b:9d:97:65:42:8c:4d:3e:82:fc:4d: d3:73:03:81:46:d6:94:ec:1d:b3:dc:ab:6c:11:b2: 89:77:c5:03:a0:3f:d8:9b:5f:03:67:b8:61:e0:88: 20:d8:90:10:15:83:6e:48:05:6d:06:89:a8:fe:58: 37:fa:e9:09:1e:86:8e:d5:07:a9:45:15:6c:88:34: a2:5f:45:cc:6d:0f:83:fc:cb:9e:08:e4:fa:24:5a: ea:91:df:a0:2d:5c:35:89:37:b1:04:a1:bc:95:8c: fc:35:ea:02:eb:4b:3b:46:13:3c:5a:58:d5:53:f3: d6:c2:e2:96:90:89:26:36:04:67:a6:82:f6:ab:85: ee:96:ff:4f:84:9c:18:c0:28:7e:4f:5e:76:04:8b: 9f:c8:6e:d5:b9:97:0d:36:c1:ab:eb:46:5d:6d:8f: c7:2e:b0:72:92:e4:5c:15:57:15:78:56:0f:1a:7e: bc:95:23:05:c1:17:6f:10:df:48:11:7d:15:97:48: ed:51:74:4a:c0:1b:14:74:d1:70:93:f3:87:b0:a4: d4:18:c9:f6:e3:70:9b:b4:19:dc:10:91:fb:59:be: 96:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:11:B5:FB:E3:8D:B7:40:3B:5D:A6:FB:4E:28:D1:4F:33:62:85:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5c4d4390-cf6b-3694-845f-b3f976f482a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:57:7b:f0:7a:7b:37:6f:ed:dd:5e:88:25:d0:4e:37:19:50: ce:30:6d:3e:4b:ab:44:8a:c4:66:95:28:64:f6:7e:65:b6:98: 60:cb:0a:1e:78:cc:a7:53:d2:7b:75:03:1e:21:e6:83:2d:f8: b2:50:cb:b6:b4:a2:6e:85:d8:3a:f0:cc:ba:50:da:07:6b:e3: e4:13:28:82:be:3f:ce:3b:20:4b:83:21:f0:4c:f4:a6:34:13: 8f:a0:a1:00:77:b5:6f:74:f9:a0:0b:c1:0f:e4:71:b6:56:18: af:5e:4a:24:ee:dd:6a:57:b6:74:ad:69:c7:a8:a0:a1:f4:0b: f8:12:5c:d7:92:cd:d0:a3:8c:43:e3:cc:83:42:2c:ff:56:96: a1:b9:60:79:fe:7d:54:5c:1b:0f:d8:e0:8b:21:47:0d:c7:53: a1:c4:e2:44:77:9c:41:81:a1:2a:f2:6f:24:4c:d8:c6:1d:a8: fc:26:5b:2b:83:42:23:8c:16:0d:0b:45:0f:0d:00:38:33:aa: fc:f0:28:72:4e:31:74:45:e5:90:23:ba:dd:4a:dc:be:a4:4d: ad:46:9c:11:8b:d2:b8:53:28:e9:8f:42:72:f7:df:a2:36:cb: 53:c1:eb:84:a7:46:d1:37:ec:15:dc:9d:01:28:42:de:49:01: 9a:fa:49:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShT3lUcMpLoqEuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmU3ODA4ZTYtM2FkMC00Nzg0LTliYWEtNzUyOTQwNDkwZDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzzfvoec7Ni4MPUNJrnRisjsmHquzQZWZCVx 7Y8zmb62m52XZUKMTT6C/E3TcwOBRtaU7B2z3KtsEbKJd8UDoD/Ym18DZ7hh4Igg 2JAQFYNuSAVtBomo/lg3+ukJHoaO1QepRRVsiDSiX0XMbQ+D/MueCOT6JFrqkd+g LVw1iTexBKG8lYz8NeoC60s7RhM8WljVU/PWwuKWkIkmNgRnpoL2q4Xulv9PhJwY wCh+T152BIufyG7VuZcNNsGr60ZdbY/HLrBykuRcFVcVeFYPGn68lSMFwRdvEN9I EX0Vl0jtUXRKwBsUdNFwk/OHsKTUGMn243CbtBncEJH7Wb6WbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoRtfvjjbdAO12m+04o0U8zYoUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWM0ZDQzOTAtY2Y2Yi0z Njk0LTg0NWYtYjNmOTc2ZjQ4MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhXe/B6ezdv7d1eiCXQTjcZUM4wbT5Lq0SKxGaVKGT2fmW2mGDLCh54 zKdT0nt1Ax4h5oMt+LJQy7a0om6F2DrwzLpQ2gdr4+QTKIK+P847IEuDIfBM9KY0 E4+goQB3tW90+aALwQ/kcbZWGK9eSiTu3WpXtnStaceooKH0C/gSXNeSzdCjjEPj zINCLP9WlqG5YHn+fVRcGw/Y4IshRw3HU6HE4kR3nEGBoSrybyRM2MYdqPwmWyuD QiOMFg0LRQ8NADgzqvzwKHJOMXRF5ZAjut1K3L6kTa1GnBGL0rhTKOmPQnL336I2 y1PB64SnRtE37BXcnQEoQt5JAZr6SZU= -----END CERTIFICATE-----Generated at Sun May 11 03:51:01 2025 by rpki-client