$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa File: 63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa (raw, json) Hash identifier: bpIpSVn7Sg0hqWWXhUELZNbAwMbmJ+abvJzZgXQRVPc= Subject key identifier: 02:E0:55:FD:1C:21:44:C2:44:FF:E2:F5:1D:37:ED:C1:84:7F:00:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B6B4E6E4FDEA82EB2A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 98.19.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b6:b4:e6:e4:fd:ea:82:eb:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=81ee7cb4-42c5-4fb8-9a08-ca32b1b5a4cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:c3:70:b9:5f:06:cc:59:08:a8:da:34:2e: 38:1d:3e:ee:37:7e:29:a5:ef:bb:15:f8:94:2e:9a: 8a:8a:8b:5b:2c:99:84:49:1e:38:f2:e8:64:d2:03: 66:67:bf:93:f5:b6:1f:12:7e:3f:27:a8:db:47:16: 7f:b5:54:19:1a:a0:02:3a:48:42:48:99:1b:5c:9a: d5:1a:30:a9:50:21:f0:26:6c:6a:b2:28:23:ee:df: ee:2e:e8:d0:6e:46:85:78:39:43:51:5e:b6:02:30: f5:12:61:d7:e7:32:c2:81:94:5a:df:17:db:89:71: d2:d4:b9:f5:55:a8:20:5a:d3:6f:4d:e0:3f:b8:9f: ee:09:a1:f2:c3:59:19:a5:4a:87:77:e6:cf:49:74: 7e:57:f6:47:1e:d3:35:5d:04:06:06:6d:09:71:1a: b8:73:d3:22:2e:21:77:92:fe:26:7c:c2:e8:a8:43: e2:55:10:7d:20:cd:03:bf:47:1e:49:69:48:67:f9: c4:21:6e:54:d5:a2:d1:a0:b8:44:ab:e9:69:51:73: 6e:dc:dd:5e:72:75:ca:36:0f:49:d8:6f:f1:79:bb: 58:71:34:06:1a:26:fd:8c:82:f2:02:17:64:31:3f: 03:88:86:95:c2:86:0f:a2:07:9c:d1:9f:43:2e:34: 5d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E0:55:FD:1C:21:44:C2:44:FF:E2:F5:1D:37:ED:C1:84:7F:00:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63997c26-dc9a-365b-9697-ca8e4f07b6d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:84:c5:37:1c:40:c2:b2:8a:a9:68:6e:b4:4a:0b:d6:6e:cf: cb:93:c7:fc:3f:76:9b:5c:3a:79:63:03:97:44:87:5d:95:d1: bb:b7:ad:e6:48:8c:1a:9a:04:a5:f8:47:31:46:9c:1c:c3:7f: b7:94:1c:e5:03:1d:a0:42:60:e9:af:de:f8:cf:c5:69:8e:16: 45:60:eb:1b:cc:f1:24:b0:3b:54:4f:69:53:f1:53:0d:00:c2: a9:06:f8:c1:21:35:2d:12:40:b6:81:88:d3:70:21:ca:06:18: 42:fa:e8:e3:b8:af:7e:54:e2:e6:09:6d:6d:83:93:7c:95:32: 11:23:9b:4f:53:4d:c7:ca:3e:c7:d3:37:8e:f4:db:5c:6e:10: c9:09:bf:1a:11:2d:82:87:73:0b:60:a2:4d:be:aa:55:40:27: 83:6d:97:5d:9e:2d:89:77:8f:19:fa:97:ca:ba:e6:92:51:ba: 3f:e5:7d:f9:64:97:a0:9f:11:1d:53:45:f1:5c:28:f3:fc:7c: a5:37:4c:34:00:9e:12:be:22:1b:e3:e6:3d:ee:72:01:02:31: db:36:33:36:de:bd:e3:4f:9e:09:a5:fe:d2:d2:f8:31:49:f5: 6e:15:a0:1c:c3:f3:3d:2a:dc:e1:92:95:c5:23:c5:d9:5c:61: 7b:2f:2f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGba05uT96oLrKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk ODFlZTdjYjQtNDJjNS00ZmI4LTlhMDgtY2EzMmIxYjVhNGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU7DcLlfBsxZCKjaNC44HT7uN34ppe+7FfiU LpqKiotbLJmESR448uhk0gNmZ7+T9bYfEn4/J6jbRxZ/tVQZGqACOkhCSJkbXJrV GjCpUCHwJmxqsigj7t/uLujQbkaFeDlDUV62AjD1EmHX5zLCgZRa3xfbiXHS1Ln1 VaggWtNvTeA/uJ/uCaHyw1kZpUqHd+bPSXR+V/ZHHtM1XQQGBm0JcRq4c9MiLiF3 kv4mfMLoqEPiVRB9IM0Dv0ceSWlIZ/nEIW5U1aLRoLhEq+lpUXNu3N1ecnXKNg9J 2G/xebtYcTQGGib9jILyAhdkMT8DiIaVwoYPogec0Z9DLjRdnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALgVf0cIUTCRP/i9R037cGEfwAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjM5OTdjMjYtZGM5YS0z NjViLTk2OTctY2E4ZTRmMDdiNmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSExTccQMKyiqlobrRKC9Zuz8uTx/w/dptcOnljA5dEh12V0bu3reZI jBqaBKX4RzFGnBzDf7eUHOUDHaBCYOmv3vjPxWmOFkVg6xvM8SSwO1RPaVPxUw0A wqkG+MEhNS0SQLaBiNNwIcoGGEL66OO4r35U4uYJbW2Dk3yVMhEjm09TTcfKPsfT N47021xuEMkJvxoRLYKHcwtgok2+qlVAJ4Ntl12eLYl3jxn6l8q65pJRuj/lfflk l6CfER1TRfFcKPP8fKU3TDQAnhK+Ihvj5j3ucgECMds2MzbeveNPngml/tLS+DFJ 9W4VoBzD8z0q3OGSlcUjxdlcYXsvL2M= -----END CERTIFICATE-----Generated at Sat May 10 10:24:22 2025 by rpki-client