$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/764f9975-eae7-3068-8ff3-cc54d81de699.roa File: 764f9975-eae7-3068-8ff3-cc54d81de699.roa (raw, json) Hash identifier: 5zwAQgNS7JfZ683Z6J0A/vLj5JssE5zNWq4P3yvNRjs= Subject key identifier: 5B:60:53:0F:49:2F:DB:3D:12:2B:1F:88:6E:94:17:F8:3A:29:99:0C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3EBBFB526744F7141AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/764f9975-eae7-3068-8ff3-cc54d81de699.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.20.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3e:bb:fb:52:67:44:f7:14:1a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=45ff83d7-2029-43e8-985a-3181f2939ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:ca:99:90:d6:fd:f0:e7:45:ad:6a:48:17: c9:3a:f7:49:52:5f:64:ac:f0:49:d4:02:ae:36:50: 33:47:fd:d0:57:0f:09:0f:ec:7d:84:ef:9b:60:49: ca:d6:7a:75:ef:ea:46:e6:a1:ca:a1:bc:3a:df:fe: 10:bc:d1:92:05:02:ca:12:2e:81:53:fe:75:35:0e: c0:ce:1c:54:18:6c:06:1b:c4:65:90:8c:19:92:00: 86:fb:8a:f1:e3:43:63:49:1d:1f:04:bb:14:2d:ca: 0b:29:52:ff:f8:01:74:0a:63:4f:30:40:0d:38:11: ac:2a:01:0a:e3:68:08:9a:dc:2f:4e:00:1f:7f:89: f4:13:ff:40:8f:83:68:a9:72:c3:0d:b0:b4:33:4e: d5:b1:38:1b:83:f6:8e:56:11:d3:95:5f:bd:59:20: 3d:20:51:45:aa:aa:67:4c:dd:c5:dd:d5:5f:61:d3: 92:51:75:7a:f9:69:02:b2:7d:a3:31:43:e6:09:0a: 8b:dd:c1:8e:fa:8c:2c:a4:b9:75:6b:90:0f:be:22: 4a:ee:3f:fe:68:7c:9f:f8:85:ed:d6:80:2e:47:aa: cb:4d:a2:28:10:1c:bd:45:76:77:4d:cb:84:b0:56: 95:8d:ec:b3:b5:e5:dd:b9:3d:78:90:7e:4b:68:0d: 8a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:60:53:0F:49:2F:DB:3D:12:2B:1F:88:6E:94:17:F8:3A:29:99:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/764f9975-eae7-3068-8ff3-cc54d81de699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:08:35:e5:79:81:53:27:53:d8:c8:71:74:5b:98:92:c3:13: 09:0b:c9:a7:47:ac:1f:cd:da:ef:15:82:fb:8e:84:de:ec:d0: 9a:c6:5a:d7:af:c0:f8:03:ca:40:50:cd:30:05:b7:4f:f4:90: da:08:87:94:96:82:56:df:e5:13:76:2c:bd:b3:db:fc:1d:e3: 82:7d:9d:1c:03:bf:3a:bc:9d:26:56:ee:da:d7:4c:77:80:8c: 3f:b5:8a:7b:44:3d:b6:47:4d:72:e1:69:66:46:1a:1a:bb:0a: d7:05:c8:ad:97:06:df:3a:15:15:9d:c2:4f:a6:28:77:37:1a: ca:48:b7:2c:34:0c:05:85:9a:a9:30:17:34:af:13:a5:00:59: 75:0d:5b:83:99:88:b1:cf:27:88:4d:7e:b8:7c:f7:f1:e7:02: 11:d9:8e:58:2d:ae:09:35:7f:0c:92:12:43:a4:62:8c:ed:63: d0:3d:74:ef:10:19:d7:b5:af:8b:05:3d:0f:21:4e:97:87:37: fc:e2:1f:91:48:de:97:c7:5b:d0:bb:a0:19:5c:08:9e:4a:8b: 92:29:0e:89:4d:45:e1:50:7f:58:58:f9:88:c0:68:ed:ef:a9: 03:74:3f:d8:5c:9e:8e:8c:4d:32:83:5e:6c:65:bf:51:d3:ab: 67:8e:08:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj67+1JnRPcUGsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDVmZjgzZDctMjAyOS00M2U4LTk4NWEtMzE4MWYyOTM5Y2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWDKmZDW/fDnRa1qSBfJOvdJUl9krPBJ1AKu NlAzR/3QVw8JD+x9hO+bYEnK1np17+pG5qHKobw63/4QvNGSBQLKEi6BU/51NQ7A zhxUGGwGG8RlkIwZkgCG+4rx40NjSR0fBLsULcoLKVL/+AF0CmNPMEANOBGsKgEK 42gImtwvTgAff4n0E/9Aj4NoqXLDDbC0M07VsTgbg/aOVhHTlV+9WSA9IFFFqqpn TN3F3dVfYdOSUXV6+WkCsn2jMUPmCQqL3cGO+owspLl1a5APviJK7j/+aHyf+IXt 1oAuR6rLTaIoEBy9RXZ3TcuEsFaVjeyzteXduT14kH5LaA2KmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtgUw9JL9s9EisfiG6UF/g6KZkMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzY0Zjk5NzUtZWFlNy0z MDY4LThmZjMtY2M1NGQ4MWRlNjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQINeV5gVMnU9jIcXRbmJLDEwkLyadHrB/N2u8VgvuOhN7s0JrGWtev wPgDykBQzTAFt0/0kNoIh5SWglbf5RN2LL2z2/wd44J9nRwDvzq8nSZW7trXTHeA jD+1intEPbZHTXLhaWZGGhq7CtcFyK2XBt86FRWdwk+mKHc3GspItyw0DAWFmqkw FzSvE6UAWXUNW4OZiLHPJ4hNfrh89/HnAhHZjlgtrgk1fwySEkOkYoztY9A9dO8Q Gde1r4sFPQ8hTpeHN/ziH5FI3pfHW9C7oBlcCJ5Ki5IpDolNReFQf1hY+YjAaO3v qQN0P9hcno6MTTKDXmxlv1HTq2eOCIg= -----END CERTIFICATE-----Generated at Sat May 10 05:11:23 2025 by rpki-client