$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa File: 7df32cde-57a3-3204-a1a7-165e477b27bc.roa (raw, json) Hash identifier: wpLXy5fvTqoKpDueM8eUiaKZ2dkxY4/bddO4gTKMX1s= Subject key identifier: 7D:1E:A8:9B:4F:BB:8E:1D:A3:CC:C0:7D:CA:70:95:2C:B8:8B:49:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A121528E067F9C3EB3106 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:12:15:28:e0:67:f9:c3:eb:31:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=a20b6893-268d-46a8-8787-dab8196daad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2d:f0:2f:1e:7e:eb:b9:32:3d:31:7d:26:18: f3:ca:f4:fb:65:23:d0:a9:96:66:93:a9:bc:67:00: 5d:2e:e2:da:20:38:dc:bb:df:86:ac:98:47:b1:94: 0d:70:b2:98:35:70:3a:5c:51:de:3d:ee:e6:aa:d1: b4:f0:fb:17:59:4c:3d:09:4d:c4:c6:58:c5:99:c6: 9d:64:85:26:fa:6b:d7:b0:72:1c:87:9c:fb:b1:3a: a9:71:9f:d2:61:d9:79:f4:f1:1e:7f:77:87:08:e0: 1c:e5:f3:ea:df:e2:25:e9:15:bc:a8:8f:6b:f9:48: a9:22:ae:09:47:bb:72:e5:80:d2:c5:cb:3a:36:d9: 82:85:02:c7:ee:a1:b1:c3:ea:5f:91:cc:74:32:40: 3c:8b:1d:b1:d7:2e:57:1f:bf:d4:65:7a:eb:08:54: 48:00:b7:35:fe:6f:61:e1:5f:4f:ae:b9:3c:9b:a3: 1b:41:d6:47:5c:d8:f2:ca:38:29:a6:26:00:d9:f4: cc:c0:15:86:9d:b1:4d:db:63:18:d3:e2:06:8d:1d: 62:ec:aa:49:c8:de:e2:c9:eb:e0:69:f2:b8:c7:60: e1:19:89:5a:14:61:60:c7:44:5a:fe:8c:cf:94:26: 34:52:a2:f9:46:10:ba:a4:10:56:90:6c:8b:6c:04: 32:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1E:A8:9B:4F:BB:8E:1D:A3:CC:C0:7D:CA:70:95:2C:B8:8B:49:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:2f:58:66:bf:39:2b:13:21:60:94:c7:a8:d7:4a:f2:1c:2e: 7c:30:8f:ae:43:8a:8e:d2:cc:17:2b:a9:97:e6:5f:ab:cf:17: 37:4b:9a:c4:6f:e7:ba:f2:47:e1:e6:a6:bb:1c:e6:01:a8:db: 2a:b6:cb:f2:a3:58:50:cc:75:1c:8a:23:bc:cb:df:fb:b2:a3: dd:7a:22:0b:ae:66:e1:76:da:92:2b:58:2d:d1:e0:94:4f:c5: 08:a9:d0:9b:85:8d:33:d2:b8:57:0b:69:4c:44:1a:20:84:3a: cf:31:22:22:66:1b:35:d0:9c:cc:bc:d0:b0:79:f0:3f:77:fe: 64:ad:b0:bc:e0:73:54:cd:9b:57:fa:49:d9:0d:7f:12:e4:b6: 98:7c:56:3c:91:6e:86:f6:c3:a9:e9:b5:ed:15:8a:b1:61:c6: 22:1a:73:0d:0a:94:7b:8a:dc:f0:aa:e5:6a:f3:9d:dd:1e:20: 11:7b:ba:19:fd:4e:bb:b2:2e:99:7a:99:fc:14:65:82:91:fa: 2e:56:33:13:29:a9:73:ac:93:e5:5c:99:e3:4a:8d:c0:e5:cd: c6:92:af:92:d6:9a:46:08:1d:3e:26:5d:5e:3a:7d:af:c9:ac: cf:1e:f0:8c:7f:27:f4:a9:98:e0:04:c2:85:69:14:e1:64:49: 7f:aa:92:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhIVKOBn+cPrMQYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YTIwYjY4OTMtMjY4ZC00NmE4LTg3ODctZGFiODE5NmRhYWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC3wLx5+67kyPTF9JhjzyvT7ZSPQqZZmk6m8 ZwBdLuLaIDjcu9+GrJhHsZQNcLKYNXA6XFHePe7mqtG08PsXWUw9CU3ExljFmcad ZIUm+mvXsHIch5z7sTqpcZ/SYdl59PEef3eHCOAc5fPq3+Il6RW8qI9r+UipIq4J R7ty5YDSxcs6NtmChQLH7qGxw+pfkcx0MkA8ix2x1y5XH7/UZXrrCFRIALc1/m9h 4V9Prrk8m6MbQdZHXNjyyjgppiYA2fTMwBWGnbFN22MY0+IGjR1i7KpJyN7iyevg afK4x2DhGYlaFGFgx0Ra/ozPlCY0UqL5RhC6pBBWkGyLbAQyDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0eqJtPu44do8zAfcpwlSy4i0mLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RmMzJjZGUtNTdhMy0z MjA0LWExYTctMTY1ZTQ3N2IyN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAvWGa/OSsTIWCUx6jXSvIcLnwwj65Dio7SzBcrqZfmX6vPFzdLmsRv 57ryR+Hmprsc5gGo2yq2y/KjWFDMdRyKI7zL3/uyo916IguuZuF22pIrWC3R4JRP xQip0JuFjTPSuFcLaUxEGiCEOs8xIiJmGzXQnMy80LB58D93/mStsLzgc1TNm1f6 SdkNfxLktph8VjyRbob2w6npte0VirFhxiIacw0KlHuK3PCq5Wrznd0eIBF7uhn9 TruyLpl6mfwUZYKR+i5WMxMpqXOsk+VcmeNKjcDlzcaSr5LWmkYIHT4mXV46fa/J rM8e8Ix/J/SpmOAEwoVpFOFkSX+qkuA= -----END CERTIFICATE-----Generated at Wed May 7 06:28:23 2025 by rpki-client