$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa File: 831a6028-7886-3a30-8cc8-4d6dc7086da1.roa (raw, json) Hash identifier: LJ4U7MJIaJNzBSUYYy3+6snlYKo4+11Ehr4cES9MmXo= Subject key identifier: F0:4A:5F:26:1A:B0:9A:55:1B:F4:4C:7B:C2:FE:5D:3E:DA:36:93:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA2239065CB11CA1A5ED00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa Signing time: Thu 20 Feb 2025 18:15:18 +0000 ROA not before: Thu 20 Feb 2025 18:15:18 +0000 ROA not after: Wed 21 May 2025 17:15:18 +0000 asID: 7029 IP address blocks: 98.18.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:22:39:06:5c:b1:1c:a1:a5:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:18 2025 GMT Not After : May 21 17:15:18 2025 GMT Subject: CN=2df2437c-b905-4b8e-9b55-b92593d08cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:ce:dc:a4:c1:c5:2b:69:8c:57:11:3b:c3: 23:43:3a:01:2b:e9:82:98:05:cc:6e:da:61:c2:65: 09:5f:c6:81:25:c6:84:c5:7d:71:b9:c2:6a:9d:48: 2f:14:fb:90:59:5c:94:ef:cb:7f:45:16:84:9e:7f: c2:20:2d:04:77:82:52:8b:b0:cd:98:2a:8c:8a:f5: 2d:f4:56:4e:60:26:d5:8f:9b:c8:fd:0b:06:d6:f5: c9:1b:63:22:f7:df:45:7c:3a:4f:65:4d:94:97:a8: f4:15:97:fb:05:24:0a:f0:01:d8:64:2e:b0:a3:b8: 23:bd:c5:90:fb:ce:d6:74:9b:02:72:69:59:8a:d5: be:aa:5d:78:98:f4:f4:29:98:86:ff:3a:1c:54:85: fe:cf:59:e7:d2:bc:5f:14:c6:4a:b8:c9:cf:fb:d5: ec:f9:97:ea:14:24:8a:b4:7f:e2:64:a2:66:60:2b: d2:15:c9:96:2a:fe:b6:ff:f7:79:63:a7:16:5f:a2: 4d:56:be:ae:c0:8f:db:31:77:fd:e2:80:e8:0d:47: b5:40:19:41:05:9e:b9:89:a6:ae:18:55:7c:5d:82: ff:e7:84:99:39:ca:2c:48:69:9e:27:1c:ae:a8:6d: 87:ce:78:8a:8d:8c:56:96:03:11:3e:14:57:b2:98: 1f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4A:5F:26:1A:B0:9A:55:1B:F4:4C:7B:C2:FE:5D:3E:DA:36:93:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/831a6028-7886-3a30-8cc8-4d6dc7086da1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:fc:b3:07:9d:8b:33:46:46:f0:a9:3c:02:e2:8f:c4:0e:38: 67:69:78:4d:c7:96:ea:e4:94:34:64:8f:d0:59:72:8e:7a:2b: 88:dd:21:f4:ab:69:4f:9f:97:61:5e:9e:bd:49:30:af:5d:25: 36:ee:09:3d:8a:b0:ed:4b:75:49:46:2c:69:71:8a:a6:65:04: c7:dc:5f:6b:ca:38:eb:c6:8e:21:75:7b:a4:e4:d9:26:0d:76: e2:c4:d4:fd:04:b7:02:4a:36:8e:a5:74:9d:6b:63:fa:d6:64: 85:ac:fc:02:d0:d2:f1:7e:5b:b0:bb:ec:17:97:da:55:83:eb: 97:77:72:2b:36:be:aa:c0:63:9e:60:9e:fb:ca:e5:99:5d:e4: 9f:8d:a7:65:b8:88:cc:b7:20:3d:17:d5:18:02:1d:70:5b:ac: e0:be:7b:da:ca:10:9f:e3:0e:d8:f1:9a:a4:e0:65:f6:d0:95: a8:e6:f7:09:f1:e1:fe:fa:2b:c9:0f:63:36:49:1d:5c:4d:ac: 64:ac:9c:16:3e:17:fd:9d:59:b6:a1:a6:dd:01:1b:3e:e2:92: be:92:70:49:b4:95:96:b2:20:1e:66:c0:2b:ad:d1:1d:64:f6: 46:be:e6:ca:f7:43:d1:6d:96:e4:c7:85:40:33:57:50:6f:52: e5:89:05:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqiI5BlyxHKGl7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTUxOFoXDTI1MDUyMTE3MTUxOFowLzEtMCsGA1UEAxMk MmRmMjQzN2MtYjkwNS00YjhlLTliNTUtYjkyNTkzZDA4Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVfO3KTBxStpjFcRO8MjQzoBK+mCmAXMbtph wmUJX8aBJcaExX1xucJqnUgvFPuQWVyU78t/RRaEnn/CIC0Ed4JSi7DNmCqMivUt 9FZOYCbVj5vI/QsG1vXJG2Mi999FfDpPZU2Ul6j0FZf7BSQK8AHYZC6wo7gjvcWQ +87WdJsCcmlZitW+ql14mPT0KZiG/zocVIX+z1nn0rxfFMZKuMnP+9Xs+ZfqFCSK tH/iZKJmYCvSFcmWKv62//d5Y6cWX6JNVr6uwI/bMXf94oDoDUe1QBlBBZ65iaau GFV8XYL/54SZOcosSGmeJxyuqG2HzniKjYxWlgMRPhRXspgfywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBKXyYasJpVG/RMe8L+XT7aNpN1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODMxYTYwMjgtNzg4Ni0z YTMwLThjYzgtNGQ2ZGM3MDg2ZGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIH8swedizNGRvCpPALij8QOOGdpeE3HlurklDRkj9BZco56K4jdIfSr aU+fl2Fenr1JMK9dJTbuCT2KsO1LdUlGLGlxiqZlBMfcX2vKOOvGjiF1e6Tk2SYN duLE1P0EtwJKNo6ldJ1rY/rWZIWs/ALQ0vF+W7C77BeX2lWD65d3cis2vqrAY55g nvvK5Zld5J+Np2W4iMy3ID0X1RgCHXBbrOC+e9rKEJ/jDtjxmqTgZfbQlajm9wnx 4f76K8kPYzZJHVxNrGSsnBY+F/2dWbahpt0BGz7ikr6ScEm0lZayIB5mwCut0R1k 9ka+5sr3Q9FtluTHhUAzV1BvUuWJBXA= -----END CERTIFICATE-----Generated at Sun May 11 11:52:38 2025 by rpki-client