$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa File: 90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa (raw, json) Hash identifier: MPTy9pw78awtqS7GE5yRENQZ+2P1ZOjeRxpIu1tEPZE= Subject key identifier: 62:23:25:A1:00:81:68:39:D5:04:64:B9:5C:C8:79:72:78:50:FB:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F59845111B56ACD82C900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.17.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:59:84:51:11:b5:6a:cd:82:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=34fb39fd-729e-47a7-bf01-d4bac797e3e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3f:ea:aa:0d:ea:80:0b:a2:fd:45:5a:e1:2b: 56:4a:ae:26:87:08:06:a9:a6:1e:b5:f6:5c:aa:c0: 50:37:bd:2c:96:7f:5b:a0:b4:94:bf:69:30:a5:60: b6:d4:a7:e8:0b:e6:be:dd:8d:89:78:bc:a0:c7:cf: 94:cb:6b:06:d5:dd:f9:73:0b:df:e6:a0:c6:9a:5f: b4:ff:fd:73:ec:4f:50:ae:e6:f0:b9:b9:23:1f:4c: 91:9c:5c:0e:29:62:c6:7d:cd:00:ce:d5:e8:1c:d4: f7:5b:24:2b:63:ee:7d:90:04:0f:35:64:a4:91:e6: ad:05:84:1e:ad:dc:a3:d7:9e:2f:9e:cf:0e:dc:79: 84:1a:75:84:2f:ec:81:c7:14:cf:cb:c3:41:c6:11: dc:ff:78:b2:8d:81:a8:f6:4b:67:cc:ec:06:01:13: 9c:3d:50:80:27:31:b7:38:a6:8e:57:37:c9:ab:84: 39:e5:e2:96:3b:51:9d:62:ae:75:cf:d6:e5:91:ea: b5:b5:3c:7e:bf:cc:82:8a:ca:a9:c4:e6:36:91:13: ac:c3:10:d2:25:f8:eb:8e:09:3f:71:f8:b5:7e:39: 74:92:0f:39:3f:90:77:51:e1:a7:e0:54:7b:33:b4: c4:04:77:24:e1:99:bd:73:7b:ec:3e:e1:dd:d0:c2: c1:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:23:25:A1:00:81:68:39:D5:04:64:B9:5C:C8:79:72:78:50:FB:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90ef2e04-ec2d-3a4f-993f-3fc4311d1f1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f2:cf:4a:d1:3c:38:70:94:b4:0a:fa:57:bb:2f:40:5d:24: c5:fd:e9:43:9e:77:34:74:97:e9:4f:83:b2:2b:d4:5f:30:4b: 29:3c:dc:ee:e3:80:77:1e:fc:82:35:db:88:cc:63:cf:9a:e9: fd:62:1b:e3:88:40:38:70:11:8f:36:f0:59:9b:38:63:00:cb: 7f:c4:a3:71:d0:b7:c2:96:66:cd:eb:58:56:d1:af:09:9a:04: 07:e7:30:59:98:4f:56:d2:10:d1:8a:9c:7a:5d:c5:0e:ab:56: 2b:54:1b:fd:7f:1a:18:46:85:75:2e:8d:91:ac:0a:6b:ff:47: 55:c9:dc:ee:3b:fb:18:81:e4:95:70:16:db:26:d7:f9:9e:72: 6c:d2:19:d4:37:d2:a1:9b:32:a3:4d:64:ab:29:4d:38:f5:ec: 49:d1:9b:95:3e:f0:b9:4d:7d:23:ed:5a:7c:44:38:9c:6a:41: b1:58:a1:c0:60:8d:5a:da:d5:26:b3:71:4f:54:0e:7b:57:52: f9:1b:30:84:e2:4e:14:bd:a2:45:14:a7:4d:05:36:9d:e4:22: 65:31:92:4e:fa:f2:a9:55:b1:8e:39:6a:da:53:76:42:dd:35: 77:4b:73:db:58:93:49:d8:1f:d8:3c:60:38:c1:1f:b4:2a:24: 8e:0f:15:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1mEURG1as2CyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MzRmYjM5ZmQtNzI5ZS00N2E3LWJmMDEtZDRiYWM3OTdlM2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz/qqg3qgAui/UVa4StWSq4mhwgGqaYetfZc qsBQN70sln9boLSUv2kwpWC21KfoC+a+3Y2JeLygx8+Uy2sG1d35cwvf5qDGml+0 //1z7E9QrubwubkjH0yRnFwOKWLGfc0AztXoHNT3WyQrY+59kAQPNWSkkeatBYQe rdyj154vns8O3HmEGnWEL+yBxxTPy8NBxhHc/3iyjYGo9ktnzOwGAROcPVCAJzG3 OKaOVzfJq4Q55eKWO1GdYq51z9blkeq1tTx+v8yCisqpxOY2kROswxDSJfjrjgk/ cfi1fjl0kg85P5B3UeGn4FR7M7TEBHck4Zm9c3vsPuHd0MLBzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIjJaEAgWg51QRkuVzIeXJ4UPu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTBlZjJlMDQtZWMyZC0z YTRmLTk5M2YtM2ZjNDMxMWQxZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhG0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGryz0rRPDhwlLQK+le7L0BdJMX96UOedzR0l+lPg7Ir1F8wSyk83O7j gHce/II124jMY8+a6f1iG+OIQDhwEY828FmbOGMAy3/Eo3HQt8KWZs3rWFbRrwma BAfnMFmYT1bSENGKnHpdxQ6rVitUG/1/GhhGhXUujZGsCmv/R1XJ3O47+xiB5JVw Ftsm1/mecmzSGdQ30qGbMqNNZKspTTj17EnRm5U+8LlNfSPtWnxEOJxqQbFYocBg jVra1SazcU9UDntXUvkbMITiThS9okUUp00FNp3kImUxkk768qlVsY45atpTdkLd NXdLc9tYk0nYH9g8YDjBH7QqJI4PFQU= -----END CERTIFICATE-----Generated at Tue May 6 23:26:27 2025 by rpki-client