$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94cc6e17-76d8-31d5-8998-ec81490b35fc.roa File: 94cc6e17-76d8-31d5-8998-ec81490b35fc.roa (raw, json) Hash identifier: jNawRc6fYLzkNDUg/qVMm5gxR27i9Zhw2V9QDXqnnV4= Subject key identifier: 54:60:A3:5C:FF:E3:07:30:66:CA:81:CD:80:50:0F:F1:1D:8C:AC:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A14BB71908F3D5B4EED80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94cc6e17-76d8-31d5-8998-ec81490b35fc.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.18.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:bb:71:90:8f:3d:5b:4e:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=467532ba-8fdf-422f-8385-fe809d227f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:27:e2:61:74:8a:fd:42:86:37:48:94:e0:de: af:56:82:05:c5:e5:0c:76:34:09:76:e0:83:76:b0: c9:2b:a0:4b:0c:d8:18:61:1c:9f:f6:ab:c6:ec:24: f6:ba:d1:e7:d2:2d:3d:98:03:51:a8:a1:06:cc:47: 7a:6c:3b:c1:67:1f:87:d5:59:e0:24:02:22:5e:44: f7:41:4e:8c:68:13:3a:55:ba:33:df:ea:01:f3:8e: d4:9b:54:0f:2d:1f:31:87:53:8f:44:ab:74:e6:87: 81:e7:7f:e3:d1:0d:aa:00:16:74:54:5e:91:b0:2e: fe:91:fd:c1:31:57:1b:85:ea:11:59:15:0e:0c:26: 19:a7:70:f1:fd:2d:0c:a9:d7:b3:7b:14:19:ad:3e: 3d:72:13:0b:77:ab:e0:91:89:32:38:7d:3a:5a:f5: 68:61:0b:92:d9:bc:2d:93:59:32:cb:a0:3d:92:26: d6:8a:c8:c9:7b:df:ad:6d:c8:b3:8f:1d:ec:93:59: 04:5b:84:1d:cb:dd:0a:31:a0:f2:a5:3d:00:1f:31: e0:70:4a:e9:bb:45:f5:f6:6a:be:eb:b1:36:53:a7: ff:7b:09:b1:05:0c:b2:96:ee:02:3d:92:31:05:5f: d8:71:15:71:41:a5:fe:a9:fd:1d:e3:ff:e2:d8:22: 5b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:60:A3:5C:FF:E3:07:30:66:CA:81:CD:80:50:0F:F1:1D:8C:AC:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94cc6e17-76d8-31d5-8998-ec81490b35fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:6f:7f:7f:b4:30:b0:45:39:56:c5:b7:9e:5a:8c:eb:0b:ad: 0e:85:72:42:8e:43:f5:a1:f8:2f:88:d3:7d:77:12:44:e7:f9: 3e:50:66:af:dd:1e:f8:a8:d4:7b:62:cf:30:43:86:76:d4:60: ab:cc:c0:c6:6f:fa:c4:63:c7:10:ed:6d:b4:42:5f:31:43:5a: 10:b7:94:75:24:33:97:b1:dd:d7:17:4a:b0:78:0e:39:45:ac: 0e:81:5c:22:e5:f4:06:25:6d:b3:86:15:2f:71:ec:0a:6f:74: b0:ef:05:c3:64:46:b4:46:78:74:35:2c:66:d1:01:80:e1:bc: 8f:e6:bd:6d:a6:a6:46:59:d2:26:ac:8a:88:99:9d:04:c7:c1: d2:e8:17:5f:7f:bf:c6:c8:4a:7e:af:17:4f:ca:4d:ec:58:c8: af:b1:ef:6c:90:a3:76:b5:60:bf:26:51:8e:0b:63:04:03:19: fe:95:fc:04:a7:cf:49:2a:f3:70:80:0b:7b:66:36:47:6d:14: f3:ab:0c:87:62:07:06:20:02:b2:0f:ea:91:06:74:3e:83:d6: 7a:1a:97:32:98:3b:a3:c3:aa:79:25:1f:1e:4f:b0:a9:6f:7d: 5f:74:57:e6:d1:d5:57:9a:ec:4d:1a:5e:f8:67:e6:b3:ee:14: f4:67:d0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShS7cZCPPVtO7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDY3NTMyYmEtOGZkZi00MjJmLTgzODUtZmU4MDlkMjI3ZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSfiYXSK/UKGN0iU4N6vVoIFxeUMdjQJduCD drDJK6BLDNgYYRyf9qvG7CT2utHn0i09mANRqKEGzEd6bDvBZx+H1VngJAIiXkT3 QU6MaBM6Vboz3+oB847Um1QPLR8xh1OPRKt05oeB53/j0Q2qABZ0VF6RsC7+kf3B MVcbheoRWRUODCYZp3Dx/S0MqdezexQZrT49chMLd6vgkYkyOH06WvVoYQuS2bwt k1kyy6A9kibWisjJe9+tbcizjx3sk1kEW4Qdy90KMaDypT0AHzHgcErpu0X19mq+ 67E2U6f/ewmxBQyylu4CPZIxBV/YcRVxQaX+qf0d4//i2CJb2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRgo1z/4wcwZsqBzYBQD/EdjKzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTRjYzZlMTctNzZkOC0z MWQ1LTg5OTgtZWM4MTQ5MGIzNWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZvf3+0MLBFOVbFt55ajOsLrQ6FckKOQ/Wh+C+I0313EkTn+T5QZq/d Hvio1HtizzBDhnbUYKvMwMZv+sRjxxDtbbRCXzFDWhC3lHUkM5ex3dcXSrB4DjlF rA6BXCLl9AYlbbOGFS9x7ApvdLDvBcNkRrRGeHQ1LGbRAYDhvI/mvW2mpkZZ0ias ioiZnQTHwdLoF19/v8bISn6vF0/KTexYyK+x72yQo3a1YL8mUY4LYwQDGf6V/ASn z0kq83CAC3tmNkdtFPOrDIdiBwYgArIP6pEGdD6D1noalzKYO6PDqnklHx5PsKlv fV90V+bR1Vea7E0aXvhn5rPuFPRn0N8= -----END CERTIFICATE-----Generated at Sat May 10 21:05:13 2025 by rpki-client