$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa File: 9e584fb4-55e6-349d-a4a2-854550eeff65.roa (raw, json) Hash identifier: dE5D+zw1nMCHNb8FF5CCj92jrmROMj4qTy+tdbxaaXQ= Subject key identifier: 3D:B5:50:C8:12:86:3C:DE:9E:07:39:EA:D0:CF:09:73:C2:9C:67:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1AF8EB333136B6B3FB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.21.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1a:f8:eb:33:31:36:b6:b3:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=dd6fe83e-7b58-4578-80f9-2d66cbfa44ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:da:58:bf:3e:58:e3:5c:1d:1a:ca:49:45: e3:5a:1b:3b:66:ca:db:1b:54:29:cf:7c:dd:dd:c2: a1:8b:2e:0e:13:a6:d9:8b:73:90:ca:30:a3:ad:74: 88:46:b4:99:65:8e:55:5d:ef:94:67:0b:ac:1e:aa: 86:a9:36:73:95:b0:43:5c:e2:f7:ac:e3:21:af:61: 10:c6:9e:f7:30:f9:53:fe:28:23:6c:1b:b7:d4:8a: 16:24:6c:b6:eb:58:f9:97:ec:fb:1a:25:ec:a3:80: 5e:23:e0:f3:49:48:d9:1e:74:13:dc:b6:8a:7d:a0: d2:5e:b6:43:b1:64:75:61:d7:53:c7:b5:41:b7:e8: 49:f9:fa:fe:3f:d8:c4:55:f7:67:a1:e0:50:62:95: 32:6b:39:aa:4b:f1:48:93:58:10:9b:37:99:13:6c: da:82:3c:b6:72:4a:1a:c5:e5:d1:3e:2e:5f:b4:2b: c5:d9:b8:f7:0e:de:32:d6:dd:72:60:79:32:2a:48: 68:ad:44:f0:75:9d:d3:c7:70:60:cb:16:6a:72:96: 5e:95:d6:d7:1b:87:dc:c3:1b:1d:54:45:ab:67:2b: de:44:8a:42:cf:5d:df:cf:e5:d7:cb:85:1d:14:d3: 84:e3:fd:bb:95:3c:2c:23:bf:ec:73:71:8c:2a:ea: 12:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B5:50:C8:12:86:3C:DE:9E:07:39:EA:D0:CF:09:73:C2:9C:67:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9e584fb4-55e6-349d-a4a2-854550eeff65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:dc:b6:14:61:14:e2:5b:88:57:e4:bb:e7:26:c5:e6:b8:6c: 02:08:ea:2a:38:95:96:69:dd:a4:65:47:3c:23:ef:02:32:9d: 47:78:a6:f6:f0:40:87:64:d2:c3:16:37:9b:f0:ed:24:67:ad: 66:a1:98:83:50:c5:1d:a3:10:6c:68:e6:26:21:12:9d:b4:84: 56:7a:36:ce:d9:d9:c0:f9:c6:79:69:49:1a:fa:b3:75:2d:41: e7:fa:df:72:a2:63:95:16:a7:a9:b6:e9:7c:32:d9:53:b0:e0: c7:34:b9:fd:e8:71:f0:21:6f:bd:56:ab:91:a8:6e:3e:6d:ab: 01:21:da:3e:81:8f:2b:ce:c4:a4:1c:a1:56:07:18:c8:57:19: fe:68:fe:23:25:45:fc:26:cd:34:fe:e8:1a:68:e7:6b:9a:74: 18:1f:26:e9:a6:b3:96:4d:94:21:47:22:0f:f7:4b:7c:41:97: 6d:3e:0d:67:75:b6:73:ee:fb:8a:7b:48:64:c8:af:65:7f:cc: 07:4a:a5:fa:75:ad:72:7c:37:33:c4:c8:8e:4a:ea:8c:5b:5d: 79:92:6a:bb:10:ff:5a:10:9d:8c:a6:9f:06:79:63:7e:93:75: 7f:23:ef:7a:72:30:bd:3c:83:86:7d:7d:54:64:dd:5b:0d:36: 9e:9d:1a:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhr46zMxNraz+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZGQ2ZmU4M2UtN2I1OC00NTc4LTgwZjktMmQ2NmNiZmE0NGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5PaWL8+WONcHRrKSUXjWhs7ZsrbG1Qpz3zd 3cKhiy4OE6bZi3OQyjCjrXSIRrSZZY5VXe+UZwusHqqGqTZzlbBDXOL3rOMhr2EQ xp73MPlT/igjbBu31IoWJGy261j5l+z7GiXso4BeI+DzSUjZHnQT3LaKfaDSXrZD sWR1YddTx7VBt+hJ+fr+P9jEVfdnoeBQYpUyazmqS/FIk1gQmzeZE2zagjy2ckoa xeXRPi5ftCvF2bj3Dt4y1t1yYHkyKkhorUTwdZ3Tx3BgyxZqcpZeldbXG4fcwxsd VEWrZyveRIpCz13fz+XXy4UdFNOE4/27lTwsI7/sc3GMKuoSNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD21UMgShjzengc56tDPCXPCnGcEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWU1ODRmYjQtNTVlNi0z NDlkLWE0YTItODU0NTUwZWVmZjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhUoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7cthRhFOJbiFfku+cmxea4bAII6io4lZZp3aRlRzwj7wIynUd4pvbw QIdk0sMWN5vw7SRnrWahmINQxR2jEGxo5iYhEp20hFZ6Ns7Z2cD5xnlpSRr6s3Ut Qef633KiY5UWp6m26Xwy2VOw4Mc0uf3ocfAhb71Wq5Gobj5tqwEh2j6BjyvOxKQc oVYHGMhXGf5o/iMlRfwmzTT+6Bpo52uadBgfJumms5ZNlCFHIg/3S3xBl20+DWd1 tnPu+4p7SGTIr2V/zAdKpfp1rXJ8NzPEyI5K6oxbXXmSarsQ/1oQnYymnwZ5Y36T dX8j73pyML08g4Z9fVRk3VsNNp6dGoY= -----END CERTIFICATE-----Generated at Sat May 10 16:40:29 2025 by rpki-client