$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa File: a76862bc-99e6-3f16-a88d-6b07293a09d3.roa (raw, json) Hash identifier: hcaIioDq0cxFhDgw5onbZCoaYWyi9sOr6bSEcgGu8Gs= Subject key identifier: C4:21:98:10:92:A1:16:51:84:92:70:1E:BD:29:73:5D:CD:F3:10:FE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A19CC99A14DC4D34CB880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.23.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:19:cc:99:a1:4d:c4:d3:4c:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=726fe1d7-8b63-4818-b10f-4808b80d1c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:12:ab:16:ba:99:1e:2d:23:eb:8c:3c:28: 7d:07:3f:bc:3a:f6:4f:f5:01:73:57:7b:7c:e9:6c: f2:8a:8a:61:94:03:29:82:44:20:c9:b4:c7:c1:fd: 12:55:26:e8:4d:4f:55:35:69:49:41:80:e2:57:51: ce:68:92:a1:47:2f:07:a8:11:2f:d7:57:c9:85:a9: c7:d8:78:00:71:76:ae:36:15:09:53:23:60:e3:aa: dc:ef:fc:8a:47:7d:ec:74:69:13:93:e3:85:55:5b: 49:cd:46:ae:e9:3c:11:8d:ea:46:d0:8e:c7:0a:ab: 8f:3d:13:23:b2:b1:08:9e:2b:34:70:be:6c:92:94: 5d:25:68:13:52:9a:b3:17:d9:35:6a:cf:96:2a:5d: a5:7f:8f:e9:21:de:0e:25:1b:5c:3e:e9:be:da:32: ee:ef:76:d6:06:b4:1f:a9:5e:86:09:d1:be:1b:2f: cf:c2:f0:08:ee:a4:9b:c9:a4:78:ec:d9:2c:59:72: fc:34:26:4e:1e:d0:73:45:9a:6a:54:b7:19:09:b3: be:61:c7:85:a1:5b:81:64:13:92:08:0c:6b:f2:a2: 92:14:72:2e:9a:7d:9e:a4:a4:e4:4c:3c:94:eb:ae: 49:58:25:9c:ec:74:6b:89:7b:7c:db:86:de:63:cf: 89:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:98:10:92:A1:16:51:84:92:70:1E:BD:29:73:5D:CD:F3:10:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:81:99:92:57:32:da:74:77:20:80:82:76:41:1d:51:5f:0a: 18:f1:eb:dd:ec:af:29:50:29:4a:54:b3:2d:0e:4b:c9:82:e4: 8a:cc:6b:9e:27:57:b3:5e:f0:3a:22:94:e3:89:6a:7c:3c:a4: 98:d9:ff:84:78:e3:77:cf:43:db:d0:b2:a4:45:7d:57:57:04: 70:7e:c0:1e:0f:b1:62:30:c1:bc:7e:e6:45:21:b6:e7:9e:25: 47:15:66:10:ad:28:b9:1b:63:42:c3:4f:b5:48:52:d9:3e:4f: 08:92:27:87:9d:2b:40:d0:5d:50:64:58:59:53:e0:de:90:17: c0:74:fb:3b:1b:20:c6:6a:c7:ac:4d:70:18:2b:5f:6f:0a:af: 87:9b:00:26:85:fd:d0:b4:6d:a9:c7:c2:00:c8:ae:a8:84:31: 34:f6:6c:ff:dd:79:a4:57:64:59:6f:22:13:e0:ae:d1:b8:d8: 53:ac:e4:93:c9:ca:8f:59:1c:65:6b:b2:cd:e6:00:48:3b:74: cc:f5:e7:80:ff:79:cc:eb:c9:72:9c:08:24:b5:cd:52:28:e8: 3e:45:71:61:a9:4f:92:ac:f6:e7:a0:39:88:ed:ef:ee:0a:7d: 9a:40:c4:47:f2:4d:29:fa:eb:b1:7e:30:37:30:30:5b:8d:05: a4:02:9d:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhnMmaFNxNNMuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NzI2ZmUxZDctOGI2My00ODE4LWIxMGYtNDgwOGI4MGQxYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8gSqxa6mR4tI+uMPCh9Bz+8OvZP9QFzV3t8 6WzyiophlAMpgkQgybTHwf0SVSboTU9VNWlJQYDiV1HOaJKhRy8HqBEv11fJhanH 2HgAcXauNhUJUyNg46rc7/yKR33sdGkTk+OFVVtJzUau6TwRjepG0I7HCquPPRMj srEInis0cL5skpRdJWgTUpqzF9k1as+WKl2lf4/pId4OJRtcPum+2jLu73bWBrQf qV6GCdG+Gy/PwvAI7qSbyaR47NksWXL8NCZOHtBzRZpqVLcZCbO+YceFoVuBZBOS CAxr8qKSFHIumn2epKTkTDyU665JWCWc7HRriXt824beY8+JjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQhmBCSoRZRhJJwHr0pc13N8xD+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc2ODYyYmMtOTllNi0z ZjE2LWE4OGQtNmIwNzI5M2EwOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiBmZJXMtp0dyCAgnZBHVFfChjx693srylQKUpUsy0OS8mC5IrMa54n V7Ne8DoilOOJanw8pJjZ/4R443fPQ9vQsqRFfVdXBHB+wB4PsWIwwbx+5kUhtuee JUcVZhCtKLkbY0LDT7VIUtk+TwiSJ4edK0DQXVBkWFlT4N6QF8B0+zsbIMZqx6xN cBgrX28Kr4ebACaF/dC0banHwgDIrqiEMTT2bP/deaRXZFlvIhPgrtG42FOs5JPJ yo9ZHGVrss3mAEg7dMz154D/eczryXKcCCS1zVIo6D5FcWGpT5Ks9uegOYjt7+4K fZpAxEfyTSn667F+MDcwMFuNBaQCndg= -----END CERTIFICATE-----Generated at Fri May 9 18:49:46 2025 by rpki-client