$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa File: baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa (raw, json) Hash identifier: 0pDQBmuZ1OT4IPkQve/6Pymo28XjPxSQcDdqv+BcJ0U= Subject key identifier: C4:5E:F4:6C:BD:09:FE:07:81:81:07:0E:80:F6:2C:D7:2D:B4:5E:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F59DC2775A386675BCE00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 98.17.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:59:dc:27:75:a3:86:67:5b:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=85b8fa36-8902-40c3-8243-08c834a941ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:a0:37:57:69:b0:64:f0:6b:f5:ea:3a:00: da:fe:43:d5:33:d8:e1:5e:c0:ba:f6:a3:74:1e:89: e9:45:4e:e3:b4:8b:c4:ae:ec:91:a6:1b:8c:09:d2: f2:9b:49:82:a0:96:3f:06:01:4e:b9:b8:c3:e0:36: 3d:bc:78:9b:ea:00:22:ed:e3:8d:23:b1:4c:02:be: 14:c4:f6:2a:d4:2f:70:78:e6:79:72:ca:e9:05:50: d3:20:cb:7b:fa:29:2f:8c:f4:18:97:49:ed:49:c7: 22:e2:d3:99:38:c5:b1:68:cd:d3:c6:8c:77:df:80: 59:03:92:9b:50:0a:3b:47:ae:44:73:98:3b:4d:8e: e5:f8:8f:e8:62:d1:22:5d:a0:21:b7:21:5d:00:f7: bd:cd:96:0a:9d:6e:5c:ce:33:e5:41:21:07:89:3b: 5b:c2:ce:aa:0a:87:85:d8:ae:a4:15:f4:7a:67:0b: 07:e2:31:9b:fb:05:11:d6:a6:b5:a5:93:f7:fa:9f: 68:18:b2:c8:47:ad:4c:3c:ec:fd:aa:63:bf:d4:96: b7:6b:55:4a:ee:03:af:1a:7b:2f:34:9a:83:ed:67: 06:38:95:7c:a3:eb:d6:d4:10:04:be:b4:38:44:c0: d7:62:1f:76:7b:53:1b:7f:44:94:27:5e:71:b6:91: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5E:F4:6C:BD:09:FE:07:81:81:07:0E:80:F6:2C:D7:2D:B4:5E:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:02:5e:ec:b8:c6:67:0e:3d:46:61:4a:fa:a4:20:54:a7:eb: 03:35:9d:0f:08:ae:b3:07:73:ed:b2:8f:95:3d:8f:41:29:f2: 9d:f5:41:60:4d:33:9b:02:ba:7c:25:ec:a0:8f:67:a5:a4:8d: ff:60:c4:2a:50:41:19:1d:21:97:88:b4:32:30:7b:91:c9:04: b7:24:a1:76:99:37:43:48:94:fe:ba:88:1e:2e:04:e0:03:96: 22:f6:67:4c:27:06:1c:85:73:69:18:8e:06:fb:bf:98:3d:7d: fd:50:54:b0:b1:81:1d:a8:51:33:ab:b8:6a:71:b5:2d:01:5d: 0f:fe:5e:3b:a6:a5:8f:83:b7:f9:0d:19:b4:2d:d4:82:4e:90: bd:e3:cd:a8:9d:80:8c:e4:f7:ff:ea:3a:38:d4:29:54:fc:82: cf:cb:95:8c:cc:da:ea:5e:3e:aa:ce:cb:05:08:80:54:19:66: 63:27:e7:ae:ec:b4:fc:57:08:bb:3c:33:1d:cf:96:a6:31:cd: 36:d6:f4:2e:19:a1:19:fa:d3:b0:f3:e0:8b:cb:40:fc:10:bb: c1:24:af:7d:e9:8d:d0:9d:2f:ea:63:9f:8f:15:f1:e2:4d:08: 60:03:2c:c0:4d:e8:d3:bf:20:2d:f0:9e:c9:d8:39:34:c8:70: 48:25:aa:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P1ncJ3WjhmdbzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk ODViOGZhMzYtODkwMi00MGMzLTgyNDMtMDhjODM0YTk0MWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzOgN1dpsGTwa/XqOgDa/kPVM9jhXsC69qN0 HonpRU7jtIvEruyRphuMCdLym0mCoJY/BgFOubjD4DY9vHib6gAi7eONI7FMAr4U xPYq1C9weOZ5csrpBVDTIMt7+ikvjPQYl0ntScci4tOZOMWxaM3Txox334BZA5Kb UAo7R65Ec5g7TY7l+I/oYtEiXaAhtyFdAPe9zZYKnW5czjPlQSEHiTtbws6qCoeF 2K6kFfR6ZwsH4jGb+wUR1qa1pZP3+p9oGLLIR61MPOz9qmO/1Ja3a1VK7gOvGnsv NJqD7WcGOJV8o+vW1BAEvrQ4RMDXYh92e1Mbf0SUJ15xtpGPkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRe9Gy9Cf4HgYEHDoD2LNcttF57MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlZDFiN2UtMWU0NS0z ZTBhLTk1YzAtMzdmZWI1N2EwMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYCXuy4xmcOPUZhSvqkIFSn6wM1nQ8IrrMHc+2yj5U9j0Ep8p31QWBN M5sCunwl7KCPZ6Wkjf9gxCpQQRkdIZeItDIwe5HJBLckoXaZN0NIlP66iB4uBOAD liL2Z0wnBhyFc2kYjgb7v5g9ff1QVLCxgR2oUTOruGpxtS0BXQ/+XjumpY+Dt/kN GbQt1IJOkL3jzaidgIzk9//qOjjUKVT8gs/LlYzM2upePqrOywUIgFQZZmMn567s tPxXCLs8Mx3PlqYxzTbW9C4ZoRn607Dz4IvLQPwQu8Ekr33pjdCdL+pjn48V8eJN CGADLMBN6NO/IC3wnsnYOTTIcEglqsQ= -----END CERTIFICATE-----Generated at Thu May 8 12:44:23 2025 by rpki-client