$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa File: c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa (raw, json) Hash identifier: 5OZiomN5ZiRaX9ERJVAzGg9ykSnLIpNsc2ZlKi0jnUY= Subject key identifier: 94:5E:B4:9D:0A:A2:D3:11:04:EE:11:CA:A1:49:FF:F5:A7:F9:B3:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849C0A4CCF519D4FEE822BF6180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.23.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:cc:f5:19:d4:fe:e8:22:bf:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=8a2fbb63-bd69-4941-a4d5-b0f6e7021dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1a:7f:9b:85:5b:d4:a2:54:80:dd:43:ab:e7: 1d:9b:d5:b2:b3:08:02:54:fb:99:91:47:83:dd:98: 02:40:43:1b:59:fb:00:5c:fb:55:60:24:37:e9:d5: 8f:7a:a7:c8:06:56:9f:41:cc:d8:54:03:df:d4:53: 69:84:6c:6d:42:32:5c:6c:89:74:9d:ad:72:7d:5b: f1:fa:61:ed:10:c6:87:ad:e2:34:1d:ce:fb:e9:22: 0d:2c:3a:63:08:b9:1e:dd:70:4d:3a:bd:f8:f4:95: 9d:f1:11:46:8e:2b:a9:bc:6c:de:a0:31:06:2f:77: 9e:f5:cf:bf:50:a3:74:67:83:a2:a3:dc:a1:86:cd: cf:e5:a9:0b:f2:95:49:77:89:9e:0f:ee:29:c4:2f: 21:b1:37:af:0a:9d:68:5e:6b:57:ac:fd:bd:d6:9e: e7:7e:88:7f:7c:f2:77:7c:cd:67:5f:ea:f8:f7:fc: 89:d4:36:f8:d2:4e:d3:4b:44:b1:35:ab:6a:cb:9c: c4:c8:2e:a9:66:7b:8a:9a:53:fd:09:b1:4c:bb:42: 60:2d:fb:f5:5a:6e:2a:02:f4:81:87:68:10:87:7e: b5:25:6a:c5:72:fd:0b:a2:74:4b:e2:d8:33:49:68: 6a:52:2a:77:1f:79:4d:3f:0b:5a:27:2e:26:2b:90: 44:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:5E:B4:9D:0A:A2:D3:11:04:EE:11:CA:A1:49:FF:F5:A7:F9:B3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2f8c846-2a08-3af6-94b5-09e9c3faa2f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d2:d5:fd:55:46:dc:ce:96:3e:17:00:e2:1f:d7:79:ab:f6: 36:b0:d1:ba:11:9e:80:c2:5a:fc:90:04:d1:38:53:8c:c9:61: 84:4d:70:11:fd:5f:55:57:b6:18:a8:2d:00:8c:0d:67:a9:36: 30:61:37:c1:72:67:4c:b7:01:72:40:29:43:65:04:f3:6b:80: 95:98:dd:8c:9b:7a:25:de:11:bd:2a:3d:4e:3e:9b:e4:45:c2: 31:ab:be:57:27:da:44:d9:26:7e:c8:39:dd:49:a0:78:22:a3: 75:0c:c4:b0:b5:4b:27:6a:ab:9d:3c:63:34:52:85:1e:16:22: b2:89:f4:ab:fe:1c:c0:65:75:a9:d2:77:d3:f9:01:00:d5:e3: 63:a1:5c:66:ad:21:75:b0:23:4e:f4:81:d3:fa:7d:ee:74:eb: ff:57:2f:fa:c1:b3:ca:db:e4:62:70:69:68:23:35:8b:b2:17: 6c:e5:ee:49:bc:37:0b:d0:0b:60:95:17:53:73:82:cd:b1:49: 19:7e:aa:e5:a3:40:01:ca:85:73:eb:2b:90:b9:3c:7e:1e:56: 02:03:36:99:d4:47:dc:6f:7c:2c:09:11:75:8b:0f:48:7d:f3: ee:63:3a:e1:03:40:31:06:f7:ba:1c:2f:78:de:34:1d:97:7e: 71:bc:4c:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApMz1GdT+6CK/YYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk OGEyZmJiNjMtYmQ2OS00OTQxLWE0ZDUtYjBmNmU3MDIxZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRp/m4Vb1KJUgN1Dq+cdm9WyswgCVPuZkUeD 3ZgCQEMbWfsAXPtVYCQ36dWPeqfIBlafQczYVAPf1FNphGxtQjJcbIl0na1yfVvx +mHtEMaHreI0Hc776SINLDpjCLke3XBNOr349JWd8RFGjiupvGzeoDEGL3ee9c+/ UKN0Z4Oio9yhhs3P5akL8pVJd4meD+4pxC8hsTevCp1oXmtXrP291p7nfoh/fPJ3 fM1nX+r49/yJ1Db40k7TS0SxNatqy5zEyC6pZnuKmlP9CbFMu0JgLfv1Wm4qAvSB h2gQh361JWrFcv0LonRL4tgzSWhqUip3H3lNPwtaJy4mK5BEAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRetJ0KotMRBO4RyqFJ//Wn+bPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJmOGM4NDYtMmEwOC0z YWY2LTk0YjUtMDllOWMzZmFhMmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbS1f1VRtzOlj4XAOIf13mr9jaw0boRnoDCWvyQBNE4U4zJYYRNcBH9 X1VXthioLQCMDWepNjBhN8FyZ0y3AXJAKUNlBPNrgJWY3YybeiXeEb0qPU4+m+RF wjGrvlcn2kTZJn7IOd1JoHgio3UMxLC1Sydqq508YzRShR4WIrKJ9Kv+HMBldanS d9P5AQDV42OhXGatIXWwI070gdP6fe506/9XL/rBs8rb5GJwaWgjNYuyF2zl7km8 NwvQC2CVF1Nzgs2xSRl+quWjQAHKhXPrK5C5PH4eVgIDNpnUR9xvfCwJEXWLD0h9 8+5jOuEDQDEG97ocL3jeNB2XfnG8TIE= -----END CERTIFICATE-----Generated at Tue May 6 18:45:32 2025 by rpki-client