$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa File: cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa (raw, json) Hash identifier: ynDel0twlPgIn9uYdjITSS/WQSIPUdeINSNlhOVYCGY= Subject key identifier: 0B:1B:2E:96:BC:03:43:A3:EA:66:C1:95:D8:BE:0B:DB:B5:7F:A1:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A149C00FCE639A62E6880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 98.17.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:14:9c:00:fc:e6:39:a6:2e:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f099960c-cc7b-41bd-b2a1-ffa5511f3109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:d8:4b:44:a6:d9:7b:be:8f:0e:d4:ec:b0: f4:43:e0:d5:01:c9:55:bc:bd:7d:73:eb:e4:87:13: 4e:37:90:f7:61:85:25:d6:c1:01:f9:fb:2a:3c:11: a7:10:2a:7d:f8:e8:74:b1:1d:dc:ce:01:85:5e:b2: 5d:ed:29:c1:f0:7a:84:b8:fa:b5:dc:e4:11:ee:16: 6d:b8:db:e5:00:00:de:27:d0:cf:37:86:fc:e2:71: 08:06:3b:ca:56:a5:7e:ee:73:9f:5f:7c:37:91:88: 34:f3:95:56:9b:c3:cb:d3:27:3f:74:db:50:93:13: 04:e9:49:9b:02:e5:e6:17:2b:6f:41:38:a2:4d:7d: 80:f5:fe:ed:52:16:d3:b6:4f:05:a7:d4:10:44:7b: 69:cc:90:f0:77:a5:12:2a:95:a5:e1:4b:55:9c:6e: 5e:32:a7:49:94:04:d5:ed:89:12:c3:b3:93:d7:32: 5a:05:bb:51:0f:7a:d9:90:b0:38:a9:07:06:ae:6a: 13:2b:ee:b7:a3:a5:35:31:66:01:b7:5e:59:36:0d: 0c:59:55:a6:fb:6f:40:e8:8a:72:2a:92:8b:8a:c9: 8a:e1:4a:ca:39:a0:f2:d3:3a:98:f0:de:85:04:90: 12:b4:55:09:97:c0:1b:db:72:b5:68:22:cd:6d:7f: a8:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1B:2E:96:BC:03:43:A3:EA:66:C1:95:D8:BE:0B:DB:B5:7F:A1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cbcc6ffb-86ac-3e04-8f93-b750acbb8e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:01:00:dd:57:fd:f5:fb:ae:e5:ac:1b:85:f8:87:82:58:71: 80:3e:04:8c:36:fe:69:bf:0b:85:6d:e4:26:ec:73:9b:18:7c: 7b:c2:dc:63:47:af:1c:77:58:df:10:83:5b:2a:bb:30:50:dd: 96:b4:42:cb:89:c4:64:c0:cb:b5:a9:b4:98:4d:2b:88:29:f1: 5b:7c:30:57:18:4d:a6:ed:4e:ac:24:42:01:66:da:1e:00:1b: 2b:7d:72:dd:1f:70:1c:3f:28:6a:c9:c0:61:61:d2:f9:c3:11: 74:39:2f:00:22:db:27:7e:d0:99:fa:5d:f0:9c:05:bd:77:69: 5a:95:ce:1f:72:0c:6c:53:3d:e4:a9:bc:8a:cd:0b:06:bb:aa: ee:1c:05:78:84:11:b4:2a:d6:be:47:e3:be:1e:ba:00:44:6d: 18:e2:bc:8c:0f:73:d1:16:66:e8:be:50:81:35:39:b1:ec:4d: c2:d0:ac:07:7b:8a:02:77:c7:11:51:88:f5:2e:16:30:7b:5a: 5a:08:8c:e2:5b:c2:b2:82:28:c3:99:b3:f4:88:6c:e8:01:0c: c0:f8:6b:4f:d7:12:da:27:86:82:c7:62:00:a2:a2:7e:9f:2f: 90:2f:ce:42:20:70:8a:80:90:10:8c:b2:3c:a9:46:52:25:01: 91:e1:c3:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShScAPzmOaYuaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjA5OTk2MGMtY2M3Yi00MWJkLWIyYTEtZmZhNTUxMWYzMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDHYS0Sm2Xu+jw7U7LD0Q+DVAclVvL19c+vk hxNON5D3YYUl1sEB+fsqPBGnECp9+Oh0sR3czgGFXrJd7SnB8HqEuPq13OQR7hZt uNvlAADeJ9DPN4b84nEIBjvKVqV+7nOfX3w3kYg085VWm8PL0yc/dNtQkxME6Umb AuXmFytvQTiiTX2A9f7tUhbTtk8Fp9QQRHtpzJDwd6USKpWl4UtVnG5eMqdJlATV 7YkSw7OT1zJaBbtRD3rZkLA4qQcGrmoTK+63o6U1MWYBt15ZNg0MWVWm+29A6Ipy KpKLismK4UrKOaDy0zqY8N6FBJAStFUJl8Ab23K1aCLNbX+oEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsbLpa8A0Oj6mbBldi+C9u1f6GnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2JjYzZmZmItODZhYy0z ZTA0LThmOTMtYjc1MGFjYmI4ZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMBAN1X/fX7ruWsG4X4h4JYcYA+BIw2/mm/C4Vt5Cbsc5sYfHvC3GNH rxx3WN8Qg1squzBQ3Za0QsuJxGTAy7WptJhNK4gp8Vt8MFcYTabtTqwkQgFm2h4A Gyt9ct0fcBw/KGrJwGFh0vnDEXQ5LwAi2yd+0Jn6XfCcBb13aVqVzh9yDGxTPeSp vIrNCwa7qu4cBXiEEbQq1r5H474eugBEbRjivIwPc9EWZui+UIE1ObHsTcLQrAd7 igJ3xxFRiPUuFjB7WloIjOJbwrKCKMOZs/SIbOgBDMD4a0/XEtonhoLHYgCion6f L5AvzkIgcIqAkBCMsjypRlIlAZHhw9M= -----END CERTIFICATE-----Generated at Sat May 10 22:06:12 2025 by rpki-client