$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa File: d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa (raw, json) Hash identifier: 6Od5EqKc7ZDkTAzqAwj3xwjK5gWGEZuRkWjUvS0SGGU= Subject key identifier: 7D:53:A2:7C:63:D5:60:5F:85:5E:D3:A4:41:5D:22:97:8C:45:90:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A27E344ACF6499F9EE100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 54142 IP address blocks: 98.16.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:27:e3:44:ac:f6:49:9f:9e:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=294bc652-6826-4ee9-ac7e-852ffef4bad6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d8:07:00:29:c6:91:c5:56:a0:8c:61:e6:bb: 70:b2:fd:6d:eb:d8:6e:e5:50:01:05:d6:98:bf:3a: 45:18:28:b6:f3:f7:7a:09:37:24:cd:a0:0b:3c:38: 1b:f9:79:20:8f:87:7c:c9:35:a8:8d:4f:d1:5d:9f: 84:ca:12:1a:cb:33:e5:1c:93:d6:50:31:85:8d:40: a6:f2:c5:ae:f5:0c:81:43:a7:87:53:13:b3:fc:5c: 98:35:6c:64:b7:f3:4a:a1:aa:bb:d0:1c:53:d8:ff: e6:21:41:e0:bd:7f:c4:0b:b9:ce:94:cc:bd:75:9b: 67:f6:59:50:2e:29:8e:6f:70:e5:9d:7b:23:e5:e2: a0:5a:df:57:fa:5b:d6:e7:2b:35:22:b6:d7:e3:8a: f4:72:c4:79:51:c2:ca:e0:00:4e:ba:ba:dc:96:b8: 59:d9:bf:46:09:b2:0f:78:76:17:77:b1:c5:90:d1: 67:ef:95:72:8e:c4:6b:ff:f3:06:51:4c:60:6c:09: 03:b6:85:35:3b:bc:b0:bc:88:94:9b:2a:76:bb:54: dc:6e:40:44:4c:af:a6:d5:8d:02:6f:31:42:eb:37: f3:c4:42:6e:5e:3e:ff:29:fc:7f:f9:3f:bd:b5:79: b8:45:1f:22:30:7f:88:88:cc:17:15:95:a1:e2:7e: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:53:A2:7C:63:D5:60:5F:85:5E:D3:A4:41:5D:22:97:8C:45:90:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d4:5c:83:b8:e4:45:a3:95:3a:cf:93:cc:ec:ad:8d:6d:49: 30:e0:e2:4f:98:84:a6:da:c8:62:ef:03:76:1b:05:d3:4b:eb: 8a:73:16:34:cd:bf:55:6f:4f:8a:6b:1a:a1:e4:b2:9d:0f:5f: 9a:40:45:f9:1b:da:a6:0a:f4:df:ac:31:bc:e5:6b:34:12:b2: f1:8d:bf:05:2e:d6:9e:b7:d3:93:7e:d0:30:1e:39:40:64:45: 71:f2:7d:4a:ba:e7:b1:a2:3c:16:ff:5c:c0:35:db:2e:d3:1e: 6f:01:39:43:d4:f7:41:26:f0:51:53:99:d6:5a:40:b7:0f:bc: 0e:d1:db:3e:93:78:aa:5c:a6:5c:b6:5e:07:6c:23:83:29:cf: 46:fc:83:96:b3:68:fe:35:eb:ee:85:ef:8c:bc:14:e0:2d:e5: 70:2c:36:30:2e:c7:f6:12:32:8c:12:b5:dc:1a:11:0a:ed:12: 83:08:91:c4:3c:0c:3d:4d:e3:f7:5f:c8:ca:bd:cc:6c:40:e0: 34:94:4d:35:eb:92:83:e1:9c:07:0c:e0:f8:ad:65:93:a8:98: 7b:4c:74:6d:75:19:ff:dc:2d:86:7a:85:7d:85:0f:b7:1e:ea: 4d:b0:b9:35:41:05:d5:7d:b7:11:6d:95:68:4a:c0:5e:e4:29: 81:2d:29:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSifjRKz2SZ+e4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Mjk0YmM2NTItNjgyNi00ZWU5LWFjN2UtODUyZmZlZjRiYWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNgHACnGkcVWoIxh5rtwsv1t69hu5VABBdaY vzpFGCi28/d6CTckzaALPDgb+Xkgj4d8yTWojU/RXZ+EyhIayzPlHJPWUDGFjUCm 8sWu9QyBQ6eHUxOz/FyYNWxkt/NKoaq70BxT2P/mIUHgvX/EC7nOlMy9dZtn9llQ LimOb3DlnXsj5eKgWt9X+lvW5ys1IrbX44r0csR5UcLK4ABOurrclrhZ2b9GCbIP eHYXd7HFkNFn75VyjsRr//MGUUxgbAkDtoU1O7ywvIiUmyp2u1TcbkBETK+m1Y0C bzFC6zfzxEJuXj7/Kfx/+T+9tXm4RR8iMH+IiMwXFZWh4n5FKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1Tonxj1WBfhV7TpEFdIpeMRZDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDljZjllOWQtNDVhNS0z YzQxLWE2NTQtOTYwNDI4Y2MyZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/UXIO45EWjlTrPk8zsrY1tSTDg4k+YhKbayGLvA3YbBdNL64pzFjTN v1VvT4prGqHksp0PX5pARfkb2qYK9N+sMbzlazQSsvGNvwUu1p6305N+0DAeOUBk RXHyfUq657GiPBb/XMA12y7THm8BOUPU90Em8FFTmdZaQLcPvA7R2z6TeKpcply2 XgdsI4Mpz0b8g5azaP416+6F74y8FOAt5XAsNjAux/YSMowStdwaEQrtEoMIkcQ8 DD1N4/dfyMq9zGxA4DSUTTXrkoPhnAcM4PitZZOomHtMdG11Gf/cLYZ6hX2FD7ce 6k2wuTVBBdV9txFtlWhKwF7kKYEtKdE= -----END CERTIFICATE-----Generated at Sat May 10 12:21:28 2025 by rpki-client