$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa File: ea353e60-f987-3dac-ab96-26c4bcf28808.roa (raw, json) Hash identifier: m4YbbxasJYEXsMVp/BwPIKhBTmdC0hQj4l+0uoe/E7o= Subject key identifier: 3B:13:B7:D5:70:56:0D:7A:A5:A7:D1:95:28:CC:8C:5F:15:0A:75:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7163A87593C6FFB7699E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.16.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:63:a8:75:93:c6:ff:b7:69:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=8727f970-8781-4156-b457-02023580d14f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0f:95:0a:e7:61:1f:70:d2:7e:63:2a:97:7c: 5c:23:db:bf:80:17:dc:64:69:44:86:ee:7e:82:da: ae:e3:34:0e:cc:85:1c:08:de:86:58:36:5e:09:b2: c3:b6:77:95:77:41:51:9e:17:90:2f:01:ee:17:58: c4:1b:48:76:0d:99:12:9f:1f:48:02:da:07:6a:60: 8f:0f:3f:75:e7:b4:08:50:91:04:c5:c1:74:20:d7: 05:03:21:b0:42:9e:ef:4e:5f:af:87:c2:1e:ff:80: cf:10:32:66:92:04:b4:3c:3d:9b:60:ca:fa:c9:53: 3b:1a:c6:46:1e:d4:64:8b:a6:44:57:ab:0a:ec:bc: f6:f3:ef:3e:d9:85:de:f5:47:65:5d:ee:3d:2d:be: 88:f0:e0:65:4d:f8:55:38:7f:15:43:c7:a5:ce:82: 83:c0:9e:bb:9a:0d:43:b8:a2:05:30:af:83:93:2c: 27:20:f3:46:42:09:d9:36:ce:82:3e:d5:58:7d:d8: 49:93:1e:2c:99:3e:98:6a:43:fb:91:f2:3b:7a:63: 02:5a:2b:79:c1:4c:17:c1:32:f2:d3:f5:df:d6:1f: db:92:bd:fc:81:31:9d:81:ad:69:1e:23:ad:6e:48: 3c:66:fe:b8:f3:b1:a0:5a:df:c9:c1:3b:77:9e:ff: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:13:B7:D5:70:56:0D:7A:A5:A7:D1:95:28:CC:8C:5F:15:0A:75:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea353e60-f987-3dac-ab96-26c4bcf28808.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:e1:9a:4a:a1:d3:87:0d:89:cf:31:d2:ff:db:2a:7b:64:7c: 33:57:76:ab:58:e5:23:1a:fd:d0:53:49:8c:ba:a5:b7:b7:34: 4d:29:fa:ce:25:de:75:42:6b:86:dd:62:fb:db:50:15:3d:5e: 04:b7:f0:c8:3a:9c:c2:07:04:a2:ab:53:d5:33:f7:69:2a:cd: be:8c:1b:0c:5f:ef:87:11:b4:5e:61:05:0d:8f:00:14:12:0d: 85:19:e2:4e:40:80:72:9e:d2:2d:57:f8:0a:bb:4c:89:be:bb: 4d:ef:c1:be:0d:2e:5a:9d:ef:d9:c9:8d:ff:4c:d5:cf:48:d6: 19:1d:0a:47:b3:c9:76:29:d2:0c:7e:10:08:70:20:f6:ac:fa: 5a:aa:21:8a:67:b1:31:1f:7f:15:0c:8b:a7:db:98:7b:7c:b3: 34:3e:6d:3e:7f:2b:7b:57:ae:f5:be:ab:a7:2c:d1:55:22:5a: 75:3f:e3:99:80:a6:2f:14:99:5b:fa:aa:58:55:92:d6:17:59: 67:af:6b:85:05:82:d2:e9:ed:44:ed:0d:4d:1d:12:dd:a4:b7: aa:a2:eb:f9:f5:05:15:b4:7d:a9:39:02:b4:2d:f9:e5:41:d7: f0:bf:e8:fa:19:8f:45:2a:46:d0:83:9f:37:cb:0b:c6:70:de: f1:73:5d:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWOodZPG/7dpngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODcyN2Y5NzAtODc4MS00MTU2LWI0NTctMDIwMjM1ODBkMTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ+VCudhH3DSfmMql3xcI9u/gBfcZGlEhu5+ gtqu4zQOzIUcCN6GWDZeCbLDtneVd0FRnheQLwHuF1jEG0h2DZkSnx9IAtoHamCP Dz9157QIUJEExcF0INcFAyGwQp7vTl+vh8Ie/4DPEDJmkgS0PD2bYMr6yVM7GsZG HtRki6ZEV6sK7Lz28+8+2YXe9UdlXe49Lb6I8OBlTfhVOH8VQ8elzoKDwJ67mg1D uKIFMK+DkywnIPNGQgnZNs6CPtVYfdhJkx4smT6YakP7kfI7emMCWit5wUwXwTLy 0/Xf1h/bkr38gTGdga1pHiOtbkg8Zv6487GgWt/JwTt3nv9J0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsTt9VwVg16pafRlSjMjF8VCnWfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWEzNTNlNjAtZjk4Ny0z ZGFjLWFiOTYtMjZjNGJjZjI4ODA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXhmkqh04cNic8x0v/bKntkfDNXdqtY5SMa/dBTSYy6pbe3NE0p+s4l 3nVCa4bdYvvbUBU9XgS38Mg6nMIHBKKrU9Uz92kqzb6MGwxf74cRtF5hBQ2PABQS DYUZ4k5AgHKe0i1X+Aq7TIm+u03vwb4NLlqd79nJjf9M1c9I1hkdCkezyXYp0gx+ EAhwIPas+lqqIYpnsTEffxUMi6fbmHt8szQ+bT5/K3tXrvW+q6cs0VUiWnU/45mA pi8UmVv6qlhVktYXWWeva4UFgtLp7UTtDU0dEt2kt6qi6/n1BRW0fak5ArQt+eVB 1/C/6PoZj0UqRtCDnzfLC8Zw3vFzXf8= -----END CERTIFICATE-----Generated at Sat May 10 22:56:20 2025 by rpki-client