$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa File: f1cbd0d4-d348-3aee-8309-0989123f7505.roa (raw, json) Hash identifier: SCTEdw3Mhuy95Fjr4n6RsPjyMlDtsJ82uUO4EBcsvvU= Subject key identifier: 38:C6:17:CE:3A:FC:BB:A8:4F:76:1C:80:56:8E:57:97:AB:3E:C8:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A150C228905C025172300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.22.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:15:0c:22:89:05:c0:25:17:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=1623c6ac-685e-4cdb-8676-d26e2cad40bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d9:43:b2:12:9d:82:dd:64:ae:d3:57:23:4c: 53:b6:5a:74:2d:76:27:aa:2a:cc:ec:18:cf:84:c7: ca:09:b7:0c:21:81:96:e0:4f:c8:f0:e6:64:e7:46: f9:98:d8:74:36:35:9d:3f:1b:0b:b3:fe:a6:bd:cc: 7a:24:ec:d6:f4:00:6a:5d:06:70:00:4a:5b:5e:41: 61:0b:20:61:01:55:a6:1b:83:a2:49:51:3e:4f:3b: b0:13:e5:99:43:57:ba:ea:3d:e3:9b:ab:ef:40:2d: 6a:d4:e2:25:c2:f0:67:9b:43:14:3e:c6:3f:38:01: e5:f7:50:45:69:d1:01:16:27:75:83:be:89:29:2d: 69:fa:e0:ab:8a:ba:c1:73:21:68:be:fc:32:a0:8d: 4c:05:2d:f7:30:69:70:7f:c0:19:38:ef:91:39:89: 4b:e3:fb:32:4f:90:fd:d1:b7:12:0e:a0:00:67:9f: 24:9d:8e:62:91:1a:a0:43:3a:a5:f1:01:74:cd:99: 5e:5a:b7:03:d5:44:21:d6:65:a6:aa:81:ba:59:06: 51:c9:10:ed:20:74:9b:10:47:61:bb:2c:9b:bb:97: 10:2a:11:ea:83:da:07:9d:9d:6c:84:b3:12:7f:a9: 57:7e:83:b4:74:e4:6d:40:ef:af:c9:9d:a2:dc:fc: 49:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C6:17:CE:3A:FC:BB:A8:4F:76:1C:80:56:8E:57:97:AB:3E:C8:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1cbd0d4-d348-3aee-8309-0989123f7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:0e:e4:5e:bb:ad:df:e0:2e:8d:0e:77:b9:a2:d1:b3:6c:df: 96:9e:f4:17:8f:e2:d2:d7:f2:20:c7:e2:71:cd:8a:c6:b7:24: 80:5b:d7:36:12:5a:a1:42:ee:e3:8a:a1:30:33:eb:d0:5b:8d: 0f:00:a4:bf:f8:93:f7:63:35:34:5f:6b:c5:55:bb:d7:c1:b5: 98:f4:b4:37:72:ff:60:02:30:4a:69:de:4a:89:12:d6:0e:bf: 8f:16:8b:78:7c:8c:f1:b6:26:c5:94:0e:e0:30:a9:c3:cf:36: d9:39:32:6f:61:43:20:e2:fd:e8:89:12:d5:56:b0:3a:13:df: dc:bf:d2:3c:fd:29:87:73:bb:27:c4:94:c3:23:a3:1f:f4:e4: da:f4:49:7e:da:e0:37:79:67:e4:fb:3a:25:20:b3:d0:a3:8b: 16:19:af:bf:07:b6:ee:49:1a:c8:93:db:c6:0f:9e:34:3a:ef: 78:58:2c:e7:ce:fe:8a:2b:23:3b:00:45:c9:29:ff:e7:b5:24: 5d:98:3e:26:ce:b9:14:4b:dd:e6:f6:25:fb:b6:fe:48:55:54: 4e:af:b8:3a:0e:84:0d:42:f3:e4:c3:3a:0d:c3:e9:4a:ea:52: 65:6e:66:39:55:70:12:65:93:a9:f6:da:f1:6f:ed:0d:30:0b: 4d:66:28:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhUMIokFwCUXIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MTYyM2M2YWMtNjg1ZS00Y2RiLTg2NzYtZDI2ZTJjYWQ0MGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtlDshKdgt1krtNXI0xTtlp0LXYnqirM7BjP hMfKCbcMIYGW4E/I8OZk50b5mNh0NjWdPxsLs/6mvcx6JOzW9ABqXQZwAEpbXkFh CyBhAVWmG4OiSVE+TzuwE+WZQ1e66j3jm6vvQC1q1OIlwvBnm0MUPsY/OAHl91BF adEBFid1g76JKS1p+uCrirrBcyFovvwyoI1MBS33MGlwf8AZOO+ROYlL4/syT5D9 0bcSDqAAZ58knY5ikRqgQzql8QF0zZleWrcD1UQh1mWmqoG6WQZRyRDtIHSbEEdh uyybu5cQKhHqg9oHnZ1shLMSf6lXfoO0dORtQO+vyZ2i3PxJUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjGF846/LuoT3YcgFaOV5erPsjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFjYmQwZDQtZDM0OC0z YWVlLTgzMDktMDk4OTEyM2Y3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhYuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgO5F67rd/gLo0Od7mi0bNs35ae9BeP4tLX8iDH4nHNisa3JIBb1zYS WqFC7uOKoTAz69BbjQ8ApL/4k/djNTRfa8VVu9fBtZj0tDdy/2ACMEpp3kqJEtYO v48Wi3h8jPG2JsWUDuAwqcPPNtk5Mm9hQyDi/eiJEtVWsDoT39y/0jz9KYdzuyfE lMMjox/05Nr0SX7a4Dd5Z+T7OiUgs9CjixYZr78Htu5JGsiT28YPnjQ673hYLOfO /oorIzsARckp/+e1JF2YPibOuRRL3eb2Jfu2/khVVE6vuDoOhA1C8+TDOg3D6Urq UmVuZjlVcBJlk6n22vFv7Q0wC01mKAE= -----END CERTIFICATE-----Generated at Sun May 11 09:40:50 2025 by rpki-client