$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa File: f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa (raw, json) Hash identifier: syDtomcnnAEkCaSAA4jb1QmsetEChqnRSvruqcjhM9k= Subject key identifier: BD:33:0C:41:0B:FD:71:BA:26:18:9C:4E:33:0A:C6:32:62:19:E0:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A198DBADD69D78E467500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 98.16.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:19:8d:ba:dd:69:d7:8e:46:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=68445d79-bcea-4508-b4f5-6cf6aed3724f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:64:24:ff:99:75:07:2d:4d:c2:f7:df:4b: f2:1a:b5:45:57:66:4f:a0:d6:f3:23:cf:e7:85:9f: d0:04:33:37:04:29:a8:2a:87:16:bf:4e:97:89:52: c6:ca:b5:a9:dc:6e:11:21:69:88:46:82:d6:fb:81: e9:5a:18:f1:5f:c9:22:3b:5b:82:e5:80:f0:d6:45: 64:ea:9a:0c:ee:39:95:bf:90:78:e4:37:df:cb:28: 94:8f:95:d5:15:cb:06:08:06:4c:10:53:da:89:84: 83:02:3f:b1:3a:32:41:59:28:14:b8:2a:5f:23:75: 2a:5c:5f:08:d9:fb:b6:82:f2:44:a7:1d:98:db:4a: 6e:e1:a7:9a:4e:2b:12:80:1e:1a:07:df:60:e5:12: d4:b5:34:89:12:ac:58:e0:3e:ef:f4:78:a4:cc:ba: c4:43:7b:45:e5:67:7b:70:81:fb:c7:9a:26:d4:25: 87:90:07:63:3e:83:94:f4:ca:c1:01:17:af:f4:25: 11:24:3c:0e:9e:14:17:6b:20:5a:e1:4f:9b:0d:8c: 5c:9c:8a:92:21:e1:7b:a2:e8:22:30:13:c1:e7:17: de:78:a0:84:ee:fe:9d:24:36:f4:a3:6a:15:9b:0f: d6:b1:c9:46:e8:25:dc:04:ea:15:d7:5c:72:81:ba: 88:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:33:0C:41:0B:FD:71:BA:26:18:9C:4E:33:0A:C6:32:62:19:E0:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f1f3b89f-1504-3ff8-a4f7-b707e20d9238.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:31:79:3b:ff:4c:82:9b:a7:bf:10:36:14:f7:7b:9d:9b:fa: d8:49:ee:55:37:02:b5:af:4c:cf:ad:89:20:dd:30:08:49:7c: 59:85:70:5c:63:cf:bb:59:7b:37:55:f1:cd:f2:19:f1:56:44: fc:3e:b1:37:ed:da:2a:74:1c:06:62:be:c4:07:bf:c8:23:98: 0e:34:12:80:39:36:b8:f2:fe:18:e5:08:2c:54:fd:63:cd:b2: 8a:71:90:70:0c:f5:2e:68:49:6f:1c:96:98:77:01:ab:c9:ae: 37:4e:1f:6d:40:e4:3d:65:e8:b1:84:51:ab:31:da:83:8e:80: 4b:0b:a4:3c:51:48:66:58:f7:89:3b:66:d5:e2:5f:a7:df:90: 94:13:c6:73:bf:a9:14:7e:14:e9:08:0f:04:9a:16:7b:1f:82: 85:e2:1d:95:8d:77:86:0f:71:1d:c0:e7:2a:e8:75:63:a9:aa: 7e:70:bb:09:e9:8b:b8:6e:0b:e1:da:8c:9d:1b:d5:0a:53:1e: 7c:c5:86:46:93:92:5f:31:d8:d0:bd:72:90:45:11:68:8a:e0: ff:46:72:ea:ca:85:6d:85:08:af:c1:57:d6:ca:5c:7a:5f:41: 48:81:c9:ea:9c:14:66:cb:85:b3:a2:28:b3:89:c5:e4:dd:c2: 1d:ba:bb:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhmNut1p145GdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk Njg0NDVkNzktYmNlYS00NTA4LWI0ZjUtNmNmNmFlZDM3MjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV1kJP+ZdQctTcL330vyGrVFV2ZPoNbzI8/n hZ/QBDM3BCmoKocWv06XiVLGyrWp3G4RIWmIRoLW+4HpWhjxX8kiO1uC5YDw1kVk 6poM7jmVv5B45DffyyiUj5XVFcsGCAZMEFPaiYSDAj+xOjJBWSgUuCpfI3UqXF8I 2fu2gvJEpx2Y20pu4aeaTisSgB4aB99g5RLUtTSJEqxY4D7v9HikzLrEQ3tF5Wd7 cIH7x5om1CWHkAdjPoOU9MrBARev9CURJDwOnhQXayBa4U+bDYxcnIqSIeF7ougi MBPB5xfeeKCE7v6dJDb0o2oVmw/WsclG6CXcBOoV11xygbqIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0zDEEL/XG6JhicTjMKxjJiGeDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjFmM2I4OWYtMTUwNC0z ZmY4LWE0ZjctYjcwN2UyMGQ5MjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgxeTv/TIKbp78QNhT3e52b+thJ7lU3ArWvTM+tiSDdMAhJfFmFcFxj z7tZezdV8c3yGfFWRPw+sTft2ip0HAZivsQHv8gjmA40EoA5Nrjy/hjlCCxU/WPN sopxkHAM9S5oSW8clph3AavJrjdOH21A5D1l6LGEUasx2oOOgEsLpDxRSGZY94k7 ZtXiX6ffkJQTxnO/qRR+FOkIDwSaFnsfgoXiHZWNd4YPcR3A5yrodWOpqn5wuwnp i7huC+HajJ0b1QpTHnzFhkaTkl8x2NC9cpBFEWiK4P9GcurKhW2FCK/BV9bKXHpf QUiByeqcFGbLhbOiKLOJxeTdwh26u1A= -----END CERTIFICATE-----Generated at Sat May 10 07:12:10 2025 by rpki-client