$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03051e94-f951-3883-bcff-7d1dd4b8408d.roa File: 03051e94-f951-3883-bcff-7d1dd4b8408d.roa (raw, json) Hash identifier: Nui54/RM7sZhiY+ddiSpUmjbiui+CMnDGWY5govmWf8= Subject key identifier: 92:CA:A0:5F:31:0A:A2:B5:99:BF:0F:0B:3B:50:48:5F:A2:46:F3:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211214B3F47130B6776AC29 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03051e94-f951-3883-bcff-7d1dd4b8408d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.22.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:21:4b:3f:47:13:0b:67:76:ac:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2c0a1279-17ce-496b-b86e-25705b998241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:01:d3:ea:b3:ae:38:6d:eb:23:53:31:67: 02:d1:07:ef:07:ac:8c:90:d6:f8:ad:9a:1a:d1:e6: a8:5d:9d:9d:e1:b6:43:7a:24:49:6b:77:8b:b6:60: fd:65:a1:2c:2f:a1:f5:4b:0e:d5:73:54:e1:90:9b: 47:99:43:00:95:7b:0e:7b:ba:0b:ae:47:57:74:6a: a5:45:00:5e:07:df:22:aa:b6:b2:55:e6:7b:d7:c5: 4f:9a:28:69:28:2d:bf:99:0e:98:ad:64:7d:94:95: 8a:8b:3c:68:39:eb:10:e5:64:d5:7e:fd:53:db:bf: ad:b4:19:a6:18:04:68:ce:9f:80:fd:3d:52:7c:e6: ab:64:d2:e0:21:29:10:b3:b4:cc:34:54:bc:c1:ca: 3c:79:ca:c1:e5:97:4d:c6:eb:88:69:cf:1c:02:77: d1:cb:45:f8:45:4a:c3:23:bc:40:50:72:b9:6a:3a: d1:80:22:c5:8e:e0:a8:2c:d3:63:1f:95:1e:d3:ac: a1:9a:cd:20:82:7f:d3:f4:10:ac:7e:5d:c3:ee:1d: 49:f6:c8:33:64:45:53:94:d5:57:9a:fa:b8:1e:e0: 0f:77:9f:50:6d:bb:2c:c1:07:9f:9d:ab:a5:eb:ab: 59:70:fc:28:63:49:26:b9:07:84:d4:a6:26:ab:b9: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CA:A0:5F:31:0A:A2:B5:99:BF:0F:0B:3B:50:48:5F:A2:46:F3:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03051e94-f951-3883-bcff-7d1dd4b8408d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a3:9c:b4:82:4c:a3:b6:1f:16:16:5d:f3:2f:3b:11:3a:39: df:be:9c:d8:c3:ec:aa:50:56:23:3e:08:bf:b4:06:74:c9:a6: a9:85:b1:a5:7b:c0:d7:0e:5e:92:62:b4:08:da:b4:0e:f9:03: df:91:10:9e:c9:9f:cc:74:0e:d6:46:8d:cf:84:8f:c6:bb:4a: fe:09:90:c8:bb:6d:7c:26:fe:76:29:1e:22:ef:df:92:20:5e: 06:d7:1d:a3:af:83:77:81:7e:79:44:88:55:99:f4:f9:61:2b: 79:64:3c:08:57:6b:23:5f:50:22:7e:2b:34:fa:9b:83:76:49: 59:4a:dc:df:db:e8:4a:06:2c:7c:c4:0a:8c:09:e4:e7:03:a2: af:49:4d:53:e6:41:e7:8d:dd:d2:ab:a6:ce:cd:ba:8b:46:af: f8:07:dd:bc:5d:7f:d0:16:f4:c0:88:a0:b7:00:49:d6:c4:9d: 59:a6:81:df:09:e7:56:a3:f6:9b:cd:e3:44:6b:b6:52:a5:6f: cf:b8:b5:7e:ba:d2:e1:43:e1:84:24:84:ed:22:7f:8f:d7:c1: 2d:04:08:b0:cb:0e:5e:c8:b2:ed:76:9a:14:a4:17:98:98:de: d1:d2:57:88:0b:45:0e:9c:5a:86:c9:b8:f9:b7:28:9e:1e:4e: a0:d9:62:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESFLP0cTC2d2rCkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MmMwYTEyNzktMTdjZS00OTZiLWI4NmUtMjU3MDViOTk4MjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZYB0+qzrjht6yNTMWcC0QfvB6yMkNb4rZoa 0eaoXZ2d4bZDeiRJa3eLtmD9ZaEsL6H1Sw7Vc1ThkJtHmUMAlXsOe7oLrkdXdGql RQBeB98iqrayVeZ718VPmihpKC2/mQ6YrWR9lJWKizxoOesQ5WTVfv1T27+ttBmm GARozp+A/T1SfOarZNLgISkQs7TMNFS8wco8ecrB5ZdNxuuIac8cAnfRy0X4RUrD I7xAUHK5ajrRgCLFjuCoLNNjH5Ue06yhms0ggn/T9BCsfl3D7h1J9sgzZEVTlNVX mvq4HuAPd59QbbsswQefnaul66tZcPwoY0kmuQeE1KYmq7lGHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLKoF8xCqK1mb8PCztQSF+iRvOlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDMwNTFlOTQtZjk1MS0z ODgzLWJjZmYtN2QxZGQ0Yjg0MDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhZ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqjnLSCTKO2HxYWXfMvOxE6Od++nNjD7KpQViM+CL+0BnTJpqmFsaV7 wNcOXpJitAjatA75A9+REJ7Jn8x0DtZGjc+Ej8a7Sv4JkMi7bXwm/nYpHiLv35Ig XgbXHaOvg3eBfnlEiFWZ9PlhK3lkPAhXayNfUCJ+KzT6m4N2SVlK3N/b6EoGLHzE CowJ5OcDoq9JTVPmQeeN3dKrps7NuotGr/gH3bxdf9AW9MCIoLcASdbEnVmmgd8J 51aj9pvN40RrtlKlb8+4tX660uFD4YQkhO0if4/XwS0ECLDLDl7Isu12mhSkF5iY 3tHSV4gLRQ6cWobJuPm3KJ4eTqDZYgI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:27 2025 by rpki-client