$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa File: 040f0daa-4901-3c20-af2f-533b29edcc22.roa (raw, json) Hash identifier: BSbJWR/B+PIzG4VPO8wWDEzHkF6iR3U/KMfvthLq31A= Subject key identifier: B3:E9:62:C2:79:D1:F0:BB:46:6C:24:B4:6E:C5:17:13:CA:DC:55:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11C066F5E3731F3233CE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.16.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1c:06:6f:5e:37:31:f3:23:3c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=3456e675-c3b8-47ef-b744-ddbd5c67fca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:29:63:52:49:25:06:40:53:38:d8:2b:26:34: 5d:ec:cc:e8:a2:0f:b9:8b:49:c0:01:7c:3b:d7:ac: 42:5c:61:74:9c:be:ef:ae:56:56:4f:13:cb:cc:f6: 60:65:fb:d6:44:74:83:32:d7:2b:fd:02:7e:42:80: 92:31:cc:e2:cb:e6:5f:ce:af:01:ec:2f:33:bd:61: a7:bd:f4:6e:42:5a:0f:09:e7:92:b3:00:86:ac:c2: 5b:c7:3b:ff:a2:3f:6f:c3:82:c6:3a:62:4c:9e:af: a2:80:60:88:39:7f:4d:99:0c:ba:bc:0b:36:47:6d: 17:e2:51:9d:0e:35:6c:66:2d:c2:7f:45:8a:95:0d: 9a:df:7c:b9:38:10:a4:ae:f3:c5:28:7a:71:b2:1b: 9a:1e:69:aa:34:df:b9:99:19:50:da:e6:88:cb:a9: 51:c8:c2:c7:b1:92:f9:2c:92:81:13:74:12:24:0f: 42:aa:bb:6b:a6:4a:7b:34:9e:3f:f4:e9:65:d6:e0: 36:54:de:84:d7:ff:18:6a:52:3b:e1:94:ab:03:d1: fa:92:8a:99:f1:5a:b9:f5:b0:0a:10:06:f2:94:fb: ee:e9:60:20:f7:7b:85:f8:0c:8f:10:a2:f5:9f:07: 55:d6:7c:28:06:36:0c:4e:71:27:8c:7d:25:ae:34: 22:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:62:C2:79:D1:F0:BB:46:6C:24:B4:6E:C5:17:13:CA:DC:55:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/040f0daa-4901-3c20-af2f-533b29edcc22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3e:e8:4d:cc:8a:43:a5:2f:8a:25:e3:b6:76:c9:c2:7e:08: f3:a1:25:4d:35:66:33:21:85:2e:cc:ac:bb:65:1c:e3:27:e7: 33:a7:0f:9d:28:e2:99:df:a9:7b:ef:07:f6:28:7d:bd:a5:28: 30:57:01:07:3b:89:d2:c8:f6:28:cb:f9:47:a0:c6:b0:fd:35: 59:7e:d6:ab:cf:23:30:d2:d0:51:77:f4:f7:49:db:22:c6:6e: 83:5b:0c:6d:e2:03:c0:c2:1c:80:98:d3:b5:b8:7e:20:e1:40: 82:ee:d0:6c:24:2a:ca:18:3f:94:9b:f4:11:6a:93:00:84:84: ac:42:cf:e7:21:a9:7b:18:1e:94:3e:ba:46:6b:3a:7f:8a:bb: ec:ee:ce:34:09:09:ae:4f:b2:9c:73:0d:47:7b:ae:d0:9b:3f: 66:18:71:71:51:86:60:86:11:07:71:f1:f6:2e:af:f9:b1:06: e8:24:db:83:39:8c:b7:31:2b:4e:a7:82:72:83:1a:75:1d:e6: 5a:8b:0d:4a:e4:bc:8d:b4:b9:09:75:6a:2a:6c:6c:d8:89:a2: 91:0d:56:12:13:78:e9:42:23:4a:a0:4a:2d:23:ed:4a:4e:7c: c9:e4:a2:2d:35:31:c9:6d:43:db:92:85:87:3e:f6:fb:ce:03: d1:43:81:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RwGb143MfMjPOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MzQ1NmU2NzUtYzNiOC00N2VmLWI3NDQtZGRiZDVjNjdmY2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCljUkklBkBTONgrJjRd7Mzoog+5i0nAAXw7 16xCXGF0nL7vrlZWTxPLzPZgZfvWRHSDMtcr/QJ+QoCSMcziy+Zfzq8B7C8zvWGn vfRuQloPCeeSswCGrMJbxzv/oj9vw4LGOmJMnq+igGCIOX9NmQy6vAs2R20X4lGd DjVsZi3Cf0WKlQ2a33y5OBCkrvPFKHpxshuaHmmqNN+5mRlQ2uaIy6lRyMLHsZL5 LJKBE3QSJA9Cqrtrpkp7NJ4/9Oll1uA2VN6E1/8YalI74ZSrA9H6koqZ8Vq59bAK EAbylPvu6WAg93uF+AyPEKL1nwdV1nwoBjYMTnEnjH0lrjQikwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPpYsJ50fC7RmwktG7FFxPK3FWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDQwZjBkYWEtNDkwMS0z YzIwLWFmMmYtNTMzYjI5ZWRjYzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ+6E3MikOlL4ol47Z2ycJ+CPOhJU01ZjMhhS7MrLtlHOMn5zOnD50o 4pnfqXvvB/Yofb2lKDBXAQc7idLI9ijL+UegxrD9NVl+1qvPIzDS0FF39PdJ2yLG boNbDG3iA8DCHICY07W4fiDhQILu0GwkKsoYP5Sb9BFqkwCEhKxCz+chqXsYHpQ+ ukZrOn+Ku+zuzjQJCa5PspxzDUd7rtCbP2YYcXFRhmCGEQdx8fYur/mxBugk24M5 jLcxK06ngnKDGnUd5lqLDUrkvI20uQl1aipsbNiJopENVhITeOlCI0qgSi0j7UpO fMnkoi01McltQ9uShYc+9vvOA9FDgZc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:49 2025 by rpki-client