$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa File: 12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa (raw, json) Hash identifier: R15z002aGgmSiau+mMsQqAPhjjYeIklCEZ5DgMBIWA8= Subject key identifier: 8F:4D:39:63:B0:7D:73:B9:3B:5A:4E:BB:B5:A6:7A:61:1E:0C:C0:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7163395223096F122C5400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.21.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:63:39:52:23:09:6f:12:2c:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=56e246c2-c49c-4f64-94e9-f0aee82c84aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:50:30:75:4e:95:d5:56:fc:86:bf:db:84:f3: 36:94:c6:0b:01:19:a7:72:9b:bc:7f:c0:7d:88:a3: ea:5f:38:a6:a7:a0:7d:a7:10:b5:3b:c3:25:8d:14: e0:53:71:80:af:31:36:14:82:6b:59:d3:3c:99:0f: af:79:6b:d6:5c:d5:45:69:45:bf:5e:16:5f:4a:c6: 26:3a:3f:6f:f7:76:dc:5b:e8:95:3e:cd:bc:69:58: 6c:32:0b:49:01:3f:73:32:15:f3:14:ec:18:12:c0: 79:31:fc:2d:16:09:5a:b9:81:74:a6:a7:3c:5c:f8: bb:73:b8:a7:42:34:e6:be:d0:68:da:fd:1f:05:77: 2a:82:cd:3b:15:07:f6:b9:a4:cf:d2:95:ec:5e:3a: 63:ea:bf:c7:e7:ea:5e:2f:fc:9b:73:da:9c:b1:76: 35:b8:3c:b6:ed:b7:f0:f7:f2:4e:ae:16:b8:4c:84: 81:29:10:6a:f8:dd:2d:a3:ce:3c:dd:90:77:01:79: 4b:59:1d:4d:a6:d7:ff:98:ed:1b:89:5b:54:38:6b: f9:c1:3a:0b:74:b2:c4:b4:32:0f:23:ff:50:d6:fe: 06:ff:fe:56:8e:86:7b:d5:b9:8a:84:df:70:a8:59: 06:50:60:a9:a9:9e:b4:e2:24:95:d7:fc:a1:6b:95: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4D:39:63:B0:7D:73:B9:3B:5A:4E:BB:B5:A6:7A:61:1E:0C:C0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/12a2a5ef-dd19-3ad4-93a3-1d3340c57be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bc:4f:8c:75:b4:cb:df:18:3e:61:0e:46:92:01:2d:20:90: b3:e9:e6:71:76:80:c6:52:09:fb:c5:04:fe:4f:59:d6:73:ca: ea:9a:e7:ab:ed:29:dd:e5:52:d2:46:b0:d0:63:8e:33:ad:30: 8f:10:29:68:46:ff:d1:42:db:ff:b5:30:28:4d:c2:cf:44:3a: fd:ab:29:58:13:aa:78:99:2e:68:1f:67:fd:89:54:04:c2:70: f1:09:f6:7c:0d:94:a0:ea:05:82:4e:c5:a7:40:d8:23:22:ff: 76:51:de:33:ee:7c:8a:db:dc:d0:1b:5c:0d:a8:f6:29:75:38: 7b:12:d6:21:58:1b:78:f7:c7:07:74:4d:51:4b:1b:bd:85:56: 0c:3f:b5:33:ed:93:a0:a5:cb:3f:94:e7:c2:58:eb:64:94:62: 08:f9:39:3a:6d:bc:e4:64:3d:ec:b4:65:f0:8e:69:7f:7b:5e: e6:da:4b:8e:68:34:61:c7:57:e8:7f:3b:f8:01:32:d4:38:f3: a8:b7:9f:8c:78:4e:4a:b6:5f:24:04:fb:fe:1f:6a:72:c3:df: 59:02:7a:f9:53:fc:2b:4f:fc:db:f6:b1:67:60:f9:be:6a:cd: 72:1f:4a:f0:86:3c:2d:9d:8b:eb:6a:b6:0a:cb:ef:3b:12:ad: 8f:33:e1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWM5UiMJbxIsVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NTZlMjQ2YzItYzQ5Yy00ZjY0LTk0ZTktZjBhZWU4MmM4NGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFAwdU6V1Vb8hr/bhPM2lMYLARmncpu8f8B9 iKPqXzimp6B9pxC1O8MljRTgU3GArzE2FIJrWdM8mQ+veWvWXNVFaUW/XhZfSsYm Oj9v93bcW+iVPs28aVhsMgtJAT9zMhXzFOwYEsB5MfwtFglauYF0pqc8XPi7c7in QjTmvtBo2v0fBXcqgs07FQf2uaTP0pXsXjpj6r/H5+peL/ybc9qcsXY1uDy27bfw 9/JOrha4TISBKRBq+N0to8483ZB3AXlLWR1Nptf/mO0biVtUOGv5wToLdLLEtDIP I/9Q1v4G//5WjoZ71bmKhN9wqFkGUGCpqZ604iSV1/yha5UozwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9NOWOwfXO5O1pOu7WmemEeDMCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTJhMmE1ZWYtZGQxOS0z YWQ0LTkzYTMtMWQzMzQwYzU3YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhWoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK8T4x1tMvfGD5hDkaSAS0gkLPp5nF2gMZSCfvFBP5PWdZzyuqa56vt Kd3lUtJGsNBjjjOtMI8QKWhG/9FC2/+1MChNws9EOv2rKVgTqniZLmgfZ/2JVATC cPEJ9nwNlKDqBYJOxadA2CMi/3ZR3jPufIrb3NAbXA2o9il1OHsS1iFYG3j3xwd0 TVFLG72FVgw/tTPtk6Clyz+U58JY62SUYgj5OTptvORkPey0ZfCOaX97XubaS45o NGHHV+h/O/gBMtQ486i3n4x4Tkq2XyQE+/4fanLD31kCevlT/CtP/Nv2sWdg+b5q zXIfSvCGPC2di+tqtgrL7zsSrY8z4Sg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:28:27 2025 by rpki-client