$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa File: 1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa (raw, json) Hash identifier: CeRskZB7UjEvmxbLLJJAW8obrDJ7KlbG7UKBNEfuO/0= Subject key identifier: F7:2E:1A:93:86:23:88:4B:90:CB:1A:84:BD:ED:9F:8F:AD:E0:8C:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F299F6385171C6D33F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.22.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f2:99:f6:38:51:71:c6:d3:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=87534872-fc77-4ee0-8dd7-a4c976f79e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:94:64:98:6b:0d:0d:e0:ad:e3:36:ec:8d: 68:b1:06:26:16:84:88:a7:fd:ed:89:be:bd:47:c3: 91:0e:81:6b:68:17:fa:8d:65:bb:ca:66:b5:5d:d3: 8e:25:77:25:19:e6:43:71:33:32:28:6d:b5:6c:58: 66:90:02:50:46:87:b5:8d:fc:67:85:67:b5:df:b9: dd:c8:50:25:23:db:37:e6:d9:f7:97:bb:fa:f8:1e: 45:c4:1d:ee:95:26:ba:f2:fe:4b:9d:4e:34:dd:2d: 26:1b:b1:a4:ab:a6:f6:3d:9f:e2:a4:92:c5:e0:0f: 47:a5:b0:c7:d1:2b:40:38:4e:b1:65:26:28:f3:24: bc:67:b3:09:4f:81:a6:1e:90:ed:1c:9a:13:bc:18: b7:a2:cd:a2:f1:56:2e:b7:af:3a:2b:71:6d:29:8e: e7:88:4b:98:48:f7:ce:f0:05:c2:3c:a9:96:73:93: 83:81:70:58:13:99:28:9f:69:6b:8e:50:cf:5c:8a: aa:04:4b:65:52:80:91:61:37:41:bf:10:27:2f:eb: db:8a:23:df:57:61:42:86:49:cb:39:43:98:61:f2: 8b:e0:c9:7b:90:8d:4f:d5:24:69:b6:4f:b6:84:71: 75:1a:fa:27:d8:70:f9:9f:c7:30:57:8a:17:42:89: 36:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:2E:1A:93:86:23:88:4B:90:CB:1A:84:BD:ED:9F:8F:AD:E0:8C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1722a3bb-8be5-3b30-8e15-ee7fe3b3354a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:d1:6e:e6:76:0e:15:5c:31:34:ab:48:33:ff:92:82:1b:a8: 51:bd:1b:2a:b2:a9:37:56:96:ad:f3:90:5a:07:9d:16:69:41: 2c:73:a8:7e:ba:4b:a3:83:bc:36:3b:a0:27:47:48:ed:19:36: 91:52:60:ba:82:cb:67:7e:04:8a:aa:16:d2:46:16:61:cc:0a: b9:4a:56:be:64:b8:21:ba:7c:c0:b2:13:66:c7:28:43:55:0e: 67:ba:7f:1c:d4:9d:64:80:cb:32:a0:e0:13:28:08:d1:50:03: 42:d2:0f:9d:1a:38:b7:a2:39:61:3d:d8:27:6a:08:8a:c9:6c: 81:17:8e:30:bf:f6:9b:24:8d:89:cf:32:05:db:19:68:d8:fa: 93:4b:10:28:73:12:95:b2:54:ba:f9:7c:70:92:5b:48:c7:5c: c8:68:8a:e6:f9:b9:7e:fe:17:cf:69:cb:ea:86:c6:85:05:60: 6e:32:5d:08:ed:d0:1c:a1:a6:53:1b:a9:cb:10:99:2c:7a:50: 40:98:dd:e6:43:fb:31:04:af:1a:04:b3:a7:97:a0:f6:cf:f8: 67:18:9e:af:b3:8a:c3:ae:c7:56:0a:e2:6d:76:cb:9a:9d:9c: ca:71:3d:1e:93:ec:26:9d:fd:53:cf:38:6b:d6:63:3e:8a:91: 85:0f:43:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPKZ9jhRccbTPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODc1MzQ4NzItZmM3Ny00ZWUwLThkZDctYTRjOTc2Zjc5ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwueUZJhrDQ3greM27I1osQYmFoSIp/3tib69 R8ORDoFraBf6jWW7yma1XdOOJXclGeZDcTMyKG21bFhmkAJQRoe1jfxnhWe137nd yFAlI9s35tn3l7v6+B5FxB3ulSa68v5LnU403S0mG7Gkq6b2PZ/ipJLF4A9HpbDH 0StAOE6xZSYo8yS8Z7MJT4GmHpDtHJoTvBi3os2i8VYut686K3FtKY7niEuYSPfO 8AXCPKmWc5ODgXBYE5kon2lrjlDPXIqqBEtlUoCRYTdBvxAnL+vbiiPfV2FChknL OUOYYfKL4Ml7kI1P1SRptk+2hHF1Gvon2HD5n8cwV4oXQok2EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcuGpOGI4hLkMsahL3tn4+t4IwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTcyMmEzYmItOGJlNS0z YjMwLThlMTUtZWU3ZmUzYjMzNTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzRbuZ2DhVcMTSrSDP/koIbqFG9GyqyqTdWlq3zkFoHnRZpQSxzqH66 S6ODvDY7oCdHSO0ZNpFSYLqCy2d+BIqqFtJGFmHMCrlKVr5kuCG6fMCyE2bHKENV Dme6fxzUnWSAyzKg4BMoCNFQA0LSD50aOLeiOWE92CdqCIrJbIEXjjC/9pskjYnP MgXbGWjY+pNLEChzEpWyVLr5fHCSW0jHXMhoiub5uX7+F89py+qGxoUFYG4yXQjt 0ByhplMbqcsQmSx6UECY3eZD+zEErxoEs6eXoPbP+GcYnq+zisOux1YK4m12y5qd nMpxPR6T7Cad/VPPOGvWYz6KkYUPQ8A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:09 2025 by rpki-client