$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa File: 1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa (raw, json) Hash identifier: v5xNQX7H1A/L19j8hLbN4ePgv9/KYvTipsqLo4rEibA= Subject key identifier: C8:CA:CD:2E:70:12:2E:BB:48:61:C4:BA:51:D3:E1:DF:6C:ED:2F:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11E45196DB3884FC35600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.20.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:45:19:6d:b3:88:4f:c3:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=46d5efdc-4b96-4744-af87-675a2444f9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:42:30:40:82:e1:9d:27:58:e9:9e:4d:b9:92: 1a:41:f4:24:81:c6:69:b6:e4:c4:b7:54:8e:ff:7d: 25:27:38:33:ad:28:85:19:be:60:a7:e9:81:49:ce: 28:8c:a7:49:3e:0a:46:9f:21:7a:e8:53:03:c1:13: 6f:19:0b:ba:93:39:0b:a8:50:c8:1f:1b:d9:07:88: 5a:27:16:e6:91:9d:3d:f3:5a:0d:db:bd:ce:e6:7c: e2:95:83:93:72:97:b5:91:8c:1d:29:84:1a:47:cf: 0b:9f:8f:5c:fa:0c:d3:2b:1c:86:1d:ce:20:3f:dd: 6e:01:42:f4:0a:41:47:c2:be:e7:8c:21:b2:b3:af: a4:01:85:8d:1a:64:6f:37:d2:85:02:f0:f0:3d:4c: 2f:13:3f:bb:60:5c:5b:46:56:79:49:dd:24:06:c6: bd:57:ea:96:11:83:f6:78:f6:7c:a4:6c:12:24:f8: 3c:e5:c6:f0:0f:65:69:80:fe:da:06:a7:1d:87:c5: 62:35:29:d8:11:8c:d7:25:b3:5b:a6:b8:ca:b3:93: 82:43:f2:7d:73:56:4b:12:f5:de:ba:a4:bb:e3:c6: eb:73:85:af:85:c6:14:3b:36:85:9c:e9:0f:69:47: 6a:bb:55:a3:db:26:b3:27:99:51:3a:75:62:ed:3a: 7a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:CA:CD:2E:70:12:2E:BB:48:61:C4:BA:51:D3:E1:DF:6C:ED:2F:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a1894d4-26e1-3bfd-9415-0a3a4a1a2eb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:95:25:50:3d:cf:a6:72:82:44:00:d0:9c:b2:d4:e1:43:a4: 0c:d2:93:7a:2b:13:30:fe:e3:38:b1:c0:ba:e7:f6:af:25:ec: a0:c4:74:76:31:7f:8c:e9:61:76:3e:91:70:c7:0f:cf:e0:c5: f3:40:e7:b8:9d:9c:f7:43:c8:ab:21:8e:97:a8:3f:62:20:d0: b8:56:52:9a:70:94:cf:86:52:19:44:17:d0:61:77:6d:03:36: d2:a4:9a:92:62:2b:e7:a8:3b:e8:9c:78:03:07:4e:39:b7:f9: a1:49:a3:6f:8f:6e:b3:72:3e:a6:9f:5c:ad:00:04:40:08:84: 83:8e:a6:9a:2f:83:87:db:6f:4b:87:44:80:27:04:a3:c5:a0: 15:96:55:81:c1:96:c5:d9:8c:dc:d4:5f:48:ae:c5:4d:f7:ba: f8:d7:3a:52:37:92:b5:0e:57:f5:ca:b9:b4:35:22:c8:30:6e: 4b:47:eb:94:ac:68:30:0b:73:4b:9c:09:f0:01:e2:66:34:e9: 8e:35:ac:55:ee:54:1e:06:b2:d1:5e:39:f2:b7:ed:c9:33:ba: c7:75:62:3c:00:7f:d3:08:dc:61:5c:d2:9a:8e:81:82:73:c4: a8:19:d7:27:8f:eb:5c:f0:5d:95:10:45:78:7b:99:4a:6d:8a: 42:3d:60:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R5FGW2ziE/DVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NDZkNWVmZGMtNGI5Ni00NzQ0LWFmODctNjc1YTI0NDRmOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEIwQILhnSdY6Z5NuZIaQfQkgcZptuTEt1SO /30lJzgzrSiFGb5gp+mBSc4ojKdJPgpGnyF66FMDwRNvGQu6kzkLqFDIHxvZB4ha JxbmkZ0981oN273O5nzilYOTcpe1kYwdKYQaR88Ln49c+gzTKxyGHc4gP91uAUL0 CkFHwr7njCGys6+kAYWNGmRvN9KFAvDwPUwvEz+7YFxbRlZ5Sd0kBsa9V+qWEYP2 ePZ8pGwSJPg85cbwD2VpgP7aBqcdh8ViNSnYEYzXJbNbprjKs5OCQ/J9c1ZLEvXe uqS748brc4WvhcYUOzaFnOkPaUdqu1Wj2yazJ5lROnVi7Tp6TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjKzS5wEi67SGHEulHT4d9s7S+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWExODk0ZDQtMjZlMS0z YmZkLTk0MTUtMGEzYTRhMWEyZWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaVJVA9z6ZygkQA0Jyy1OFDpAzSk3orEzD+4zixwLrn9q8l7KDEdHYx f4zpYXY+kXDHD8/gxfNA57idnPdDyKshjpeoP2Ig0LhWUppwlM+GUhlEF9Bhd20D NtKkmpJiK+eoO+iceAMHTjm3+aFJo2+PbrNyPqafXK0ABEAIhIOOppovg4fbb0uH RIAnBKPFoBWWVYHBlsXZjNzUX0iuxU33uvjXOlI3krUOV/XKubQ1IsgwbktH65Ss aDALc0ucCfAB4mY06Y41rFXuVB4GstFeOfK37ckzusd1YjwAf9MI3GFc0pqOgYJz xKgZ1yeP61zwXZUQRXh7mUptikI9YK0= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:17 2025 by rpki-client