$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa File: 1fddced0-2e72-3596-8537-ffc44a66bfd2.roa (raw, json) Hash identifier: +GkX3tIpEsel+u9CE+yEbnt8JXUPs3u2ROp85JDEJfk= Subject key identifier: 3B:01:75:58:EA:6A:EE:EC:15:13:9C:19:9C:48:39:BA:7C:2F:65:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30645A01D713A504559600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa Signing time: Tue 21 Jan 2025 20:37:55 +0000 ROA not before: Tue 21 Jan 2025 20:37:55 +0000 ROA not after: Mon 21 Apr 2025 19:37:55 +0000 asID: 7029 IP address blocks: 98.19.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:64:5a:01:d7:13:a5:04:55:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:55 2025 GMT Not After : Apr 21 19:37:55 2025 GMT Subject: CN=aafd4c8d-bbec-4278-81cd-d5e8e85a5782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:1b:5e:1b:82:f9:b6:32:81:a0:55:64:18: 08:21:c6:92:e5:47:bd:b7:d0:e5:87:0b:fb:b2:cb: 69:92:ae:95:79:2a:de:33:f8:6c:de:a3:06:46:68: 36:ca:2b:71:cb:1b:55:21:63:63:8d:1b:62:31:60: b7:e1:59:00:b8:c2:b9:22:f6:40:a1:36:23:4e:63: b3:88:be:25:e8:66:d4:45:60:0a:37:91:9d:a8:43: e6:cd:9f:0a:20:16:c4:6c:5e:01:6d:ab:90:5f:90: c3:a8:4f:cf:83:2a:31:88:ae:33:3c:55:d9:31:f9: 12:b1:a9:48:9e:10:10:f8:e1:23:c0:d7:81:62:c4: 79:bc:c3:92:48:5b:b3:4d:e9:88:92:f4:c4:d5:7b: c7:34:16:ee:ff:08:4e:6a:39:51:5e:8a:67:eb:0b: 45:a3:e8:43:fb:0e:c3:0c:4e:c2:b2:9b:0b:e3:29: d0:c4:61:3f:04:82:d8:a7:01:d8:98:f9:78:0a:dd: ac:20:6d:79:2e:b9:f9:80:a9:7c:1c:5e:04:0b:f0: 9a:47:88:f9:8b:93:47:36:12:7c:5b:c0:75:8a:3e: 97:17:76:8c:be:d9:3f:58:a4:72:24:7f:3b:85:b5: c6:51:8d:4e:ce:b5:38:3c:78:d5:9a:0e:ad:bc:22: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:01:75:58:EA:6A:EE:EC:15:13:9C:19:9C:48:39:BA:7C:2F:65:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1fddced0-2e72-3596-8537-ffc44a66bfd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:9d:80:47:a4:79:1a:e4:34:c2:fc:81:53:38:2f:f8:e4:97: 6e:c0:46:9c:ea:d4:f1:32:4f:b0:3b:1c:68:a5:12:96:11:f2: e9:ee:2e:7c:62:17:05:0d:bd:8e:24:6f:0e:dd:ce:9b:06:c0: d2:79:2b:09:17:82:dc:fa:23:51:4c:fd:af:c4:9b:67:a7:2f: 1f:f9:34:6b:af:d4:ed:1e:3b:ab:7f:bc:f5:32:39:ca:98:6f: e3:4d:f2:09:00:71:c0:ba:a0:24:b3:cf:15:3c:f8:8b:a5:10: af:e7:f1:1a:b1:10:36:05:0d:6c:ee:ee:6a:6c:67:b9:7b:91: 09:3b:4e:6d:be:85:1d:8b:cd:df:12:2c:23:b2:b1:8f:cc:ca: a3:d5:47:88:e1:20:15:e4:9e:df:b9:46:45:1d:31:6d:25:04: 34:ed:98:f3:42:66:d1:bd:24:90:0f:7d:e2:ac:2f:fc:f7:d0: 60:81:08:d7:e0:fa:ce:0c:5e:c6:3a:c2:c7:66:e7:44:1e:77: fe:a8:73:fd:6b:56:b6:1a:06:31:c6:db:4e:34:d0:48:de:a4: 4a:31:80:00:83:1c:75:d1:4d:ec:7c:34:ae:f4:7c:04:5e:8e: 31:a4:e4:d0:d9:cd:e4:53:94:dd:f6:50:0e:fb:dc:a0:46:0e: 03:de:ab:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMGRaAdcTpQRVlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc1NVoXDTI1MDQyMTE5Mzc1NVowLzEtMCsGA1UEAxMk YWFmZDRjOGQtYmJlYy00Mjc4LTgxY2QtZDVlOGU4NWE1NzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrUbXhuC+bYygaBVZBgIIcaS5Ue9t9Dlhwv7 sstpkq6VeSreM/hs3qMGRmg2yitxyxtVIWNjjRtiMWC34VkAuMK5IvZAoTYjTmOz iL4l6GbURWAKN5GdqEPmzZ8KIBbEbF4BbauQX5DDqE/PgyoxiK4zPFXZMfkSsalI nhAQ+OEjwNeBYsR5vMOSSFuzTemIkvTE1XvHNBbu/whOajlRXopn6wtFo+hD+w7D DE7CspsL4ynQxGE/BILYpwHYmPl4Ct2sIG15Lrn5gKl8HF4EC/CaR4j5i5NHNhJ8 W8B1ij6XF3aMvtk/WKRyJH87hbXGUY1OzrU4PHjVmg6tvCJmVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsBdVjqau7sFROcGZxIObp8L2UyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWZkZGNlZDAtMmU3Mi0z NTk2LTg1MzctZmZjNDRhNjZiZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2dgEekeRrkNML8gVM4L/jkl27ARpzq1PEyT7A7HGilEpYR8unuLnxi FwUNvY4kbw7dzpsGwNJ5KwkXgtz6I1FM/a/Em2enLx/5NGuv1O0eO6t/vPUyOcqY b+NN8gkAccC6oCSzzxU8+IulEK/n8RqxEDYFDWzu7mpsZ7l7kQk7Tm2+hR2Lzd8S LCOysY/MyqPVR4jhIBXknt+5RkUdMW0lBDTtmPNCZtG9JJAPfeKsL/z30GCBCNfg +s4MXsY6wsdm50Qed/6oc/1rVrYaBjHG20400EjepEoxgACDHHXRTex8NK70fARe jjGk5NDZzeRTlN32UA773KBGDgPeq0s= -----END CERTIFICATE-----Generated at Sun Apr 6 01:09:51 2025 by rpki-client