$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa File: 23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa (raw, json) Hash identifier: lSFXJkhrN+Nr71WAE/cfJyCnQz6/TX9Cq59ZH2rgJgE= Subject key identifier: DE:D4:58:E6:4D:B5:36:A6:C8:B0:2D:73:EE:30:B1:F6:E1:8B:70:DB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11E521ADE961A49467000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.20.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:52:1a:de:96:1a:49:46:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=cbbddc80-83f8-4fa5-ad70-23e03bee28e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:a4:40:db:6c:c1:84:46:75:a6:21:cf:29: c7:f1:93:04:5c:af:f7:47:18:47:32:89:dc:ca:04: 5c:40:22:a7:e1:e5:8e:b5:97:e4:f9:8a:ea:40:78: eb:9d:1b:3a:c4:89:b9:9f:9f:c8:d5:31:cb:55:6f: 86:64:b3:45:98:b9:8e:47:e0:d4:f0:d6:a4:39:61: 51:46:42:55:f5:42:91:d7:77:81:15:e1:24:47:94: 46:af:98:36:22:17:96:1a:00:08:04:33:d7:71:07: 2d:b9:62:88:0d:07:a7:51:2f:c0:5b:93:aa:2c:38: a9:20:a8:85:78:69:2b:08:f6:be:75:09:80:36:39: 4e:15:8c:c7:e4:f1:12:e9:f8:fc:7b:33:13:25:63: 3a:e4:3a:b6:86:6d:17:d8:92:4c:15:58:d5:52:23: 7f:b1:d0:ef:1e:7a:96:21:03:a7:f7:3e:3f:51:98: 32:d1:15:72:0f:a8:e9:f7:68:ed:c3:9f:c8:29:22: 9a:44:3c:d3:87:1e:58:44:79:5c:30:96:8e:cc:64: 64:83:24:bb:ca:1f:1e:48:1a:a1:5e:48:2a:7d:57: aa:e3:46:ec:55:c5:cc:08:f7:d0:2f:85:25:dd:3d: 9f:fd:39:e1:7e:c5:8e:b5:1b:8e:e9:0b:ab:08:9a: 84:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D4:58:E6:4D:B5:36:A6:C8:B0:2D:73:EE:30:B1:F6:E1:8B:70:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/23f5b7e7-1e64-3794-9ae1-9d77f315af02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b4:87:8a:83:e6:ea:2a:04:6e:2f:96:04:cc:0b:5f:15:53: 86:19:ba:b6:a7:bf:ed:59:f1:bd:66:fc:18:be:f2:86:45:ca: 1e:45:c8:a1:61:bb:96:10:c1:03:18:cc:e4:97:dd:9e:82:fd: ff:b5:bd:64:a0:71:19:28:25:df:44:da:ec:4d:d7:bc:e5:b7: 64:2f:8b:4d:6f:2c:37:c7:70:0f:ab:a7:a6:37:ae:ef:da:35: 13:42:a5:08:2d:7e:a9:ca:e1:68:41:6b:5f:3d:bb:e1:c5:48: ae:78:4f:d1:31:20:b4:96:16:2e:c3:45:7a:66:87:1b:42:3e: a8:db:7d:67:5c:10:c7:f8:3b:34:6d:f5:08:ca:a0:25:7c:b1: 9b:0b:a9:f4:74:47:c8:43:8f:f8:3e:6c:ea:44:df:03:1e:14: 31:c4:60:fc:24:8f:60:27:67:c5:3a:60:ec:f0:5f:61:bf:55: 74:b7:41:cb:82:42:57:bf:75:9d:69:31:54:00:b4:54:30:04: e6:a8:6f:db:a2:69:66:40:e0:61:1e:71:8b:cb:7e:59:7f:40: 76:5f:4f:42:a4:0b:42:ff:c6:93:fb:ae:53:d8:e4:b0:42:44: 21:94:09:fd:a1:f2:de:89:a6:7b:ff:b5:fc:5e:2e:f8:3d:26: 51:59:b1:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R5SGt6WGklGcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk Y2JiZGRjODAtODNmOC00ZmE1LWFkNzAtMjNlMDNiZWUyOGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSSkQNtswYRGdaYhzynH8ZMEXK/3RxhHMonc ygRcQCKn4eWOtZfk+YrqQHjrnRs6xIm5n5/I1THLVW+GZLNFmLmOR+DU8NakOWFR RkJV9UKR13eBFeEkR5RGr5g2IheWGgAIBDPXcQctuWKIDQenUS/AW5OqLDipIKiF eGkrCPa+dQmANjlOFYzH5PES6fj8ezMTJWM65Dq2hm0X2JJMFVjVUiN/sdDvHnqW IQOn9z4/UZgy0RVyD6jp92jtw5/IKSKaRDzThx5YRHlcMJaOzGRkgyS7yh8eSBqh XkgqfVeq40bsVcXMCPfQL4Ul3T2f/TnhfsWOtRuO6QurCJqEpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN7UWOZNtTamyLAtc+4wsfbhi3DbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjNmNWI3ZTctMWU2NC0z Nzk0LTlhZTEtOWQ3N2YzMTVhZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhQQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+0h4qD5uoqBG4vlgTMC18VU4YZuranv+1Z8b1m/Bi+8oZFyh5FyKFh u5YQwQMYzOSX3Z6C/f+1vWSgcRkoJd9E2uxN17zlt2Qvi01vLDfHcA+rp6Y3ru/a NRNCpQgtfqnK4WhBa189u+HFSK54T9ExILSWFi7DRXpmhxtCPqjbfWdcEMf4OzRt 9QjKoCV8sZsLqfR0R8hDj/g+bOpE3wMeFDHEYPwkj2AnZ8U6YOzwX2G/VXS3QcuC Qle/dZ1pMVQAtFQwBOaob9uiaWZA4GEecYvLfll/QHZfT0KkC0L/xpP7rlPY5LBC RCGUCf2h8t6Jpnv/tfxeLvg9JlFZsZA= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:29 2025 by rpki-client