$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24f62640-1c12-3294-a31d-e907d7b53f05.roa File: 24f62640-1c12-3294-a31d-e907d7b53f05.roa (raw, json) Hash identifier: w+LNIGji1qORSiAcQwasBAdZjVE8wIRf61D79Lm02gg= Subject key identifier: 4B:84:98:55:A1:DB:78:5F:7E:06:E7:7B:7F:1B:22:C4:C3:16:31:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11D01F69A373091142420 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24f62640-1c12-3294-a31d-e907d7b53f05.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.21.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1d:01:f6:9a:37:30:91:14:24:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=f07fb315-647d-482e-9165-cb09c3ea3f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5f:d8:ac:8e:9d:8f:25:93:aa:bf:df:38:5d: 6b:5d:95:fd:72:50:6a:ac:8e:53:fd:32:1c:2f:38: 49:06:3a:69:a7:82:88:3b:2f:58:e7:ec:ac:72:61: 32:22:be:48:d1:12:4d:a9:bc:5a:48:c2:50:78:2f: c5:a4:30:80:7f:95:08:ce:7d:47:a4:60:2f:5a:25: 2f:98:79:32:8a:08:a5:8a:97:af:71:86:af:65:23: 19:04:0b:ee:e7:bd:cc:b7:5d:73:26:16:de:28:76: 4a:14:fb:7e:67:27:26:7b:55:29:11:d7:f4:11:26: 5b:64:4d:0b:d1:70:c4:29:ec:73:80:42:17:d1:e0: f4:bb:cd:d8:82:f2:f5:5d:86:dc:67:84:e0:52:04: 86:da:76:26:54:f3:1e:cf:2e:f4:d3:54:d0:53:cb: ea:8b:94:b1:4e:4b:ec:bb:ae:d4:66:af:66:e5:1d: d9:86:16:35:f3:52:2b:d4:9a:b8:84:76:d1:00:23: 12:52:ef:40:97:fe:00:a2:03:be:94:51:e7:a4:5e: 1e:de:7b:e1:49:b6:c1:2c:cd:69:f2:2d:bc:7e:f5: f6:49:46:2b:af:0a:ac:86:0b:90:be:87:11:37:4a: e1:1a:b4:9a:99:01:35:e4:a7:0e:5f:40:62:c7:2b: ac:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:84:98:55:A1:DB:78:5F:7E:06:E7:7B:7F:1B:22:C4:C3:16:31:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/24f62640-1c12-3294-a31d-e907d7b53f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:c2:1d:72:4a:76:9b:62:27:5a:fb:e2:7b:fe:c3:e4:37: 2b:2f:35:8a:26:cc:d3:9f:90:e6:1c:54:88:ed:44:91:d5:8b: b6:aa:84:20:75:e1:d9:d4:b5:35:41:25:e0:c9:a6:41:eb:c1: d6:ee:2f:9a:f0:f2:32:ec:b7:1b:b1:f0:6e:c5:9d:11:66:4c: 70:fa:53:15:92:ec:66:b9:1d:d4:ec:35:b3:c9:f7:68:d1:66: f5:c8:25:ba:f0:40:e4:ee:88:8d:7a:f6:82:28:60:e7:8d:d4: 4e:7d:7b:b4:57:f1:3c:f5:7c:80:e3:90:90:e0:39:51:b2:2f: 8e:54:89:5b:6e:30:da:42:ab:89:05:9c:69:0e:36:70:21:20: 13:10:0b:2b:ed:b8:22:79:54:f8:1e:6b:a3:af:83:d7:81:c8: ee:61:8f:a5:56:6f:6c:eb:a8:cf:02:62:05:1c:ee:93:d9:a0: 3f:ce:3f:4c:43:1c:ba:96:a0:8d:6d:51:4a:64:2d:b1:88:6a: 1e:23:94:33:0c:f9:fe:50:28:89:b3:91:60:05:5b:b9:8f:bd: 1f:69:d1:dc:70:70:ea:6a:23:44:ea:fe:f2:5f:c8:7d:c4:1c: 93:d9:ff:9b:84:4f:20:ba:76:4f:82:52:e4:34:af:8d:27:45: 98:6f:8c:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R0B9po3MJEUJCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZjA3ZmIzMTUtNjQ3ZC00ODJlLTkxNjUtY2IwOWMzZWEzZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1/YrI6djyWTqr/fOF1rXZX9clBqrI5T/TIc LzhJBjppp4KIOy9Y5+yscmEyIr5I0RJNqbxaSMJQeC/FpDCAf5UIzn1HpGAvWiUv mHkyigilipevcYavZSMZBAvu573Mt11zJhbeKHZKFPt+Zycme1UpEdf0ESZbZE0L 0XDEKexzgEIX0eD0u83YgvL1XYbcZ4TgUgSG2nYmVPMezy7001TQU8vqi5SxTkvs u67UZq9m5R3ZhhY181Ir1Jq4hHbRACMSUu9Al/4AogO+lFHnpF4e3nvhSbbBLM1p 8i28fvX2SUYrrwqshguQvocRN0rhGrSamQE15KcOX0Bixyus2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEuEmFWh23hffgbne38bIsTDFjE3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjRmNjI2NDAtMWMxMi0z Mjk0LWEzMWQtZTkwN2Q3YjUzZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJewh1ySnabYida++J7/sPkNysvNYomzNOfkOYcVIjtRJHVi7aqhCB1 4dnUtTVBJeDJpkHrwdbuL5rw8jLstxux8G7FnRFmTHD6UxWS7Ga5HdTsNbPJ92jR ZvXIJbrwQOTuiI169oIoYOeN1E59e7RX8Tz1fIDjkJDgOVGyL45UiVtuMNpCq4kF nGkONnAhIBMQCyvtuCJ5VPgea6Ovg9eByO5hj6VWb2zrqM8CYgUc7pPZoD/OP0xD HLqWoI1tUUpkLbGIah4jlDMM+f5QKImzkWAFW7mPvR9p0dxwcOpqI0Tq/vJfyH3E HJPZ/5uETyC6dk+CUuQ0r40nRZhvjHc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:12 2025 by rpki-client