$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa File: 27ecab0b-5c88-329e-97d6-822207593d90.roa (raw, json) Hash identifier: oDi/swQo8wxgP6CpJSLn4Sf1hNc/OZLbWCZSU0gQovI= Subject key identifier: 87:50:AE:6B:C1:C1:BA:29:ED:6E:0F:3F:9A:93:1B:F7:56:9C:9D:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11ACC09BCA54849203600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.18.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1a:cc:09:bc:a5:48:49:20:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=cd25b730-5d41-4e21-af8c-8c01b51d7f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:03:ba:2a:f7:a7:78:74:13:21:dc:37:78:3d: 41:cb:26:72:10:49:69:e8:19:b4:d3:27:1f:d1:dd: eb:0e:15:ff:93:79:3c:50:b2:bf:17:52:5f:b9:fe: 74:04:b2:99:99:88:7b:38:fb:b4:cb:27:0c:63:ce: ef:76:dd:c4:99:a4:40:55:f0:91:10:80:bf:1d:8e: a9:a2:65:2f:b5:3e:1e:54:9e:4b:ba:56:1a:40:94: 8d:d0:53:4e:60:99:02:5a:7d:cb:ff:7d:d5:9c:13: 3e:a8:74:7a:f4:f8:6e:a1:74:5e:11:a1:2b:1c:89: 30:33:f5:77:3b:ec:64:84:29:4a:a2:26:3a:7f:0c: 08:1f:5c:cd:6d:6e:93:2d:6f:02:52:25:f7:50:2e: ea:b2:2b:05:1a:3b:d0:0c:51:68:02:b9:71:df:59: 4d:e1:d7:cb:d6:2f:b3:c3:d3:72:fd:38:0e:d5:d7: 3b:74:71:e8:4a:fb:a5:d2:4d:e2:d0:69:e9:b9:5d: 10:f3:6a:ce:fd:27:68:09:9b:84:15:f0:be:39:e2: 31:a5:e7:07:f5:c4:e1:23:15:d8:16:e2:93:d6:6f: c5:bf:51:6e:9f:64:49:ce:38:b1:a4:e3:1f:28:be: 7b:a4:5a:83:e1:c8:e2:5f:87:64:8e:5d:6b:c8:b3: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:50:AE:6B:C1:C1:BA:29:ED:6E:0F:3F:9A:93:1B:F7:56:9C:9D:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27ecab0b-5c88-329e-97d6-822207593d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:d6:20:43:09:9b:e5:dc:73:32:e1:eb:c5:31:15:bf:89:65: 5a:35:cb:b0:3e:8d:9d:6b:f6:5d:fc:6c:cf:93:69:f9:c6:71: 64:60:8a:6c:c6:ce:00:85:c8:ee:2f:68:3a:00:fb:7e:29:5f: ed:de:5a:39:33:b5:0a:90:e2:32:72:d6:35:01:ae:66:6a:10: 05:74:a0:38:54:5f:b2:f4:7b:ef:79:83:9b:0f:5c:b3:1a:be: d1:a3:36:b4:ca:5c:3f:ab:0f:17:bd:cd:f1:a7:96:ea:88:d9: 0e:45:70:bc:ba:97:41:92:b5:83:09:77:d6:93:0c:c1:bf:d7: 6f:ac:a0:54:4b:6d:c8:24:a1:02:89:0e:8d:eb:c4:6c:e1:93: ae:ef:82:2f:50:49:68:a8:f0:03:b3:e1:9e:85:ce:14:64:b8: 65:25:e5:00:68:98:9f:9c:45:65:a6:1a:16:b5:c3:1a:d7:ba: 9a:c1:a2:cb:ca:52:1e:38:e9:b2:4a:f4:7a:b5:aa:7f:e0:f4: 3d:d6:e2:9a:df:16:6b:b5:0d:91:6d:e7:fb:5f:9e:d2:c7:55: 0e:d5:91:a4:b9:dd:ab:d9:4b:09:4d:89:28:c2:b1:2d:76:50: 27:77:24:30:f0:e4:23:e5:72:bd:94:cf:8a:83:78:9c:8d:ee: 46:c4:e7:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RrMCbylSEkgNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk Y2QyNWI3MzAtNWQ0MS00ZTIxLWFmOGMtOGMwMWI1MWQ3ZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwO6KveneHQTIdw3eD1ByyZyEElp6Bm00ycf 0d3rDhX/k3k8ULK/F1Jfuf50BLKZmYh7OPu0yycMY87vdt3EmaRAVfCREIC/HY6p omUvtT4eVJ5LulYaQJSN0FNOYJkCWn3L/33VnBM+qHR69PhuoXReEaErHIkwM/V3 O+xkhClKoiY6fwwIH1zNbW6TLW8CUiX3UC7qsisFGjvQDFFoArlx31lN4dfL1i+z w9Ny/TgO1dc7dHHoSvul0k3i0GnpuV0Q82rO/SdoCZuEFfC+OeIxpecH9cThIxXY FuKT1m/Fv1Fun2RJzjixpOMfKL57pFqD4cjiX4dkjl1ryLPwQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdQrmvBwbop7W4PP5qTG/dWnJ2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjdlY2FiMGItNWM4OC0z MjllLTk3ZDYtODIyMjA3NTkzZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLWIEMJm+XcczLh68UxFb+JZVo1y7A+jZ1r9l38bM+TafnGcWRgimzG zgCFyO4vaDoA+34pX+3eWjkztQqQ4jJy1jUBrmZqEAV0oDhUX7L0e+95g5sPXLMa vtGjNrTKXD+rDxe9zfGnluqI2Q5FcLy6l0GStYMJd9aTDMG/12+soFRLbcgkoQKJ Do3rxGzhk67vgi9QSWio8AOz4Z6FzhRkuGUl5QBomJ+cRWWmGha1wxrXuprBosvK Uh446bJK9Hq1qn/g9D3W4prfFmu1DZFt5/tfntLHVQ7VkaS53avZSwlNiSjCsS12 UCd3JDDw5CPlcr2Uz4qDeJyN7kbE564= -----END CERTIFICATE-----Generated at Sat Apr 5 18:41:11 2025 by rpki-client