$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa File: 29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa (raw, json) Hash identifier: mkSycuE1D5DkdkWaY/BWW2upLTT7eKfreXmjd1NduZ0= Subject key identifier: 62:57:39:FE:AD:62:DF:DB:6F:92:E4:0C:55:D6:9A:8A:76:64:A0:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F1BCC797C80EE8F27980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.18.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f1:bc:c7:97:c8:0e:e8:f2:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=54da256a-7532-4534-86f8-7510c0a67a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:80:b0:bf:ea:74:99:28:d9:08:6a:56:fb: 8a:77:9a:f8:95:89:74:14:57:55:58:54:e0:05:ed: c0:a1:fa:dd:c7:ee:ad:0e:e8:b4:0e:d7:66:a5:54: 7b:c1:43:50:e2:8a:a2:3e:e2:6d:27:de:73:f2:50: 1c:a3:a5:39:32:41:bc:73:3e:1a:f3:4f:c2:9d:55: 74:18:54:aa:c2:24:68:f9:ef:89:40:0d:2f:94:36: 3c:51:a2:98:6d:e0:98:51:3c:fc:12:3e:60:8a:3f: a9:65:e0:c6:37:3e:32:0a:d4:1d:3f:69:88:76:0c: 67:86:60:99:d3:c1:93:ab:0f:93:71:99:8d:4c:4c: 90:f0:01:3e:c4:3b:d5:aa:f9:73:7e:40:da:52:60: f3:b9:b9:6d:72:9b:62:21:61:ba:be:b3:22:20:43: db:a1:71:e5:f0:76:f3:e8:c1:c6:59:25:f0:ea:dc: 75:97:5c:50:72:89:ba:3c:4b:9f:65:8d:09:f6:7d: 60:bf:c2:09:1e:d3:a9:90:51:04:28:be:71:bc:cc: 50:c9:f8:76:c7:28:96:94:1b:d0:0e:64:17:2a:c0: 38:04:98:ee:b7:d8:52:b5:cc:38:bf:02:34:c3:4d: 5a:1f:86:b1:2f:78:09:0e:c0:22:62:64:01:52:aa: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:57:39:FE:AD:62:DF:DB:6F:92:E4:0C:55:D6:9A:8A:76:64:A0:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/29963d7e-e9d7-3101-a6e9-7271ab64d5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a1:5f:44:20:53:6f:9b:bf:32:05:9b:2a:ed:d8:31:45:d6: 54:ed:9b:73:b6:26:08:4e:b8:04:60:6b:d4:52:0b:12:97:d2: 9b:41:1f:34:f4:5e:6b:ba:43:4e:08:bf:71:30:bb:b4:89:d4: 3a:73:1b:08:a1:24:a3:28:66:ec:27:70:cf:3e:e8:53:12:9a: 81:1a:40:f4:82:35:b2:ce:a8:1a:47:fe:ed:fb:ce:2d:28:b6: 3b:e4:28:d3:e7:d9:ca:54:f2:90:f2:89:f8:68:70:06:8c:0f: 4b:87:99:a6:3d:e8:49:0c:c7:67:31:93:bc:1c:4c:9f:b3:fe: 50:70:06:a1:96:66:f9:02:85:69:0c:3c:55:a8:e6:29:4a:83: 70:d0:9b:ab:0b:cf:05:0b:a1:c3:a7:e2:d4:ea:18:b2:95:16: 93:64:3a:ef:7a:c0:8d:49:71:3f:1c:ac:42:0f:4d:73:0c:89: 6a:04:29:a2:ee:ab:a9:d7:90:11:b5:90:fc:d8:e2:8b:82:44: aa:af:62:c4:08:4f:fd:73:56:d9:6f:cc:52:b6:c1:ac:b9:10: ec:78:2d:3b:65:df:ba:df:53:eb:e9:fc:10:08:75:a6:27:01: 7e:8a:0c:72:15:e3:99:0b:0c:c3:08:fa:c0:ff:39:1d:6b:95: 8d:d8:fb:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPG8x5fIDujyeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTRkYTI1NmEtNzUzMi00NTM0LTg2ZjgtNzUxMGMwYTY3YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0CAsL/qdJko2QhqVvuKd5r4lYl0FFdVWFTg Be3Aofrdx+6tDui0DtdmpVR7wUNQ4oqiPuJtJ95z8lAco6U5MkG8cz4a80/CnVV0 GFSqwiRo+e+JQA0vlDY8UaKYbeCYUTz8Ej5gij+pZeDGNz4yCtQdP2mIdgxnhmCZ 08GTqw+TcZmNTEyQ8AE+xDvVqvlzfkDaUmDzubltcptiIWG6vrMiIEPboXHl8Hbz 6MHGWSXw6tx1l1xQcom6PEufZY0J9n1gv8IJHtOpkFEEKL5xvMxQyfh2xyiWlBvQ DmQXKsA4BJjut9hStcw4vwI0w01aH4axL3gJDsAiYmQBUqoupQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJXOf6tYt/bb5LkDFXWmop2ZKB1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjk5NjNkN2UtZTlkNy0z MTAxLWE2ZTktNzI3MWFiNjRkNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFYhJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIShX0QgU2+bvzIFmyrt2DFF1lTtm3O2JghOuARga9RSCxKX0ptBHzT0 Xmu6Q04Iv3Ewu7SJ1DpzGwihJKMoZuwncM8+6FMSmoEaQPSCNbLOqBpH/u37zi0o tjvkKNPn2cpU8pDyifhocAaMD0uHmaY96EkMx2cxk7wcTJ+z/lBwBqGWZvkChWkM PFWo5ilKg3DQm6sLzwULocOn4tTqGLKVFpNkOu96wI1JcT8crEIPTXMMiWoEKaLu q6nXkBG1kPzY4ouCRKqvYsQIT/1zVtlvzFK2way5EOx4LTtl37rfU+vp/BAIdaYn AX6KDHIV45kLDMMI+sD/OR1rlY3Y+9U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:48 2025 by rpki-client