$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa File: 2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa (raw, json) Hash identifier: LHnLKTZUd/L1t9+c3SitSOHPge4O+uBFy31TxX0zkQw= Subject key identifier: 80:D8:2E:85:85:BC:76:A7:9F:DD:57:21:2C:55:A0:BE:29:74:65:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848116FB912D7BB16D04560C500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 98.18.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:b9:12:d7:bb:16:d0:45:60:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=7bdce2b9-40eb-42b4-b7ae-e1684d12660a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ad:59:82:d2:90:55:1f:ba:60:ce:49:26:bc: 90:a7:f3:d3:cb:49:b2:ea:34:8f:64:5c:2c:79:8b: 3a:bb:4c:53:8b:90:57:3e:46:00:ef:43:fb:37:d6: a5:dd:e1:9d:0f:f0:ca:c5:00:2a:45:46:8b:d0:be: 12:b6:d8:ee:30:4b:fc:ec:ae:e3:d3:32:82:aa:88: d2:37:e6:2b:3f:f5:8c:5a:19:b5:43:2b:e8:c2:2c: dd:a1:08:85:4f:ad:f4:0a:9f:3b:c6:7b:01:90:43: 1d:98:60:19:53:32:eb:ac:cc:bd:07:e9:43:06:a4: 86:e1:06:33:21:a1:f2:4b:b0:5e:c1:cd:d7:81:ec: 0a:5e:97:02:52:ea:59:d6:0a:03:75:a2:8f:34:26: a2:e2:4b:5a:ff:1a:0d:67:63:60:fa:87:7e:ea:db: cb:ab:2a:f1:ea:31:e8:20:d5:98:38:be:cd:14:4d: a8:19:dd:7d:7f:cd:5a:53:f1:a7:3c:f4:85:6a:e5: eb:f4:9d:42:6d:c3:7a:68:52:29:2e:55:6b:af:98: d8:0e:5c:d8:c5:e6:01:13:83:ac:37:4b:db:91:e4: ce:18:3f:df:ab:ab:b2:be:e1:b0:59:c5:26:ae:01: c0:32:3d:64:44:6e:7d:b0:89:f3:96:2c:e9:8f:a7: 8f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D8:2E:85:85:BC:76:A7:9F:DD:57:21:2C:55:A0:BE:29:74:65:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a1230a7-6e54-30e8-973b-fddf6cdb9b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2d:dc:be:80:a7:a8:48:96:82:e4:30:e1:b5:f5:dc:6c:0b: 6e:13:8b:88:d5:19:94:ed:77:b0:1a:bc:21:96:0c:d1:67:22: 57:45:ac:ab:a8:30:1e:66:6b:b0:3e:6c:ff:d2:41:d9:65:b4: c2:16:68:46:b4:55:c7:93:f8:9d:3f:31:e4:03:ac:1b:79:54: 72:9a:97:bf:48:aa:c3:bf:72:23:b7:eb:29:89:90:bf:e3:31: e7:be:10:26:49:67:bb:9d:12:42:50:c2:d1:97:8a:74:78:da: 77:b7:6e:b8:50:12:de:d7:3e:b9:4b:44:6b:03:2e:28:5d:e9: 9b:ee:1e:43:1b:04:0e:c3:97:16:f5:a7:4e:f4:66:04:56:cf: 72:0e:96:ce:86:25:aa:8a:c8:8f:1c:02:b2:b8:7a:16:08:ea: 11:d7:f9:0a:fc:41:92:8a:3e:69:88:5c:3f:84:b2:44:44:35: 0e:08:2a:35:72:9f:44:2e:a5:7b:79:3d:0f:aa:9a:59:23:6c: 81:f4:a0:69:d3:70:87:7d:d3:56:ac:5c:a3:20:e4:c4:1c:5d: f1:85:09:e8:33:fa:8b:1f:41:54:45:bb:9d:4e:cb:04:c1:51: f1:57:0e:8a:37:f9:04:a8:44:52:ab:3f:33:fd:a2:29:3f:db: 56:5c:a7:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7kS17sW0EVgxQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk N2JkY2UyYjktNDBlYi00MmI0LWI3YWUtZTE2ODRkMTI2NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA161ZgtKQVR+6YM5JJryQp/PTy0my6jSPZFws eYs6u0xTi5BXPkYA70P7N9al3eGdD/DKxQAqRUaL0L4SttjuMEv87K7j0zKCqojS N+YrP/WMWhm1QyvowizdoQiFT630Cp87xnsBkEMdmGAZUzLrrMy9B+lDBqSG4QYz IaHyS7Bewc3XgewKXpcCUupZ1goDdaKPNCai4kta/xoNZ2Ng+od+6tvLqyrx6jHo INWYOL7NFE2oGd19f81aU/GnPPSFauXr9J1CbcN6aFIpLlVrr5jYDlzYxeYBE4Os N0vbkeTOGD/fq6uyvuGwWcUmrgHAMj1kRG59sInzlizpj6ePXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDYLoWFvHann91XISxVoL4pdGXAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmExMjMwYTctNmU1NC0z MGU4LTk3M2ItZmRkZjZjZGI5YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYt3L6Ap6hIloLkMOG19dxsC24Ti4jVGZTtd7AavCGWDNFnIldFrKuo MB5ma7A+bP/SQdlltMIWaEa0VceT+J0/MeQDrBt5VHKal79IqsO/ciO36ymJkL/j Mee+ECZJZ7udEkJQwtGXinR42ne3brhQEt7XPrlLRGsDLihd6ZvuHkMbBA7Dlxb1 p070ZgRWz3IOls6GJaqKyI8cArK4ehYI6hHX+Qr8QZKKPmmIXD+EskRENQ4IKjVy n0QupXt5PQ+qmlkjbIH0oGnTcId901asXKMg5MQcXfGFCegz+osfQVRFu51OywTB UfFXDoo3+QSoRFKrPzP9oik/21Zcp4o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:30 2025 by rpki-client