$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa File: 2a428851-c296-3ffd-83aa-596e36f896f0.roa (raw, json) Hash identifier: 9BwJHygpXQhDDUqt9u9SiZsFvPgxhKe2QLMTMGcItUQ= Subject key identifier: B1:96:4B:11:7F:89:BC:8A:EE:B9:B0:6F:FF:50:98:9D:19:3A:90:FC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F13E77D6AE01F6FABF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.16.0.0/13 maxlen: 13 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f1:3e:77:d6:ae:01:f6:fa:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=e37697d7-4ee9-41fa-968e-3dfa7079aacf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6e:17:fd:3e:61:7b:64:0d:3a:8d:60:2c:3e: 8f:27:18:35:9d:b1:a6:9c:35:7d:4f:cb:1b:34:16: 5b:99:12:9f:a6:d3:ee:12:f3:0b:a1:2a:09:df:c9: 55:10:8c:b8:3a:99:5b:a4:c5:be:7a:df:3c:d3:6d: 44:78:f9:78:15:ca:6a:ec:60:38:67:61:f0:21:e8: b7:7a:b4:b9:cd:93:51:17:88:ff:e1:36:8a:92:e7: 34:35:01:33:38:42:98:6b:49:5c:2e:65:9b:04:05: ce:b6:43:3f:4f:95:3e:20:5d:a3:59:ee:bc:f3:87: 34:06:34:7a:a3:08:10:86:61:43:fa:14:ea:58:86: ff:5b:2e:6d:da:e2:c2:23:68:dd:ac:1f:56:d9:87: ca:59:e9:13:ed:dd:10:92:7e:ad:59:8c:d7:c4:a0: 93:45:b7:be:53:0c:e2:16:33:aa:92:77:66:c0:f4: 11:ab:28:d0:b5:e4:5f:bd:cc:b1:1d:b2:95:9c:25: c2:85:30:fb:37:eb:15:10:9d:74:b7:99:02:f3:4b: 07:79:c0:86:48:a3:10:af:73:07:35:37:12:94:ab: 84:8a:2d:14:71:d1:07:97:a7:9e:75:c0:01:01:6b: 7f:76:2f:18:63:51:05:f6:f1:90:73:34:7c:df:4c: 13:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:96:4B:11:7F:89:BC:8A:EE:B9:B0:6F:FF:50:98:9D:19:3A:90:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a428851-c296-3ffd-83aa-596e36f896f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.0.0/13 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fd:e2:23:5a:d2:f5:1f:09:9e:a8:d1:a1:73:39:37:a7:88: 3c:33:d3:84:b7:a2:39:d9:b4:74:ab:63:4f:cd:b9:3f:7c:9a: b2:d5:34:8f:c0:a1:f3:de:4a:b1:69:71:1e:61:dc:2e:52:4e: 50:66:39:8a:e0:1c:a3:04:ce:c0:c4:b7:a5:0a:e9:6b:4d:bf: 58:b1:3d:a2:b4:bc:9e:eb:84:b8:9e:86:d3:30:c2:56:8a:d4: 5f:07:55:3c:f8:1b:5e:f2:f8:5f:1f:a1:4c:6d:f9:ed:2c:d5: 82:d7:fc:05:36:32:d2:dc:0e:09:ae:c0:6f:c0:58:86:cf:c2: c7:44:d2:c2:f5:46:60:41:c2:71:37:16:ba:5e:ea:49:d5:75: 27:4c:b4:d6:b2:92:5e:d3:68:de:85:9f:d1:5f:7b:92:da:48: 5d:a5:38:5f:b4:60:b3:83:5c:b6:6e:db:39:d4:1a:ff:a7:2f: 1c:6f:cc:5c:f6:8f:40:05:9d:d3:97:e7:ae:11:9e:ce:f6:d9: b9:9c:75:9e:e0:f3:42:53:13:f8:03:f5:53:42:c9:11:b3:dc: 22:8a:c0:a0:02:16:e9:0c:3f:e1:ee:f3:50:c1:d8:38:9d:80: 58:cf:eb:c4:28:f1:e6:c0:2e:93:4a:4a:44:2b:35:0e:90:1f: 7a:b2:a8:6c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEPE+d9auAfb6vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTM3Njk3ZDctNGVlOS00MWZhLTk2OGUtM2RmYTcwNzlhYWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm4X/T5he2QNOo1gLD6PJxg1nbGmnDV9T8sb NBZbmRKfptPuEvMLoSoJ38lVEIy4OplbpMW+et88021EePl4Fcpq7GA4Z2HwIei3 erS5zZNRF4j/4TaKkuc0NQEzOEKYa0lcLmWbBAXOtkM/T5U+IF2jWe6884c0BjR6 owgQhmFD+hTqWIb/Wy5t2uLCI2jdrB9W2YfKWekT7d0Qkn6tWYzXxKCTRbe+Uwzi FjOqkndmwPQRqyjQteRfvcyxHbKVnCXChTD7N+sVEJ10t5kC80sHecCGSKMQr3MH NTcSlKuEii0UcdEHl6eedcABAWt/di8YY1EF9vGQczR830wTvQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLGWSxF/ibyK7rmwb/9QmJ0ZOpD8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE0Mjg4NTEtYzI5Ni0z ZmZkLTgzYWEtNTk2ZTM2Zjg5NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDYhAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkf3iI1rS9R8JnqjRoXM5N6eIPDPThLeiOdm0dKtjT825P3yastU0j8Ch 895KsWlxHmHcLlJOUGY5iuAcowTOwMS3pQrpa02/WLE9orS8nuuEuJ6G0zDCVorU XwdVPPgbXvL4Xx+hTG357SzVgtf8BTYy0twOCa7Ab8BYhs/Cx0TSwvVGYEHCcTcW ul7qSdV1J0y01rKSXtNo3oWf0V97ktpIXaU4X7Rgs4Nctm7bOdQa/6cvHG/MXPaP QAWd05fnrhGezvbZuZx1nuDzQlMT+AP1U0LJEbPcIorAoAIW6Qw/4e7zUMHYOJ2A WM/rxCjx5sAuk0pKRCs1DpAferKobA== -----END CERTIFICATE-----Generated at Sat Apr 5 18:28:30 2025 by rpki-client