$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa File: 2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa (raw, json) Hash identifier: aAP2ir3pMhV8ag1fYHCrpcXp64nz61rAsKuYS5Y0KDg= Subject key identifier: F9:80:9B:C6:E5:AE:28:34:62:98:FB:6E:11:1F:21:65:EB:33:2F:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F2BB00686164798B4DE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.23.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f2:bb:00:68:61:64:79:8b:4d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=05a7cc81-f8dc-44ad-aa1b-d1e1c81749a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b6:51:2e:8c:5a:36:56:c7:5c:56:ae:65:c2: 71:f8:f7:c9:b6:54:e2:90:77:a3:2f:52:1e:61:23: 70:a6:49:c6:0a:19:6f:3c:33:28:b2:23:be:a9:0b: 7a:50:66:2c:f5:13:b3:4c:12:d9:0f:87:4e:52:ab: 3d:cb:91:5c:13:38:55:9f:f8:ef:05:c0:ef:41:a5: ad:3d:f4:90:91:ec:a9:10:a6:18:01:fa:5b:f0:77: b3:69:6d:db:97:c4:86:f6:a0:ec:7d:e8:20:b8:92: e0:84:ea:ab:a1:40:2b:6e:c8:02:d7:b8:34:ca:4a: f1:e7:d9:ce:bb:f7:70:5c:76:97:81:d2:bc:9f:5f: 94:8e:74:b6:b1:7a:b7:df:a5:58:65:9d:bf:fd:d7: 90:99:9f:47:43:66:77:0a:be:a1:ac:58:61:13:87: b5:f4:94:e4:31:95:c4:1b:6a:71:e7:ec:c1:94:16: d3:90:bf:b5:32:20:ce:4d:0f:0b:d0:34:46:97:fd: cb:6c:28:88:8d:2e:ac:7c:05:2b:3f:6c:e5:ab:b4: d4:af:a8:18:18:22:44:61:ce:a8:dc:47:61:b1:af: e5:a7:05:ce:58:46:34:ab:87:4a:77:fc:73:95:41: 74:7d:03:61:5a:e8:ee:81:66:21:ec:5e:4a:6b:55: 24:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:80:9B:C6:E5:AE:28:34:62:98:FB:6E:11:1F:21:65:EB:33:2F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dc31c43-aa2b-3c17-aab9-4bd92e20f133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ce:0e:b9:a1:93:e8:7e:5c:d4:51:f5:5b:d8:43:25:db:d4: 5d:67:43:5f:34:85:32:11:ec:9d:c8:c0:b7:da:40:9c:73:6c: a3:12:7b:ec:1f:f5:f3:ac:1a:64:6e:db:f4:2d:30:eb:c3:a3: b9:a2:8b:52:54:d5:78:12:2f:09:c5:07:04:61:87:10:1d:11: 30:fc:6b:13:bb:82:9b:27:d5:47:81:9e:a5:5d:f8:61:0a:8d: a8:d0:b9:ac:05:30:8e:e0:29:de:e5:65:4a:07:a2:9a:d5:06: 25:56:69:9a:7d:e3:6a:87:16:69:d2:65:84:51:6a:69:29:78: d0:f0:aa:46:41:60:d3:59:fc:89:5f:d4:ce:56:33:e0:cf:5d: 0d:54:98:01:e0:b0:43:a0:88:d3:79:78:28:00:7b:87:0f:1a: d5:34:9f:36:b2:fc:f0:8b:c8:89:72:f9:db:27:45:b2:62:8a: bd:7c:3c:ab:33:f9:27:55:1f:e5:3b:f7:b1:5e:f4:45:25:fc: 68:ec:63:71:14:95:c5:5b:75:ec:f0:c1:f6:c9:76:f7:a0:4a: 76:b9:c9:90:eb:d8:f1:c7:d3:db:3c:6b:8c:91:0d:85:58:c5: 2e:df:22:97:56:61:a8:2d:f1:01:72:ac:58:f6:3d:18:a1:b5: 23:29:97:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPK7AGhhZHmLTeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDVhN2NjODEtZjhkYy00NGFkLWFhMWItZDFlMWM4MTc0OWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbZRLoxaNlbHXFauZcJx+PfJtlTikHejL1Ie YSNwpknGChlvPDMosiO+qQt6UGYs9ROzTBLZD4dOUqs9y5FcEzhVn/jvBcDvQaWt PfSQkeypEKYYAfpb8HezaW3bl8SG9qDsfegguJLghOqroUArbsgC17g0ykrx59nO u/dwXHaXgdK8n1+UjnS2sXq336VYZZ2//deQmZ9HQ2Z3Cr6hrFhhE4e19JTkMZXE G2px5+zBlBbTkL+1MiDOTQ8L0DRGl/3LbCiIjS6sfAUrP2zlq7TUr6gYGCJEYc6o 3Edhsa/lpwXOWEY0q4dKd/xzlUF0fQNhWujugWYh7F5Ka1UkFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPmAm8blrig0Ypj7bhEfIWXrMy9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRjMzFjNDMtYWEyYi0z YzE3LWFhYjktNGJkOTJlMjBmMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDODrmhk+h+XNRR9VvYQyXb1F1nQ180hTIR7J3IwLfaQJxzbKMSe+wf 9fOsGmRu2/QtMOvDo7mii1JU1XgSLwnFBwRhhxAdETD8axO7gpsn1UeBnqVd+GEK jajQuawFMI7gKd7lZUoHoprVBiVWaZp942qHFmnSZYRRamkpeNDwqkZBYNNZ/Ilf 1M5WM+DPXQ1UmAHgsEOgiNN5eCgAe4cPGtU0nzay/PCLyIly+dsnRbJiir18PKsz +SdVH+U797Fe9EUl/GjsY3EUlcVbdezwwfbJdvegSna5yZDr2PHH09s8a4yRDYVY xS7fIpdWYagt8QFyrFj2PRihtSMplzA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:23 2025 by rpki-client