$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa File: 2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa (raw, json) Hash identifier: Ya6c317e5MvRQvgWG1ki85E8qvBxVdZBr5sxKiYD9Zo= Subject key identifier: 53:6D:7B:E0:07:95:2E:7E:2D:18:E2:0C:EF:D0:FD:EE:B3:E2:59:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716913A748BE2C89040A60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.19.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:69:13:a7:48:be:2c:89:04:0a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=0bbca5b2-1ca7-4a32-bb9d-c70c396e1771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:27:29:f8:fe:e5:54:80:54:f2:39:ad:46:4b: ba:dc:61:b0:be:06:1a:bc:4c:85:ee:9a:dd:fb:a5: ec:5d:98:06:f0:ac:f4:22:d5:92:63:bf:d0:41:94: e7:bb:71:d8:68:1d:72:09:29:f5:c7:a3:d5:46:0e: 57:e0:ed:ae:2b:2d:ea:06:79:76:16:15:17:88:1b: 3f:41:7f:e6:2c:d9:e0:61:64:ea:15:e7:05:ef:1f: 87:ae:73:43:2b:ae:6a:8c:df:1a:af:27:df:92:df: 4b:bd:e7:9c:be:5c:61:11:3f:d7:58:c8:a4:25:8c: 0a:1f:be:e3:e3:70:2f:55:09:d3:e3:0e:8a:e4:35: 85:cf:58:8f:18:92:89:d6:f1:a9:2f:36:38:d2:f1: 1d:ca:d6:ee:3c:9c:ba:5b:76:0c:39:3b:f4:33:a7: 0c:a4:84:41:38:40:cf:7f:6f:23:91:68:5e:14:73: 86:1e:c4:b4:c8:38:03:af:83:c0:c3:b0:a5:a6:6e: 83:4c:d2:d6:44:31:25:b0:80:29:cb:fc:e9:43:1d: 94:b6:16:f5:31:2c:a8:fe:e5:5a:4d:f2:8b:b0:7d: 51:4c:ca:70:e5:34:47:6a:97:79:23:85:a0:d0:b8: 5b:7b:07:c1:42:fc:ac:9c:44:72:ea:03:dc:8c:0e: 97:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:6D:7B:E0:07:95:2E:7E:2D:18:E2:0C:EF:D0:FD:EE:B3:E2:59:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2dcb2c67-c7de-39fd-8f06-dd4bc2bdf746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7b:d5:9d:4e:25:6b:e4:0d:94:71:e9:4c:36:c7:b9:71:29: ea:f5:71:55:5c:30:6f:57:91:e6:56:b8:32:75:be:ab:77:d9: 65:41:f3:3c:e1:13:de:5d:f9:96:e3:ef:38:c3:9d:ec:11:24: ed:38:32:ee:4e:98:d5:e2:e4:2c:80:e8:c1:fc:2d:1f:7f:35: 06:23:d5:51:9e:dd:a9:b3:22:d4:f0:9b:f3:01:07:af:a9:4c: 39:02:5a:fa:54:a5:24:be:f5:99:29:e5:74:75:c1:dc:c9:93: 2c:32:79:24:b7:eb:98:fa:db:dd:3f:b1:fd:d0:1b:6c:72:49: 13:fa:c7:7f:bc:44:9c:b9:b5:de:37:22:5c:f9:3c:69:a3:77: d5:ac:6d:48:b1:09:03:05:8e:7e:09:77:ec:1a:96:26:77:e1: eb:18:ef:83:d3:33:ca:8e:da:09:d8:57:4f:6c:ab:4f:7d:19: 6b:5a:0e:13:ff:0e:d8:69:42:36:74:38:73:7a:36:47:94:51: a8:5c:ca:c1:e9:ea:d7:e2:0e:8e:b0:de:a7:05:2f:63:7a:97: 7b:6e:cb:6e:a0:68:69:15:48:14:8d:6b:34:31:a8:4e:c6:90: 75:b6:7f:79:50:16:9d:d9:4d:60:c5:1f:8c:69:3f:ae:83:fb: 9a:9c:97:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWkTp0i+LIkECmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MGJiY2E1YjItMWNhNy00YTMyLWJiOWQtYzcwYzM5NmUxNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhicp+P7lVIBU8jmtRku63GGwvgYavEyF7prd +6XsXZgG8Kz0ItWSY7/QQZTnu3HYaB1yCSn1x6PVRg5X4O2uKy3qBnl2FhUXiBs/ QX/mLNngYWTqFecF7x+HrnNDK65qjN8aryffkt9LveecvlxhET/XWMikJYwKH77j 43AvVQnT4w6K5DWFz1iPGJKJ1vGpLzY40vEdytbuPJy6W3YMOTv0M6cMpIRBOEDP f28jkWheFHOGHsS0yDgDr4PAw7Clpm6DTNLWRDElsIApy/zpQx2Uthb1MSyo/uVa TfKLsH1RTMpw5TRHapd5I4Wg0LhbewfBQvysnERy6gPcjA6XGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNte+AHlS5+LRjiDO/Q/e6z4lnmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmRjYjJjNjctYzdkZS0z OWZkLThmMDYtZGQ0YmMyYmRmNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ71Z1OJWvkDZRx6Uw2x7lxKer1cVVcMG9XkeZWuDJ1vqt32WVB8zzh E95d+Zbj7zjDnewRJO04Mu5OmNXi5CyA6MH8LR9/NQYj1VGe3amzItTwm/MBB6+p TDkCWvpUpSS+9Zkp5XR1wdzJkywyeSS365j6290/sf3QG2xySRP6x3+8RJy5td43 Ilz5PGmjd9WsbUixCQMFjn4Jd+waliZ34esY74PTM8qO2gnYV09sq099GWtaDhP/ DthpQjZ0OHN6NkeUUahcysHp6tfiDo6w3qcFL2N6l3tuy26gaGkVSBSNazQxqE7G kHW2f3lQFp3ZTWDFH4xpP66D+5qcl4o= -----END CERTIFICATE-----Generated at Sun Apr 6 09:40:15 2025 by rpki-client