$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa File: 3195ad33-c3b1-3618-884d-17725318a065.roa (raw, json) Hash identifier: xuTYCXVxkomyk/BWW1FNw3ip0LxZrX/xSgJwQW1WUTI= Subject key identifier: A9:89:39:CF:BE:F8:57:68:BE:C0:EC:56:BC:C2:7E:5D:E5:9D:FE:B5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11E5F1484E93CDECA4670 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.20.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:5f:14:84:e9:3c:de:ca:46:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=6498ca96-6e07-4371-a745-673bec81b192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:55:f6:45:47:be:a7:10:a4:7f:bd:6a:eb:69: f4:71:fc:6d:8b:12:f6:d1:34:0f:2c:5f:fe:c3:96: 3e:f4:1b:25:77:a5:d7:f8:77:ff:2f:2e:15:8c:31: 47:d7:c0:00:92:5f:d8:b3:48:11:bc:56:32:ed:2f: 1c:12:1c:85:de:8b:8b:44:f1:ca:b1:97:8c:54:91: 7a:ac:24:81:5c:24:42:6a:c9:18:c3:2c:62:e7:47: cb:d3:c0:72:a7:63:19:69:87:0e:e5:1d:4e:0d:4f: 65:ae:3e:7d:31:83:d8:59:85:f3:5c:3e:de:63:54: 71:48:27:aa:63:44:ff:9c:a8:7c:88:ba:8c:90:c3: 22:30:f2:59:26:4f:2e:2a:d3:c6:83:59:a2:74:b9: 47:39:00:ca:49:cb:63:40:0b:f7:38:9c:ee:f5:b5: 50:37:ee:10:ed:3d:b5:8a:71:d8:31:b4:02:c3:b5: ee:49:35:4a:de:77:0e:18:66:89:cc:d1:e4:68:05: a6:52:58:7c:4a:de:71:8d:a9:b1:7f:c8:99:d7:3a: eb:7f:d3:72:2b:7b:fd:36:d9:e2:de:6e:6b:f0:08: 5c:5d:05:10:22:49:41:ab:f9:16:63:a6:29:3c:9d: b3:ed:7c:51:f2:f2:0a:19:99:45:df:9c:86:8c:83: b6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:89:39:CF:BE:F8:57:68:BE:C0:EC:56:BC:C2:7E:5D:E5:9D:FE:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3195ad33-c3b1-3618-884d-17725318a065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:dd:5e:19:89:fa:a5:05:d4:de:74:99:7f:6e:c5:cb:3a:fd: 15:6f:4b:01:46:ac:d7:4e:7c:2d:50:66:e1:a2:6d:83:7f:21: 39:dc:35:7c:94:10:1b:e3:63:0a:b3:9c:79:48:b6:da:36:c4: a3:66:a7:87:14:f2:f9:8e:9d:c6:d3:86:de:f9:84:7b:a4:5f: c6:df:f6:86:cb:63:92:5e:7e:e2:87:fa:41:c9:9e:55:a7:84: 09:30:54:3d:94:b2:d5:3e:dd:a4:91:92:a7:74:4c:57:24:d9: 69:51:1e:42:56:04:93:13:a8:8e:3c:79:d5:55:d4:60:1a:f9: 99:59:e3:93:9c:97:fd:2d:81:39:17:eb:18:b2:db:67:0c:b7: 6d:86:e9:f0:00:8a:de:5b:b1:0e:fc:59:b2:37:31:01:8c:27: 45:e4:ad:58:0a:41:f5:f0:75:03:22:5a:27:e4:27:5c:c3:c0: 28:18:16:2f:15:8c:13:30:1c:84:7d:e0:2e:c9:02:aa:10:cb: 57:3a:9b:3e:4d:36:b9:f7:a0:5a:8b:7e:38:72:5b:06:17:80: ca:1d:27:84:cf:84:8c:96:15:31:ed:95:94:12:57:b1:a6:eb: c9:e4:a5:97:c4:d2:8e:39:50:6b:22:83:6e:5a:93:07:7a:90: c0:19:3e:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R5fFITpPN7KRnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NjQ5OGNhOTYtNmUwNy00MzcxLWE3NDUtNjczYmVjODFiMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1X2RUe+pxCkf71q62n0cfxtixL20TQPLF/+ w5Y+9Bsld6XX+Hf/Ly4VjDFH18AAkl/Ys0gRvFYy7S8cEhyF3ouLRPHKsZeMVJF6 rCSBXCRCaskYwyxi50fL08Byp2MZaYcO5R1ODU9lrj59MYPYWYXzXD7eY1RxSCeq Y0T/nKh8iLqMkMMiMPJZJk8uKtPGg1midLlHOQDKSctjQAv3OJzu9bVQN+4Q7T21 inHYMbQCw7XuSTVK3ncOGGaJzNHkaAWmUlh8St5xjamxf8iZ1zrrf9NyK3v9Ntni 3m5r8AhcXQUQIklBq/kWY6YpPJ2z7XxR8vIKGZlF35yGjIO2OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmJOc+++FdovsDsVrzCfl3lnf61MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzE5NWFkMzMtYzNiMS0z NjE4LTg4NGQtMTc3MjUzMThhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhToMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTdXhmJ+qUF1N50mX9uxcs6/RVvSwFGrNdOfC1QZuGibYN/ITncNXyU EBvjYwqznHlItto2xKNmp4cU8vmOncbTht75hHukX8bf9obLY5JefuKH+kHJnlWn hAkwVD2UstU+3aSRkqd0TFck2WlRHkJWBJMTqI48edVV1GAa+ZlZ45Ocl/0tgTkX 6xiy22cMt22G6fAAit5bsQ78WbI3MQGMJ0XkrVgKQfXwdQMiWifkJ1zDwCgYFi8V jBMwHIR94C7JAqoQy1c6mz5NNrn3oFqLfjhyWwYXgModJ4TPhIyWFTHtlZQSV7Gm 68nkpZfE0o45UGsig25akwd6kMAZPtg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:05 2025 by rpki-client