$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa File: 34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa (raw, json) Hash identifier: InIYzjY5FMz5YAj3wnKHB7r/EYs7mmBj112MSjFq89s= Subject key identifier: 1A:EE:17:ED:2E:BA:8A:50:0B:D3:6C:7B:E1:8C:69:A5:B7:B7:35:26 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA7102C84D1F7793EC3DB100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.17.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:02:c8:4d:1f:77:93:ec:3d:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=e27edbb6-7468-4472-b0a2-5cb772b0ae09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8c:3f:08:ad:fe:e3:f9:68:e5:1b:1e:74:2f: f6:74:f2:a7:24:71:65:e3:28:6e:dc:d3:fb:7e:4b: 20:96:58:a3:48:e7:8b:99:99:b6:61:39:f0:82:db: af:62:04:aa:88:0f:18:c9:f2:1f:48:21:45:03:69: 6a:d8:52:b9:ea:64:52:28:ca:cb:6f:53:75:ec:8f: 90:3d:f2:60:f2:26:3e:6f:6f:82:52:fe:e8:48:18: df:a6:d2:70:4b:cf:d7:b1:6f:2a:57:57:81:82:1f: 8e:55:bd:ab:c2:88:c1:5f:42:96:e4:1e:98:98:a5: 7b:7f:b9:4a:4b:50:41:86:50:a6:98:a7:bd:4e:63: 0e:d2:a8:6f:72:ea:b7:68:85:64:3a:c3:32:79:0b: c0:01:48:b4:cb:3a:ce:7a:e2:0b:29:81:0b:4f:fd: e8:6c:09:1b:77:aa:30:45:94:4f:fd:7a:44:cb:14: 09:52:a4:18:32:9b:d4:0b:c8:3c:a9:6e:e6:5b:47: 37:e7:27:0b:b1:e5:d7:4a:a9:54:e7:08:2e:c7:4e: 71:3b:4e:3a:64:41:20:c7:5e:bc:32:c5:2b:40:08: 48:f7:d6:47:64:0b:b5:eb:88:a9:a5:5e:90:d7:20: ac:19:da:34:b3:19:34:80:c0:ff:62:16:a2:96:05: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EE:17:ED:2E:BA:8A:50:0B:D3:6C:7B:E1:8C:69:A5:B7:B7:35:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34c9cd7a-bbdf-34b2-be48-bf81d7e9166a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a2:15:9d:e8:b2:c7:0c:67:54:b1:5f:3d:16:46:f1:c7:82: fa:65:70:26:92:3b:60:bf:62:81:6f:ab:b7:50:44:3a:68:6d: bf:55:e2:82:60:61:f4:91:33:6b:fe:70:97:ea:e3:78:bd:ae: c7:32:d4:23:87:ff:47:da:74:dc:db:b8:eb:cc:c3:18:48:ef: c0:4b:07:9e:b7:5f:f1:25:96:59:e9:80:c1:f0:92:74:6c:03: ac:59:02:3c:14:b2:18:45:31:3c:af:f6:60:84:6c:67:5d:f6: bc:16:4f:7c:36:55:68:1e:c7:50:b1:b4:c2:d0:ff:97:2a:05: 87:bd:f1:04:1b:19:8d:a6:54:3d:90:88:0a:f3:96:cd:19:9e: 5e:07:ce:70:53:ed:c3:bb:65:db:3f:06:a0:a6:ba:f6:34:d4: 92:dc:6a:30:66:9b:1f:80:55:bd:fa:f9:a6:aa:e9:a7:e3:01: 67:87:bb:3c:68:9d:a8:f5:74:24:7d:a1:df:a0:07:c0:cb:1d: 58:bd:d5:a4:5f:e8:1a:54:a9:e5:ae:f9:ba:a6:28:45:62:3f: e0:25:f0:ee:2d:ce:af:82:ac:86:24:c2:93:16:33:b5:94:c8: bc:3b:31:8a:8b:18:86:03:aa:50:f8:33:6b:fb:c7:bd:f8:b6: b7:19:19:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQLITR93k+w9sQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk ZTI3ZWRiYjYtNzQ2OC00NDcyLWIwYTItNWNiNzcyYjBhZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4w/CK3+4/lo5RsedC/2dPKnJHFl4yhu3NP7 fksgllijSOeLmZm2YTnwgtuvYgSqiA8YyfIfSCFFA2lq2FK56mRSKMrLb1N17I+Q PfJg8iY+b2+CUv7oSBjfptJwS8/XsW8qV1eBgh+OVb2rwojBX0KW5B6YmKV7f7lK S1BBhlCmmKe9TmMO0qhvcuq3aIVkOsMyeQvAAUi0yzrOeuILKYELT/3obAkbd6ow RZRP/XpEyxQJUqQYMpvUC8g8qW7mW0c35ycLseXXSqlU5wgux05xO046ZEEgx168 MsUrQAhI99ZHZAu164ippV6Q1yCsGdo0sxk0gMD/YhailgU69wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBruF+0uuopQC9Nse+GMaaW3tzUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzRjOWNkN2EtYmJkZi0z NGIyLWJlNDgtYmY4MWQ3ZTkxNjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWiFZ3osscMZ1SxXz0WRvHHgvplcCaSO2C/YoFvq7dQRDpobb9V4oJg YfSRM2v+cJfq43i9rscy1COH/0fadNzbuOvMwxhI78BLB563X/ElllnpgMHwknRs A6xZAjwUshhFMTyv9mCEbGdd9rwWT3w2VWgex1CxtMLQ/5cqBYe98QQbGY2mVD2Q iArzls0Znl4HznBT7cO7Zds/BqCmuvY01JLcajBmmx+AVb36+aaq6afjAWeHuzxo naj1dCR9od+gB8DLHVi91aRf6BpUqeWu+bqmKEViP+Al8O4tzq+CrIYkwpMWM7WU yLw7MYqLGIYDqlD4M2v7x734trcZGUo= -----END CERTIFICATE-----Generated at Sat Apr 5 20:33:51 2025 by rpki-client