$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa File: 3d410945-00d3-33e8-9750-df14388cbd3a.roa (raw, json) Hash identifier: iQokKa1dFjzehwJFbTZ7KUM+3VBwOmrCdLKFz6Zl9Mg= Subject key identifier: 2D:CC:59:C7:2C:3F:29:E7:AC:5D:2D:61:AF:14:E7:EB:05:9B:0E:81 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AA698F5068F10AE6F97100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa Signing time: Thu 20 Feb 2025 18:15:52 +0000 ROA not before: Thu 20 Feb 2025 18:15:52 +0000 ROA not after: Wed 21 May 2025 17:15:52 +0000 asID: 7029 IP address blocks: 98.23.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:69:8f:50:68:f1:0a:e6:f9:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:15:52 2025 GMT Not After : May 21 17:15:52 2025 GMT Subject: CN=0b5fe896-a7fd-4e49-992e-57b89fbcf508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e1:f6:fd:35:c8:64:71:f2:46:d0:52:1f:c1: 1d:fd:73:e2:e1:f7:a6:44:dc:1c:56:8c:9f:81:eb: 3d:5f:1f:cd:56:fe:11:8b:3d:0f:f2:6e:80:58:ab: b9:ff:6f:2f:17:d6:5b:02:3e:84:b9:1e:f6:73:07: 7a:7e:75:51:fc:dd:e3:c4:3a:7d:2d:5d:46:01:a0: fc:28:34:11:6e:ae:78:d8:ca:f8:59:8e:8a:53:0d: a5:cc:ae:3c:5b:39:a1:0a:87:65:7f:d4:ad:f2:2a: 24:2a:51:f9:c7:00:47:ab:f6:8d:6b:23:e0:13:75: 0e:7b:f8:69:a3:05:3d:0f:b9:0d:f6:c6:1d:b0:d4: ee:09:2e:3a:8b:c2:48:2e:ef:1f:2d:ce:0d:52:34: cc:80:59:ff:e3:0e:45:95:88:f3:51:1a:a2:f0:09: ef:99:47:b5:6a:a7:be:13:88:d9:5e:44:79:18:6d: 80:8a:3a:0b:0c:b9:fb:ff:e7:c8:71:47:62:1c:b9: 4c:15:86:78:71:37:e2:b6:36:54:80:a3:7c:c6:dd: db:64:da:50:77:f7:28:a7:1d:df:e8:5c:9a:18:e1: f1:c6:ce:dc:23:59:31:3c:f8:6b:7c:e7:92:ab:52: a7:9b:be:10:8f:6a:d2:15:13:64:26:62:6c:7b:e9: 61:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CC:59:C7:2C:3F:29:E7:AC:5D:2D:61:AF:14:E7:EB:05:9B:0E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d410945-00d3-33e8-9750-df14388cbd3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:1b:37:37:91:80:fd:85:0a:06:db:38:07:fe:ba:65:04:f3: c9:bf:00:21:da:5d:04:c6:f2:21:af:53:d4:e0:a1:5d:20:e7: a0:c8:e2:b2:3f:bf:ab:68:1e:ee:37:dc:54:c2:3d:3a:77:97: d1:c1:ab:4b:e0:0a:66:c4:15:05:8d:03:92:79:0d:9c:61:8b: bc:81:33:38:b0:a5:53:81:26:3d:5d:74:fd:cf:08:00:29:20: 9c:93:54:93:61:a4:01:dc:12:4b:f3:7e:30:08:60:90:c6:28: 0d:86:b3:d6:ea:e6:b1:89:5c:4e:0e:c7:a2:69:21:80:72:eb: 3b:e2:89:ba:c3:e3:e2:a5:59:ed:d1:9d:36:f2:69:8e:ed:a2: 36:cb:68:d0:e9:ce:cc:8f:a6:7e:65:a7:2a:1e:0b:b6:5e:3d: d5:df:28:12:3c:76:67:07:68:5e:98:1e:58:a1:39:66:04:6c: a6:47:78:4e:00:ee:11:4e:da:ee:46:1a:df:12:f4:b1:2f:df: 1b:e1:28:e2:6c:21:09:16:b0:8c:ec:46:e2:ab:08:f3:c6:70: af:5a:87:85:58:4f:68:d7:36:bb:dd:97:30:8e:7e:bf:ea:fd: 41:d2:2f:a8:a0:5a:34:95:bf:b5:ab:66:fd:69:1c:af:b7:0f: c6:69:b7:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqmmPUGjxCub5cQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTU1MloXDTI1MDUyMTE3MTU1MlowLzEtMCsGA1UEAxMk MGI1ZmU4OTYtYTdmZC00ZTQ5LTk5MmUtNTdiODlmYmNmNTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuH2/TXIZHHyRtBSH8Ed/XPi4femRNwcVoyf ges9Xx/NVv4Riz0P8m6AWKu5/28vF9ZbAj6EuR72cwd6fnVR/N3jxDp9LV1GAaD8 KDQRbq542Mr4WY6KUw2lzK48WzmhCodlf9St8iokKlH5xwBHq/aNayPgE3UOe/hp owU9D7kN9sYdsNTuCS46i8JILu8fLc4NUjTMgFn/4w5FlYjzURqi8AnvmUe1aqe+ E4jZXkR5GG2AijoLDLn7/+fIcUdiHLlMFYZ4cTfitjZUgKN8xt3bZNpQd/copx3f 6FyaGOHxxs7cI1kxPPhrfOeSq1Knm74Qj2rSFRNkJmJse+lhRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3MWccsPynnrF0tYa8U5+sFmw6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q0MTA5NDUtMDBkMy0z M2U4LTk3NTAtZGYxNDM4OGNiZDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcbNzeRgP2FCgbbOAf+umUE88m/ACHaXQTG8iGvU9TgoV0g56DI4rI/ v6toHu433FTCPTp3l9HBq0vgCmbEFQWNA5J5DZxhi7yBMziwpVOBJj1ddP3PCAAp IJyTVJNhpAHcEkvzfjAIYJDGKA2Gs9bq5rGJXE4Ox6JpIYBy6zviibrD4+KlWe3R nTbyaY7tojbLaNDpzsyPpn5lpyoeC7ZePdXfKBI8dmcHaF6YHlihOWYEbKZHeE4A 7hFO2u5GGt8S9LEv3xvhKOJsIQkWsIzsRuKrCPPGcK9ah4VYT2jXNrvdlzCOfr/q /UHSL6igWjSVv7WrZv1pHK+3D8Zpt1w= -----END CERTIFICATE-----Generated at Sun Apr 6 09:40:24 2025 by rpki-client