$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa File: 4814a9e0-3358-3815-8a3b-85e799e84ee3.roa (raw, json) Hash identifier: W6ZqXRRr7d8yjBU7NTF4ndD0bST+cCkYCwqY8tmsQ/M= Subject key identifier: 6B:76:F4:C5:A5:88:7A:E5:30:91:26:9B:E2:F1:3E:7D:12:A9:53:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B3E964BB378EA8271C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 98.16.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b3:e9:64:bb:37:8e:a8:27:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=732c492d-e307-493d-823f-1ccc8d1b2908 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:94:be:0b:e7:26:bc:1e:01:57:e4:17:a7:da: 56:8e:dd:95:5d:54:41:35:b7:73:3a:28:6d:a1:2d: 5c:8a:1a:cb:96:ec:1c:bc:63:cb:35:8a:e2:a1:eb: ec:32:bb:9a:ff:f6:7a:f1:3b:61:50:47:e5:bd:2f: 7f:df:4c:ec:35:05:23:f4:c7:4d:31:be:46:42:fe: 0e:49:7d:1f:76:8c:ec:57:22:be:5f:34:bc:ab:bf: 6f:ae:4a:51:e0:d6:d0:4e:01:f8:55:c1:a9:af:7e: ec:6e:5b:01:df:e1:77:5d:2e:1a:e6:62:e0:8e:33: 16:70:23:c7:4c:ba:67:6f:40:43:a8:3e:37:9a:cc: c8:ee:5a:ca:1e:84:be:08:90:40:b0:1a:c0:cc:6b: a0:2e:c1:83:99:b6:01:fc:be:71:08:eb:74:9f:75: 65:e9:32:e1:1c:68:06:13:13:ea:ab:3c:51:ef:c6: 53:61:28:5e:15:e8:26:e7:a1:6a:b2:88:53:98:9b: 33:47:4c:9b:8d:90:ba:08:7d:b2:78:f9:cf:5e:d2: 62:4f:ff:d1:9f:c8:25:6b:33:1a:5b:29:ac:0d:be: dc:7f:49:96:c8:34:d7:dd:ad:8c:04:2a:03:b7:0d: ad:b7:75:31:74:70:24:47:c8:81:39:c1:13:c5:fd: ef:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:76:F4:C5:A5:88:7A:E5:30:91:26:9B:E2:F1:3E:7D:12:A9:53:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4814a9e0-3358-3815-8a3b-85e799e84ee3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:37:c9:9d:85:2d:75:a7:0f:52:eb:88:8e:cd:be:f8:a7:1e: 12:6b:37:fe:30:ee:73:84:63:8c:26:31:5b:74:c9:5f:c0:4a: bc:39:f4:98:c0:0e:36:1a:9e:46:58:72:3d:3d:d5:8a:e1:35: 49:b2:2a:d0:c8:12:50:93:25:44:4d:ee:21:c8:8c:f0:ac:4a: ea:13:77:14:e8:83:0a:8a:ed:6f:25:2d:d5:4b:82:00:15:4e: 4c:bf:b3:76:66:45:e3:70:9b:2c:ad:d2:94:8b:a5:30:c0:be: ef:f5:9c:a6:73:24:7a:92:a5:b7:89:28:95:b4:cd:2f:f6:6d: c4:53:56:11:aa:48:f3:3c:00:30:4a:bd:fe:50:0e:09:c7:3d: 33:0c:fd:42:41:72:6f:05:7d:5e:8d:89:54:97:d8:42:1d:4b: 9c:34:ed:53:bc:e1:88:60:85:fc:95:0a:02:ef:e8:99:7b:f5: 5b:6a:45:85:c8:54:77:44:ad:68:d2:3c:58:d9:34:ac:38:cb: 58:2e:1b:6a:ed:e1:c3:dc:93:45:bf:ed:66:90:47:54:73:a5: 30:4f:d3:8e:79:c7:00:12:76:fc:ab:b9:72:3a:9b:08:bc:99: 84:c4:7e:c9:ef:66:47:93:2f:e5:bc:11:42:70:a6:7c:90:a8: 61:d5:cd:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LPpZLs3jqgnHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk NzMyYzQ5MmQtZTMwNy00OTNkLTgyM2YtMWNjYzhkMWIyOTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZS+C+cmvB4BV+QXp9pWjt2VXVRBNbdzOiht oS1cihrLluwcvGPLNYrioevsMrua//Z68TthUEflvS9/30zsNQUj9MdNMb5GQv4O SX0fdozsVyK+XzS8q79vrkpR4NbQTgH4VcGpr37sblsB3+F3XS4a5mLgjjMWcCPH TLpnb0BDqD43mszI7lrKHoS+CJBAsBrAzGugLsGDmbYB/L5xCOt0n3Vl6TLhHGgG ExPqqzxR78ZTYSheFegm56FqsohTmJszR0ybjZC6CH2yePnPXtJiT//Rn8glazMa WymsDb7cf0mWyDTX3a2MBCoDtw2tt3UxdHAkR8iBOcETxf3vLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt29MWliHrlMJEmm+LxPn0SqVPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDgxNGE5ZTAtMzM1OC0z ODE1LThhM2ItODVlNzk5ZTg0ZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGA3yZ2FLXWnD1LriI7NvvinHhJrN/4w7nOEY4wmMVt0yV/ASrw59JjA DjYankZYcj091YrhNUmyKtDIElCTJURN7iHIjPCsSuoTdxTogwqK7W8lLdVLggAV Tky/s3ZmReNwmyyt0pSLpTDAvu/1nKZzJHqSpbeJKJW0zS/2bcRTVhGqSPM8ADBK vf5QDgnHPTMM/UJBcm8FfV6NiVSX2EIdS5w07VO84YhghfyVCgLv6Jl79VtqRYXI VHdErWjSPFjZNKw4y1guG2rt4cPck0W/7WaQR1RzpTBP0455xwASdvyruXI6mwi8 mYTEfsnvZkeTL+W8EUJwpnyQqGHVzWA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:26 2025 by rpki-client