$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa File: 4a2f858b-513e-375a-88c7-94e0fe278bba.roa (raw, json) Hash identifier: Ao8S6Xkyk8gm04/ZwwT7Xsy/GRIeWfy2Z4rZ7HLfeZk= Subject key identifier: D2:00:69:33:BD:3D:E2:7F:FF:4B:BA:1A:B2:45:4D:F3:7F:B0:F7:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB940D235842FE04054F0140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa Signing time: Thu 06 Feb 2025 18:14:17 +0000 ROA not before: Thu 06 Feb 2025 18:14:17 +0000 ROA not after: Wed 07 May 2025 17:14:17 +0000 asID: 7029 IP address blocks: 98.17.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:94:0d:23:58:42:fe:04:05:4f:01:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:14:17 2025 GMT Not After : May 7 17:14:17 2025 GMT Subject: CN=c1b9cde2-7f53-42bf-b379-bb9fb461abee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ce:bc:bb:0e:86:2e:5f:11:a9:61:21:59:6b: ee:b9:2a:f3:7d:07:5b:4b:2a:bc:15:4b:52:9d:fd: 12:db:71:89:94:2c:c2:0e:97:1d:4d:be:34:cc:95: 6b:44:99:88:1c:fc:21:93:d5:c9:a3:f6:88:cc:65: 91:fa:cb:7c:10:65:73:2b:83:c8:de:dc:0a:7c:58: 8f:10:df:3c:ec:cd:20:b9:e1:54:4b:6a:71:cc:79: 91:65:a4:eb:34:93:c9:f2:1f:5f:df:d9:d0:fb:16: c0:03:f5:e4:22:13:96:4c:aa:8c:c9:8b:fa:6a:29: 92:3a:cd:06:4d:b4:f0:ce:ea:67:44:09:5b:47:da: 94:7d:b3:11:69:2a:04:c0:4f:5f:25:37:c1:f8:6c: 2f:2c:78:3b:aa:4c:f7:66:5c:eb:76:fd:f0:d4:ca: e8:28:a3:ef:b7:74:fa:ba:0d:15:f6:b8:2f:62:d0: c4:b1:d5:84:34:2d:cf:76:ab:83:16:e7:bf:c1:66: 8c:82:8b:e4:1a:2e:30:c6:7b:cf:25:da:f8:00:be: 2c:23:0f:e9:12:fa:7e:fe:7d:54:29:34:d5:02:b2: 65:4b:b9:db:33:e4:db:34:5e:10:6c:1c:e2:a6:bf: 40:34:70:49:98:a9:1e:d7:2c:eb:15:4b:76:66:b0: 44:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:00:69:33:BD:3D:E2:7F:FF:4B:BA:1A:B2:45:4D:F3:7F:B0:F7:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4a2f858b-513e-375a-88c7-94e0fe278bba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9e:06:b9:79:a3:c6:b9:e4:50:a2:15:0a:ff:b3:7e:d5:74: 0b:85:4f:59:d5:88:a4:ac:03:b3:91:1c:02:92:61:98:73:d0: 5a:f3:0f:4a:0f:77:19:0f:3e:51:77:21:f2:42:f7:37:4e:dc: ce:0d:a1:33:59:cd:53:74:4d:2e:4a:bd:5b:27:8c:7f:86:3b: 0f:35:2b:d5:a2:ee:4a:64:20:92:a5:59:c3:3d:a3:98:e4:8d: 7a:4c:c8:f2:cc:38:f8:64:77:54:a5:34:de:7f:28:b3:23:48: 52:88:05:30:9b:19:b4:98:65:0c:22:a9:c7:55:74:63:f0:45: 87:c5:04:36:03:5d:0e:d7:09:b5:f0:31:40:af:24:b3:20:69: 5b:80:a6:81:c6:2c:d3:9f:4f:57:36:b6:b8:5b:40:77:2e:37: 8e:72:d6:f7:6d:ed:f8:54:cc:33:c3:c7:c0:65:82:57:e4:5f: 2a:74:40:34:c2:3f:4e:2c:61:f4:70:66:f5:6d:c0:bd:07:09: 6a:c3:c1:b1:61:e5:3e:ad:fd:2f:0b:a2:96:c2:cb:89:07:ba: 6c:21:9e:7e:62:ea:91:04:69:e4:5b:76:10:db:dd:f9:38:a4: 04:7f:68:c4:03:0b:58:b9:92:07:41:8b:a0:dc:9b:30:80:9e: 4a:92:e0:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLlA0jWEL+BAVPAUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTQxN1oXDTI1MDUwNzE3MTQxN1owLzEtMCsGA1UEAxMk YzFiOWNkZTItN2Y1My00MmJmLWIzNzktYmI5ZmI0NjFhYmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws68uw6GLl8RqWEhWWvuuSrzfQdbSyq8FUtS nf0S23GJlCzCDpcdTb40zJVrRJmIHPwhk9XJo/aIzGWR+st8EGVzK4PI3twKfFiP EN887M0gueFUS2pxzHmRZaTrNJPJ8h9f39nQ+xbAA/XkIhOWTKqMyYv6aimSOs0G TbTwzupnRAlbR9qUfbMRaSoEwE9fJTfB+GwvLHg7qkz3Zlzrdv3w1MroKKPvt3T6 ug0V9rgvYtDEsdWENC3PdquDFue/wWaMgovkGi4wxnvPJdr4AL4sIw/pEvp+/n1U KTTVArJlS7nbM+TbNF4QbBzipr9ANHBJmKke1yzrFUt2ZrBEwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIAaTO9PeJ//0u6GrJFTfN/sPfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGEyZjg1OGItNTEzZS0z NzVhLTg4YzctOTRlMGZlMjc4YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCeBrl5o8a55FCiFQr/s37VdAuFT1nViKSsA7ORHAKSYZhz0FrzD0oP dxkPPlF3IfJC9zdO3M4NoTNZzVN0TS5KvVsnjH+GOw81K9Wi7kpkIJKlWcM9o5jk jXpMyPLMOPhkd1SlNN5/KLMjSFKIBTCbGbSYZQwiqcdVdGPwRYfFBDYDXQ7XCbXw MUCvJLMgaVuApoHGLNOfT1c2trhbQHcuN45y1vdt7fhUzDPDx8BlglfkXyp0QDTC P04sYfRwZvVtwL0HCWrDwbFh5T6t/S8LopbCy4kHumwhnn5i6pEEaeRbdhDb3fk4 pAR/aMQDC1i5kgdBi6DcmzCAnkqS4C0= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:23 2025 by rpki-client