$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa File: 4dac845c-f6b7-3920-8c86-2e4456a0f133.roa (raw, json) Hash identifier: yjoPjT+PbQK5mFIsupfnw2QdYIyP7Jo0dGe70doaC/4= Subject key identifier: 62:1C:6C:8C:AF:25:CB:3E:BE:32:20:EA:5C:53:89:71:77:37:8D:AD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F305BA829B707301225DC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa Signing time: Tue 21 Jan 2025 20:37:51 +0000 ROA not before: Tue 21 Jan 2025 20:37:51 +0000 ROA not after: Mon 21 Apr 2025 19:37:51 +0000 asID: 7029 IP address blocks: 98.16.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:5b:a8:29:b7:07:30:12:25:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:51 2025 GMT Not After : Apr 21 19:37:51 2025 GMT Subject: CN=32289eeb-2293-4596-adfe-c41df52227e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:50:66:aa:1d:0f:b4:d9:68:2b:57:f4:53: b7:6f:4c:a9:8d:a1:43:2e:a4:8c:ac:e3:0a:6f:e4: c0:d3:9b:7c:8a:d7:0b:1e:b7:3d:90:24:c5:3b:2f: a0:7f:60:38:e7:11:73:55:84:3c:d2:4b:aa:63:59: d0:72:4c:41:e7:ab:a0:e6:5c:34:70:2e:da:aa:e7: e6:ff:34:a8:91:b6:ab:34:be:d4:45:de:1f:0f:32: 3c:5e:9f:0a:c5:e1:f7:11:9d:f9:d2:8d:d7:97:d5: 01:a2:47:43:1a:ca:c1:32:29:89:4e:13:9e:b2:8b: 9f:31:58:00:8a:04:cd:d1:28:99:88:27:7f:1f:00: 52:07:26:b8:b1:72:8a:64:98:26:10:54:07:89:dd: 6c:2e:16:e0:f8:de:54:0a:6f:12:81:97:02:d6:b2: be:5d:3c:46:32:bb:9b:2d:b4:54:85:44:30:85:65: e4:15:e8:26:35:7f:bf:f4:21:14:98:ec:b0:9b:05: f2:52:1c:86:96:f2:39:5b:0e:8a:48:e5:e7:64:4d: d5:12:42:13:21:ad:1b:49:54:92:46:81:92:54:0d: 50:20:9c:ca:de:a2:d7:c9:ed:9e:31:7a:4d:61:c5: ef:78:72:55:d6:dd:d3:fc:0c:15:3d:01:f5:c3:42: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1C:6C:8C:AF:25:CB:3E:BE:32:20:EA:5C:53:89:71:77:37:8D:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4dac845c-f6b7-3920-8c86-2e4456a0f133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:cb:56:b3:88:90:28:1e:0b:4b:19:15:11:26:32:ba:6b:50: eb:9e:66:92:ed:dc:28:68:04:1d:04:3f:84:20:1f:83:8c:75: fe:cb:e8:5b:87:1b:39:c6:96:34:3a:7f:81:ee:6a:b2:0f:44: d4:2a:ce:e0:53:1d:8a:2f:c2:a4:ee:a4:92:f3:66:07:8a:cd: 43:8f:65:a4:28:09:74:3e:34:04:c7:75:29:4c:79:6e:18:34: 13:f6:06:b9:b3:f6:3c:dc:cd:f2:6b:02:5a:5d:8a:ba:58:20: 2f:25:d4:22:3f:e9:d7:55:f4:19:be:5c:5b:f8:94:ef:01:ce: f2:9f:27:9f:7a:b4:d9:28:da:b7:db:49:96:56:a1:48:85:7e: 7b:d8:19:e6:35:77:b5:39:f6:77:e0:88:a0:57:94:52:66:b9: 64:85:38:96:54:f0:6b:e8:c9:6f:81:18:6e:2a:26:41:b3:11: 1c:9d:23:0c:ae:1f:6b:3b:68:90:d8:b8:eb:90:05:ab:2d:96: a2:7f:48:86:92:9d:3b:82:9c:e7:e3:a1:d7:e8:83:88:20:53: 9f:fa:1a:1f:c2:04:a5:dc:2a:86:c4:b9:18:5e:ed:24:f7:e5: 46:e8:bb:5f:43:90:d3:c1:5a:5d:39:03:75:e6:45:bf:2e:25: 0d:55:2a:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMFuoKbcHMBIl3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc1MVoXDTI1MDQyMTE5Mzc1MVowLzEtMCsGA1UEAxMk MzIyODllZWItMjI5My00NTk2LWFkZmUtYzQxZGY1MjIyN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO1QZqodD7TZaCtX9FO3b0ypjaFDLqSMrOMK b+TA05t8itcLHrc9kCTFOy+gf2A45xFzVYQ80kuqY1nQckxB56ug5lw0cC7aqufm /zSokbarNL7URd4fDzI8Xp8KxeH3EZ350o3Xl9UBokdDGsrBMimJThOesoufMVgA igTN0SiZiCd/HwBSBya4sXKKZJgmEFQHid1sLhbg+N5UCm8SgZcC1rK+XTxGMrub LbRUhUQwhWXkFegmNX+/9CEUmOywmwXyUhyGlvI5Ww6KSOXnZE3VEkITIa0bSVSS RoGSVA1QIJzK3qLXye2eMXpNYcXveHJV1t3T/AwVPQH1w0LULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIcbIyvJcs+vjIg6lxTiXF3N42tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGRhYzg0NWMtZjZiNy0z OTIwLThjODYtMmU0NDU2YTBmMTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhBQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrLVrOIkCgeC0sZFREmMrprUOueZpLt3ChoBB0EP4QgH4OMdf7L6FuH GznGljQ6f4HuarIPRNQqzuBTHYovwqTupJLzZgeKzUOPZaQoCXQ+NATHdSlMeW4Y NBP2Brmz9jzczfJrAlpdirpYIC8l1CI/6ddV9Bm+XFv4lO8BzvKfJ596tNko2rfb SZZWoUiFfnvYGeY1d7U59nfgiKBXlFJmuWSFOJZU8GvoyW+BGG4qJkGzERydIwyu H2s7aJDYuOuQBastlqJ/SIaSnTuCnOfjodfog4ggU5/6Gh/CBKXcKobEuRhe7ST3 5Ubou19DkNPBWl05A3XmRb8uJQ1VKh0= -----END CERTIFICATE-----Generated at Sat Apr 5 23:18:51 2025 by rpki-client