$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa File: 5125e331-f265-3594-a49c-f30257eea820.roa (raw, json) Hash identifier: QqArWjqrm7zR0X+0EfwAh8fY7rB/o97v5wIc2pTyuGw= Subject key identifier: 81:A4:8D:CA:AF:68:FC:9C:D4:A9:04:1B:CB:82:E6:3A:D8:8F:4B:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F289A8DC27E6F8160360 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.21.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f2:89:a8:dc:27:e6:f8:16:03:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=352522db-cab5-4fbf-9442-1053dd63c30f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:99:16:17:3e:47:3a:e7:10:2c:27:28:71: 7f:d6:15:24:d6:85:ca:64:98:5b:91:10:eb:d1:8a: 12:7b:01:e5:9e:ef:81:da:8c:2a:f2:c6:2f:50:95: 49:06:06:55:7b:4f:9a:80:75:7f:62:15:15:af:f9: ef:f0:23:0c:a8:a1:7e:e8:e3:e1:da:91:04:79:28: b8:ba:bf:0e:23:8e:19:69:83:02:a4:6b:10:bb:5e: 38:85:80:6f:ba:c8:11:7d:0b:d7:f5:11:94:51:46: ed:e0:f6:fe:5b:e4:60:20:6b:29:8f:99:bb:ba:ba: 2c:c8:41:ec:ef:bc:a8:69:24:9b:83:8a:45:06:20: ba:ff:3b:88:da:cf:5b:38:87:8f:08:d1:09:45:d4: 04:34:71:cb:4c:b7:49:fa:9a:cb:66:54:54:b0:e7: 9c:39:24:61:5e:d7:fc:59:6e:5c:6c:49:03:5b:32: 40:0c:b9:ec:3b:66:f7:fe:11:d4:e1:60:21:25:2b: 57:c6:82:be:a8:8a:bf:b0:9e:84:e9:ea:b2:3d:75: 36:f2:95:d6:6c:f1:be:29:d9:0b:e2:bd:eb:a8:ac: cc:04:4a:81:1f:49:58:17:6c:21:2c:78:0c:81:2c: 4f:ae:a7:36:b5:8b:dc:68:bc:32:43:43:60:77:c5: 17:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:8D:CA:AF:68:FC:9C:D4:A9:04:1B:CB:82:E6:3A:D8:8F:4B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5125e331-f265-3594-a49c-f30257eea820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:26:23:19:73:83:09:34:1c:f5:a7:ec:6f:d1:20:51:b1:da: 67:ac:0c:e7:40:94:3a:a3:80:e8:60:57:05:f6:12:15:d6:d7: 5a:9d:0e:37:c2:d6:68:b2:80:aa:06:e1:89:c1:24:93:6d:17: ae:a2:c3:c3:83:aa:57:1a:e3:72:3c:8e:5a:8a:b6:13:d5:78: 68:66:a0:15:da:0a:58:1c:e9:fb:a1:86:8c:49:00:17:b9:07: 17:a3:e6:c8:06:55:ac:75:e1:09:c2:f9:84:74:75:82:e6:76: 20:d3:8c:8a:7a:e4:01:bd:1f:af:b6:48:28:31:70:cf:4e:a2: 8b:24:25:1a:c1:1b:c7:ec:9d:0d:b5:7f:7d:79:68:b9:ac:76: ac:1f:30:77:27:37:d1:98:4f:fd:27:16:f8:be:e4:5e:ac:0a: 42:b0:f3:5e:ed:9e:5e:0d:56:b0:ac:ce:03:fc:11:4c:2a:af: 8a:93:88:e3:d7:88:60:16:f5:0a:18:f5:1c:ad:96:11:81:b3: cf:9b:a3:a4:61:0b:f8:2c:4a:b6:df:4a:5f:16:85:6c:64:ab: 6b:d9:f7:cb:70:44:3b:cf:75:d6:ba:2d:fb:c6:b1:58:63:38: fe:78:67:28:77:3b:ea:37:fd:9f:a0:33:c5:46:cc:ef:46:3e: df:7d:c0:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPKJqNwn5vgWA2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzUyNTIyZGItY2FiNS00ZmJmLTk0NDItMTA1M2RkNjNjMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMuZFhc+RzrnECwnKHF/1hUk1oXKZJhbkRDr 0YoSewHlnu+B2owq8sYvUJVJBgZVe0+agHV/YhUVr/nv8CMMqKF+6OPh2pEEeSi4 ur8OI44ZaYMCpGsQu144hYBvusgRfQvX9RGUUUbt4Pb+W+RgIGspj5m7urosyEHs 77yoaSSbg4pFBiC6/zuI2s9bOIePCNEJRdQENHHLTLdJ+prLZlRUsOecOSRhXtf8 WW5cbEkDWzJADLnsO2b3/hHU4WAhJStXxoK+qIq/sJ6E6eqyPXU28pXWbPG+KdkL 4r3rqKzMBEqBH0lYF2whLHgMgSxPrqc2tYvcaLwyQ0Ngd8UXWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIGkjcqvaPyc1KkEG8uC5jrYj0tbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTEyNWUzMzEtZjI2NS0z NTk0LWE0OWMtZjMwMjU3ZWVhODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhWYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQmIxlzgwk0HPWn7G/RIFGx2mesDOdAlDqjgOhgVwX2EhXW11qdDjfC 1miygKoG4YnBJJNtF66iw8ODqlca43I8jlqKthPVeGhmoBXaClgc6fuhhoxJABe5 Bxej5sgGVax14QnC+YR0dYLmdiDTjIp65AG9H6+2SCgxcM9OooskJRrBG8fsnQ21 f315aLmsdqwfMHcnN9GYT/0nFvi+5F6sCkKw817tnl4NVrCszgP8EUwqr4qTiOPX iGAW9QoY9RytlhGBs8+bo6RhC/gsSrbfSl8WhWxkq2vZ98twRDvPdda6LfvGsVhj OP54Zyh3O+o3/Z+gM8VGzO9GPt99wEE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:07:34 2025 by rpki-client