$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa File: 54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa (raw, json) Hash identifier: phv3YtfBS7ap5QTfE+As1RR9GRrPmvaGiGO05nxE420= Subject key identifier: 58:8C:5F:9F:BE:0E:15:A2:D3:88:24:A1:DA:46:E7:98:37:43:F7:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB578D5225B14CFC4E22D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 98.21.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:78:d5:22:5b:14:cf:c4:e2:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=9628dcbb-88a4-43e4-9eab-2945874d2f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7b:d2:03:24:49:9d:0d:82:57:02:a2:f8:d9: 3a:ea:40:57:5d:e6:77:61:89:66:13:94:70:4c:34: 18:e8:b8:39:17:b8:96:6d:ae:9c:46:34:0f:0b:8d: 02:d4:d3:c5:f3:47:e5:61:c5:55:4d:57:15:a0:9a: d1:e1:48:58:95:f3:0a:c4:ea:7d:d7:7f:fe:bb:f5: 11:3a:d9:f4:67:45:d1:9b:77:ba:19:65:d6:76:0e: fc:74:1c:e2:c7:72:ab:e2:7d:1b:f8:07:11:03:94: 55:ff:d3:f7:2d:14:48:3f:b1:32:19:e2:b1:aa:64: 3d:dc:75:26:ee:d9:f1:c4:6b:84:95:ed:a5:f9:49: 69:1f:18:cb:06:b0:d1:1f:15:56:05:fa:9b:62:06: 17:51:b3:10:d1:43:91:07:c9:12:b8:6b:fe:eb:90: 08:82:30:4e:d0:49:d1:45:53:bb:57:2e:6e:cc:07: bf:63:28:eb:7d:8b:51:76:10:54:94:86:0b:b8:db: c8:6b:8f:2a:08:79:85:51:0f:8e:89:d1:9b:b3:33: a0:af:19:07:ea:ff:3f:63:f5:33:f3:7e:5e:dd:cf: 54:10:c2:f8:64:4c:9e:d3:f9:f9:00:41:01:e3:de: 7e:70:7c:02:07:6a:9f:7a:f9:86:9b:39:4e:c6:83: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:8C:5F:9F:BE:0E:15:A2:D3:88:24:A1:DA:46:E7:98:37:43:F7:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/54a83d42-1cc1-3e07-91f5-fa620c1320ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:69:06:1a:b5:3a:69:00:90:77:e7:d9:1a:58:ce:bf:c1:7b: 64:0d:76:e0:80:c3:be:09:78:c1:7c:b9:78:a2:8f:d8:2f:51: 83:b9:ed:83:ce:61:bd:18:ee:b4:37:1c:b6:75:7b:e7:d8:c6: d2:bb:d5:e4:8b:26:ec:cf:6a:56:d6:77:2d:f3:f9:3c:bf:dc: 8f:4f:58:d5:21:df:f2:d7:25:73:16:26:fd:b3:be:ba:38:7d: 17:c9:a2:5d:5b:3a:43:42:96:53:18:91:08:db:5d:9c:fc:f0: f7:bd:59:aa:cc:e5:76:8b:ed:d8:33:15:d6:c9:83:54:9d:d8: 8f:1c:95:41:5e:2c:96:72:57:d1:a5:e3:3d:2a:5d:66:a7:5c: c7:b5:c8:b7:69:88:b2:f5:74:c8:7b:d4:1a:d4:7e:4e:59:18: 2d:a7:74:0f:41:d2:5e:e4:eb:fc:e6:af:b1:52:25:98:bd:1e: 9f:09:a2:44:b1:33:52:8f:42:38:4d:88:98:e2:f6:12:9a:83: 3a:a0:78:21:6b:df:ba:91:ae:53:b8:a9:6e:79:47:02:f8:fe: 93:46:62:63:d8:44:09:e5:d9:92:a0:f9:b3:35:90:b4:a7:da: e7:1c:ee:66:61:d9:a5:d0:fd:2b:07:42:5b:3f:32:86:ef:11: e1:42:9e:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXjVIlsUz8TiLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk OTYyOGRjYmItODhhNC00M2U0LTllYWItMjk0NTg3NGQyZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnvSAyRJnQ2CVwKi+Nk66kBXXeZ3YYlmE5Rw TDQY6Lg5F7iWba6cRjQPC40C1NPF80flYcVVTVcVoJrR4UhYlfMKxOp913/+u/UR Otn0Z0XRm3e6GWXWdg78dBzix3Kr4n0b+AcRA5RV/9P3LRRIP7EyGeKxqmQ93HUm 7tnxxGuEle2l+UlpHxjLBrDRHxVWBfqbYgYXUbMQ0UORB8kSuGv+65AIgjBO0EnR RVO7Vy5uzAe/YyjrfYtRdhBUlIYLuNvIa48qCHmFUQ+OidGbszOgrxkH6v8/Y/Uz 835e3c9UEML4ZEye0/n5AEEB495+cHwCB2qfevmGmzlOxoM5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiMX5++DhWi04gkodpG55g3Q/fTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTRhODNkNDItMWNjMS0z ZTA3LTkxZjUtZmE2MjBjMTMyMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBpBhq1OmkAkHfn2RpYzr/Be2QNduCAw74JeMF8uXiij9gvUYO57YPO Yb0Y7rQ3HLZ1e+fYxtK71eSLJuzPalbWdy3z+Ty/3I9PWNUh3/LXJXMWJv2zvro4 fRfJol1bOkNCllMYkQjbXZz88Pe9WarM5XaL7dgzFdbJg1Sd2I8clUFeLJZyV9Gl 4z0qXWanXMe1yLdpiLL1dMh71BrUfk5ZGC2ndA9B0l7k6/zmr7FSJZi9Hp8JokSx M1KPQjhNiJji9hKagzqgeCFr37qRrlO4qW55RwL4/pNGYmPYRAnl2ZKg+bM1kLSn 2ucc7mZh2aXQ/SsHQls/MobvEeFCnqo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:54 2025 by rpki-client