$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f0a638-9066-3a00-a9a9-d97f2acaf23f.roa File: 59f0a638-9066-3a00-a9a9-d97f2acaf23f.roa (raw, json) Hash identifier: YolBsuH8pa41P03vD0GfGASy0rA8t6j4g2KraUS94wI= Subject key identifier: 5A:14:01:E7:70:B3:FE:EF:C4:49:2E:3A:30:09:A6:B6:50:06:1A:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E0069F1B7B921D50F4813040 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f0a638-9066-3a00-a9a9-d97f2acaf23f.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.17.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9f:1b:7b:92:1d:50:f4:81:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=105c083d-21f8-4f5f-8029-71fc02808a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:22:7b:9b:89:8c:9d:06:27:c7:96:15:1d:da: 0b:69:33:96:e5:56:b4:7b:c3:fa:0b:65:4a:60:61: 52:db:ea:9a:2e:b1:88:bf:40:08:9c:92:55:e2:b8: b5:02:a6:00:62:b3:73:cc:62:29:53:dc:db:82:d6: d6:11:a4:58:c1:36:2e:52:bb:a4:51:5c:74:58:62: 6a:cc:a5:67:c4:4e:00:49:8b:d2:99:c4:95:cc:cb: e8:b6:36:15:42:59:7c:58:0f:3f:ee:00:fc:cc:af: 60:57:b2:14:96:b1:89:fd:e4:6e:d5:07:86:b4:ba: e9:93:cd:69:f1:60:a9:c6:76:54:84:fe:03:c0:08: 8b:30:be:6d:9d:c8:f7:fb:19:9d:06:c5:f1:63:da: a4:36:23:0e:d3:24:97:02:12:41:0a:89:53:7e:cb: 5c:e4:eb:15:99:2d:39:8d:05:2b:c5:eb:f6:87:e8: d9:bd:d7:36:ad:2a:9e:c5:14:be:0f:7d:03:0b:8f: 2c:63:ec:cf:c9:f1:76:96:2b:81:8a:69:84:75:68: b4:c1:2a:e3:ce:bb:5d:a0:00:c3:51:03:1b:a0:dc: 81:69:58:64:52:97:5d:e4:39:cc:a0:ab:f2:93:33: 62:da:22:c7:01:9a:0a:d0:9d:71:ee:6e:c4:65:b2: 2d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:14:01:E7:70:B3:FE:EF:C4:49:2E:3A:30:09:A6:B6:50:06:1A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/59f0a638-9066-3a00-a9a9-d97f2acaf23f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:41:96:8b:f8:fb:55:5e:fe:06:e5:c1:a8:2d:0d:e1:62:4d: 75:b0:11:03:f6:a4:cf:b3:2c:e8:95:ef:b8:d6:61:1e:34:cf: 45:3b:f1:66:ca:bd:de:81:af:99:42:53:3a:9b:12:63:4c:d7: 0f:68:a8:37:87:59:4d:d7:e2:06:6d:17:ad:c6:7e:c5:1b:81: 19:b9:b8:7b:03:1f:06:ff:43:6f:2a:3e:6c:89:36:1b:b0:d2: 4a:44:db:25:74:31:f1:24:45:ea:f3:bb:31:00:da:d1:24:68: 83:4a:f4:44:c6:ba:05:6d:01:f6:e2:24:6d:79:9f:82:e0:f8: 72:48:5b:b7:3e:46:91:e7:0d:9e:69:d0:10:7a:c1:52:8c:79: 20:0e:d3:3e:c1:49:8d:29:4c:39:9e:e8:89:d1:f9:99:44:36: a0:0b:dc:a4:f9:2d:66:75:fb:7c:ae:2b:bc:80:f0:64:c5:4d: a1:5d:b5:a4:8e:75:32:61:37:7a:36:91:42:ea:5c:98:bf:5b: c6:75:f8:1b:5a:cd:4c:b5:f2:cb:29:73:38:78:a3:df:b7:80: a6:b7:76:3a:f8:9b:86:8a:ea:04:73:e6:44:91:ae:d2:5e:20: b6:c6:f1:4d:80:98:69:cc:56:20:8e:55:83:84:f2:66:75:57: 1d:ea:f1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp8be5IdUPSBMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk MTA1YzA4M2QtMjFmOC00ZjVmLTgwMjktNzFmYzAyODA4YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSJ7m4mMnQYnx5YVHdoLaTOW5Va0e8P6C2VK YGFS2+qaLrGIv0AInJJV4ri1AqYAYrNzzGIpU9zbgtbWEaRYwTYuUrukUVx0WGJq zKVnxE4ASYvSmcSVzMvotjYVQll8WA8/7gD8zK9gV7IUlrGJ/eRu1QeGtLrpk81p 8WCpxnZUhP4DwAiLML5tncj3+xmdBsXxY9qkNiMO0ySXAhJBColTfstc5OsVmS05 jQUrxev2h+jZvdc2rSqexRS+D30DC48sY+zPyfF2liuBimmEdWi0wSrjzrtdoADD UQMboNyBaVhkUpdd5DnMoKvykzNi2iLHAZoK0J1x7m7EZbIt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoUAedws/7vxEkuOjAJprZQBhp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTlmMGE2MzgtOTA2Ni0z YTAwLWE5YTktZDk3ZjJhY2FmMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhFyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtBlov4+1Ve/gblwagtDeFiTXWwEQP2pM+zLOiV77jWYR40z0U78WbK vd6Br5lCUzqbEmNM1w9oqDeHWU3X4gZtF63GfsUbgRm5uHsDHwb/Q28qPmyJNhuw 0kpE2yV0MfEkRerzuzEA2tEkaINK9ETGugVtAfbiJG15n4Lg+HJIW7c+RpHnDZ5p 0BB6wVKMeSAO0z7BSY0pTDme6InR+ZlENqAL3KT5LWZ1+3yuK7yA8GTFTaFdtaSO dTJhN3o2kULqXJi/W8Z1+BtazUy18sspczh4o9+3gKa3djr4m4aK6gRz5kSRrtJe ILbG8U2AmGnMViCOVYOE8mZ1Vx3q8aM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:08 2025 by rpki-client