$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6117e7fb-7d9b-3ced-b218-995516e7afe3.roa File: 6117e7fb-7d9b-3ced-b218-995516e7afe3.roa (raw, json) Hash identifier: aKV0/czaQQIt84Ddmn+YMrUCo+zbhn61v5A+oOTTqQw= Subject key identifier: 93:8D:8A:37:4D:2E:49:92:50:1C:D3:88:7B:D4:0F:FA:D3:35:BB:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AACDA41269104447663D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6117e7fb-7d9b-3ced-b218-995516e7afe3.roa Signing time: Thu 20 Feb 2025 18:16:39 +0000 ROA not before: Thu 20 Feb 2025 18:16:39 +0000 ROA not after: Wed 21 May 2025 17:16:39 +0000 asID: 7029 IP address blocks: 98.16.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:cd:a4:12:69:10:44:47:66:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:39 2025 GMT Not After : May 21 17:16:39 2025 GMT Subject: CN=20f6acbc-89f9-4139-a8a7-85e49c8dc1ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:8f:ef:93:44:02:21:c8:f0:69:d1:89:e7: da:cc:23:81:0b:4b:ec:9a:06:78:6f:80:7c:0f:3b: cd:f9:42:cd:35:0d:7a:a9:f1:09:a3:1d:91:44:9d: 2f:e6:37:f1:b1:78:87:53:72:cb:c0:99:48:fb:87: c3:e2:cc:84:77:8e:8e:1b:78:17:e5:82:40:a3:54: 9d:7a:43:4f:df:93:0f:83:2a:08:d3:41:e5:18:51: f7:cf:8f:d8:c4:f5:77:99:0b:bb:fa:9d:e6:9e:80: d7:76:86:b5:e7:55:f8:4d:fa:56:58:c4:b4:0d:80: f2:21:6c:62:b3:3f:cd:d0:15:f4:33:51:9f:37:d9: 35:c5:09:86:78:8f:28:a0:d4:04:f2:4b:db:9b:4d: d8:3a:0b:2e:46:60:05:fa:b0:af:fe:2f:d9:f2:1d: d5:13:08:f8:b1:48:1e:70:77:aa:02:12:42:87:d3: bc:42:61:10:e3:14:f4:63:4f:d2:ad:64:06:a4:50: 27:e4:61:19:68:b1:4a:02:7d:c6:ac:1a:ae:95:46: dd:a7:84:36:eb:0f:c0:b6:a1:9a:73:1c:f6:44:3b: ee:a7:5d:00:a0:24:25:f4:41:0d:1f:5e:b0:d1:87: 37:08:51:9e:f7:44:ba:f2:f4:77:8d:23:14:a6:bd: 36:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:8D:8A:37:4D:2E:49:92:50:1C:D3:88:7B:D4:0F:FA:D3:35:BB:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6117e7fb-7d9b-3ced-b218-995516e7afe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:60:d2:a2:a5:02:9e:12:53:54:97:14:67:d8:19:04:06:e7: 26:0a:ed:87:26:3c:c9:53:4c:f0:29:38:2d:39:9a:72:9c:60: 90:45:a1:f4:85:67:60:07:e5:87:76:8b:fb:33:60:a2:f0:41: b1:93:4a:d5:3f:1e:82:cc:a6:6b:13:44:94:f0:c1:bd:9f:ef: 2a:14:0a:39:a3:51:95:d3:80:34:fb:d8:3c:a5:04:1b:86:40: 61:6d:22:a3:14:c3:e0:e1:95:b0:ba:19:41:35:f0:80:ab:09: 20:79:8f:b3:84:0f:f5:a1:92:ca:68:42:f9:e6:f5:a2:16:62: 0f:75:50:74:e4:ca:ec:e6:f0:fc:e2:ac:c7:d5:7b:f9:84:3b: 1f:cc:3e:ee:5a:8e:7f:bd:d6:86:45:55:28:b2:e2:03:01:87: f9:bc:c0:25:e5:cf:05:3d:e9:6e:86:c4:1c:b3:97:89:93:b3: e5:8e:5f:eb:b5:84:fa:06:dc:7e:15:95:29:e7:f0:cf:70:ef: ee:d6:b2:11:de:7c:cf:eb:b2:74:00:3b:3d:31:2a:6e:db:31: 15:c2:b4:2f:b2:e4:c7:6e:c6:4f:39:69:91:b5:e4:26:07:75: 16:f2:b5:ec:f5:d0:1b:f9:41:c3:bc:e1:cf:26:a8:48:42:33: 46:26:71:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqs2kEmkQREdmPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTYzOVoXDTI1MDUyMTE3MTYzOVowLzEtMCsGA1UEAxMk MjBmNmFjYmMtODlmOS00MTM5LWE4YTctODVlNDljOGRjMWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WWP75NEAiHI8GnRiefazCOBC0vsmgZ4b4B8 DzvN+ULNNQ16qfEJox2RRJ0v5jfxsXiHU3LLwJlI+4fD4syEd46OG3gX5YJAo1Sd ekNP35MPgyoI00HlGFH3z4/YxPV3mQu7+p3mnoDXdoa151X4TfpWWMS0DYDyIWxi sz/N0BX0M1GfN9k1xQmGeI8ooNQE8kvbm03YOgsuRmAF+rCv/i/Z8h3VEwj4sUge cHeqAhJCh9O8QmEQ4xT0Y0/SrWQGpFAn5GEZaLFKAn3GrBqulUbdp4Q26w/AtqGa cxz2RDvup10AoCQl9EENH16w0Yc3CFGe90S68vR3jSMUpr02QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJONijdNLkmSUBzTiHvUD/rTNbu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjExN2U3ZmItN2Q5Yi0z Y2VkLWIyMTgtOTk1NTE2ZTdhZmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxg0qKlAp4SU1SXFGfYGQQG5yYK7YcmPMlTTPApOC05mnKcYJBFofSF Z2AH5Yd2i/szYKLwQbGTStU/HoLMpmsTRJTwwb2f7yoUCjmjUZXTgDT72DylBBuG QGFtIqMUw+DhlbC6GUE18ICrCSB5j7OED/WhkspoQvnm9aIWYg91UHTkyuzm8Pzi rMfVe/mEOx/MPu5ajn+91oZFVSiy4gMBh/m8wCXlzwU96W6GxByzl4mTs+WOX+u1 hPoG3H4VlSnn8M9w7+7WshHefM/rsnQAOz0xKm7bMRXCtC+y5Mduxk85aZG15CYH dRbytez10Bv5QcO84c8mqEhCM0YmceE= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:42 2025 by rpki-client