$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa File: 67880de3-678a-3ed2-9b09-075e2377ad48.roa (raw, json) Hash identifier: 64lezQTNzI0QOF/z2JweLwdiWpgvenyLngc9kwhAhB0= Subject key identifier: E7:B9:17:68:5F:3C:19:CE:89:CF:59:6F:28:0F:32:E3:82:4B:A5:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F2680C6D6B78E5783008 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.20.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f2:68:0c:6d:6b:78:e5:78:30:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=01095141-1a6b-4417-8e8c-872303f88998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:26:dd:66:90:4e:51:69:5f:60:66:ab:57:c3: a6:64:c6:7d:92:23:3f:c4:81:6e:ba:1d:20:69:19: eb:cf:08:c9:11:0f:e4:28:96:28:6e:e5:41:aa:d8: a5:8a:de:29:6b:4c:d3:0b:de:f1:42:33:90:75:39: 0e:54:0f:b2:22:db:22:33:c4:5c:79:30:cd:de:10: 29:ad:81:2d:2d:01:c3:7c:8b:a6:ab:12:0b:2e:69: a9:a9:2e:5e:f4:1e:48:c8:21:c3:e1:fa:d4:e3:d3: c6:5f:bc:6d:80:ac:67:44:92:7b:ae:d5:2b:a0:9a: a9:49:07:e8:5e:e2:e6:91:27:1f:36:51:99:4a:44: bf:af:bf:39:26:71:ed:e0:71:6d:a8:e8:67:f7:ea: 34:d3:9d:2d:5d:95:b2:70:bb:24:b9:49:ff:84:ae: df:1e:35:c5:cd:45:93:b0:e5:4e:9b:48:e4:94:73: ad:03:d5:91:d5:62:5b:cd:4e:de:36:67:56:0e:8a: 6d:12:b6:32:2e:a8:75:74:38:b6:cd:66:f6:8c:21: c2:54:40:52:dc:12:98:91:62:48:c2:75:ae:dc:86: 81:b2:df:5b:11:8a:c9:da:ac:2e:9b:a7:79:88:88: dd:45:78:3d:a3:24:af:ca:f8:09:9a:14:00:07:aa: 39:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:B9:17:68:5F:3C:19:CE:89:CF:59:6F:28:0F:32:E3:82:4B:A5:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67880de3-678a-3ed2-9b09-075e2377ad48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:81:0a:a0:3f:89:33:56:d7:ff:6b:54:db:a6:87:7e:d0:a4: 57:93:89:f3:02:18:7a:a7:af:99:78:09:99:8a:51:02:ca:35: 2f:ee:f0:0e:63:b2:13:13:e3:75:98:af:22:ca:c9:70:23:b5: 36:21:60:ce:de:7e:7d:d8:6b:87:06:bc:a8:38:66:00:19:9d: 96:c0:4f:dd:0c:ac:ba:3c:4b:0e:8c:48:51:33:30:69:43:db: 31:a4:27:c2:3f:82:03:4e:6f:0b:d3:9c:7b:34:3e:62:6f:3d: 5b:93:9f:1d:00:2e:9f:7b:c0:65:38:f0:bc:a9:23:4b:5e:de: ba:ff:9c:17:95:b8:ae:c6:d0:30:d8:6a:42:9c:43:22:a2:d0: a3:f2:97:9c:86:91:72:e4:6b:d1:29:c2:87:cd:c1:72:66:bf: 6a:00:67:ca:e3:6a:af:f5:5b:4d:de:c3:0a:1d:a7:b2:da:8f: 5a:ba:7a:a8:81:65:ed:b8:1e:9b:66:d6:86:be:a6:82:84:76: 9b:ba:cc:43:7b:5a:2f:b2:34:0a:d3:0b:0c:1f:db:8a:95:08: 97:85:9a:77:f2:11:1c:67:dc:25:2c:0b:f2:36:0a:2d:ad:9b: 83:de:26:8d:6a:4c:3c:3e:27:98:c9:16:05:4f:be:4a:5b:56: f4:58:9b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPJoDG1reOV4MAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDEwOTUxNDEtMWE2Yi00NDE3LThlOGMtODcyMzAzZjg4OTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCbdZpBOUWlfYGarV8OmZMZ9kiM/xIFuuh0g aRnrzwjJEQ/kKJYobuVBqtilit4pa0zTC97xQjOQdTkOVA+yItsiM8RceTDN3hAp rYEtLQHDfIumqxILLmmpqS5e9B5IyCHD4frU49PGX7xtgKxnRJJ7rtUroJqpSQfo XuLmkScfNlGZSkS/r785JnHt4HFtqOhn9+o0050tXZWycLskuUn/hK7fHjXFzUWT sOVOm0jklHOtA9WR1WJbzU7eNmdWDoptErYyLqh1dDi2zWb2jCHCVEBS3BKYkWJI wnWu3IaBst9bEYrJ2qwum6d5iIjdRXg9oySvyvgJmhQAB6o5vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe5F2hfPBnOic9ZbygPMuOCS6VDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjc4ODBkZTMtNjc4YS0z ZWQyLTliMDktMDc1ZTIzNzdhZDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+BCqA/iTNW1/9rVNumh37QpFeTifMCGHqnr5l4CZmKUQLKNS/u8A5j shMT43WYryLKyXAjtTYhYM7efn3Ya4cGvKg4ZgAZnZbAT90MrLo8Sw6MSFEzMGlD 2zGkJ8I/ggNObwvTnHs0PmJvPVuTnx0ALp97wGU48LypI0te3rr/nBeVuK7G0DDY akKcQyKi0KPyl5yGkXLka9EpwofNwXJmv2oAZ8rjaq/1W03ewwodp7Laj1q6eqiB Ze24Hptm1oa+poKEdpu6zEN7Wi+yNArTCwwf24qVCJeFmnfyERxn3CUsC/I2Ci2t m4PeJo1qTDw+J5jJFgVPvkpbVvRYmx0= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:02 2025 by rpki-client