$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67b56009-ff27-3f9a-84f5-45b2e4d84132.roa File: 67b56009-ff27-3f9a-84f5-45b2e4d84132.roa (raw, json) Hash identifier: 1vqsefPja3wPISm46KHuvza7OlulqabmhpLOWkbEZxI= Subject key identifier: 79:0A:55:B3:F0:43:EF:EB:BA:EA:49:C7:D3:90:EB:F6:77:0F:10:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328583D661D1FABEDE51A97DF1FFA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67b56009-ff27-3f9a-84f5-45b2e4d84132.roa Signing time: Tue 29 Mar 2022 04:00:00 +0000 ROA not before: Tue 29 Mar 2022 04:00:00 +0000 ROA not after: Tue 21 Mar 2028 04:00:00 +0000 asID: 7029 IP address blocks: 98.17.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:3d:66:1d:1f:ab:ed:e5:1a:97:df:1f:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 29 04:00:00 2022 GMT Not After : Mar 21 04:00:00 2028 GMT Subject: CN=9886c6fe-0e4b-4a44-8f7f-8fdf3070091d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:df:3f:9f:49:93:61:82:6c:62:8e:e4:f4: ff:03:c9:db:15:b9:7b:f9:c8:44:00:e2:af:61:e7: 5c:7d:86:a2:fc:97:57:1a:06:1b:59:cc:4f:d5:e7: 4f:ac:56:aa:d7:38:26:cc:26:4e:59:10:77:19:01: 26:b9:03:86:0d:f2:31:d7:72:c7:4d:4a:5a:93:90: eb:11:e2:77:91:0d:15:f9:72:90:1d:9c:5f:4f:23: 05:43:43:0a:8f:5a:2f:d5:c5:b7:4f:1f:f2:20:62: 55:6c:ac:58:0c:26:da:13:68:d3:27:34:29:b0:ea: df:84:8c:4a:cb:09:7d:9a:9b:98:eb:89:77:16:c6: 33:27:3f:ce:42:e0:06:bc:16:92:12:87:44:de:4b: ed:e1:9b:19:09:d3:12:cf:01:17:94:33:f5:de:f9: b3:e0:7a:f1:a4:e0:3a:42:a3:45:6d:2d:88:58:0f: 33:95:cb:d5:b0:f6:17:ba:8a:e9:a9:51:80:e5:fe: 71:e2:2c:3b:4d:79:84:ca:66:62:05:8a:85:44:76: f2:8d:21:0e:c1:9c:d6:52:7d:14:65:74:36:7a:65: ef:25:a7:c8:f9:f5:86:c8:d5:01:95:14:80:cf:c0: 87:41:e7:fa:4e:66:57:aa:c5:c8:4f:bf:d3:7a:a9: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:0A:55:B3:F0:43:EF:EB:BA:EA:49:C7:D3:90:EB:F6:77:0F:10:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67b56009-ff27-3f9a-84f5-45b2e4d84132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b2:37:17:65:f0:e2:17:a5:62:ea:58:49:45:02:1b:23:db: bf:72:ee:b3:b8:0e:e0:59:51:45:10:e1:54:e4:80:f2:6f:7a: ca:88:d1:1f:62:7c:f9:62:c2:b8:0e:2f:24:c3:2b:5b:28:ce: a2:3f:24:6f:f5:43:9e:4a:7a:2a:36:08:08:26:b0:f7:78:03: 37:9c:b7:b6:23:8f:64:62:eb:d9:0e:5b:5a:80:83:2b:f3:b5: 69:d4:c7:2a:df:d1:c9:a0:ea:4b:87:74:35:8c:3a:8b:26:92: d0:e1:66:23:38:db:84:88:b3:e3:c3:01:d8:fa:11:b7:20:06: 0c:21:0e:ea:65:b9:80:6f:c1:b8:19:6e:16:dd:5d:4a:5c:b3: de:3f:f0:af:b6:94:7e:8b:b4:ef:ff:5a:f4:60:a0:d4:cf:fc: 71:0d:24:7e:51:b5:38:a2:e9:63:d9:cf:ce:44:37:e9:85:8b: 77:70:ab:81:fa:35:8c:9b:b3:64:94:26:8f:69:a8:48:06:82: 7e:8e:7c:3d:76:5d:4b:aa:b1:84:eb:51:12:54:d2:4b:22:76: fc:22:7d:79:db:5a:0f:db:0a:ba:b2:a1:93:74:48:91:57:80: f1:03:0f:10:99:86:d4:39:9b:0a:60:3d:d9:b0:e0:cd:9a:b3: e6:8c:e8:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1mHR+r7eUal98f+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTIyMDMyOTA0MDAwMFoXDTI4MDMyMTA0MDAwMFowLzEtMCsGA1UEAxMk OTg4NmM2ZmUtMGU0Yi00YTQ0LThmN2YtOGZkZjMwNzAwOTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI7fP59Jk2GCbGKO5PT/A8nbFbl7+chEAOKv YedcfYai/JdXGgYbWcxP1edPrFaq1zgmzCZOWRB3GQEmuQOGDfIx13LHTUpak5Dr EeJ3kQ0V+XKQHZxfTyMFQ0MKj1ov1cW3Tx/yIGJVbKxYDCbaE2jTJzQpsOrfhIxK ywl9mpuY64l3FsYzJz/OQuAGvBaSEodE3kvt4ZsZCdMSzwEXlDP13vmz4HrxpOA6 QqNFbS2IWA8zlcvVsPYXuorpqVGA5f5x4iw7TXmEymZiBYqFRHbyjSEOwZzWUn0U ZXQ2emXvJafI+fWGyNUBlRSAz8CHQef6TmZXqsXIT7/TeqldbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHkKVbPwQ+/ruupJx9OQ6/Z3DxDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjdiNTYwMDktZmYyNy0z ZjlhLTg0ZjUtNDViMmU0ZDg0MTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhF0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyyNxdl8OIXpWLqWElFAhsj279y7rO4DuBZUUUQ4VTkgPJvesqI0R9i fPliwrgOLyTDK1sozqI/JG/1Q55Keio2CAgmsPd4Azect7Yjj2Ri69kOW1qAgyvz tWnUxyrf0cmg6kuHdDWMOosmktDhZiM424SIs+PDAdj6EbcgBgwhDupluYBvwbgZ bhbdXUpcs94/8K+2lH6LtO//WvRgoNTP/HENJH5RtTii6WPZz85EN+mFi3dwq4H6 NYybs2SUJo9pqEgGgn6OfD12XUuqsYTrURJU0ksidvwifXnbWg/bCrqyoZN0SJFX gPEDDxCZhtQ5mwpgPdmw4M2as+aM6Bs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:41 2025 by rpki-client