$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa File: 78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa (raw, json) Hash identifier: OuZ/e0l2+SmnMarGPae74dzhM5cYU+6Q3J04hTwZDZ8= Subject key identifier: 98:32:63:21:01:19:60:93:F4:E2:C6:3B:86:44:23:EA:FE:C5:FA:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B4E60497520A082F6BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 98.21.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b4:e6:04:97:52:0a:08:2f:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=1a016eeb-4a33-4556-89da-5610ea14322e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cc:bc:7e:46:d2:04:2a:f2:2f:c3:1c:a8:4b: 2a:db:38:a7:7e:02:b3:40:53:c9:ed:f4:1e:75:f1: 7b:c0:fd:09:51:77:41:70:cb:b7:49:9e:07:19:04: f5:3c:f5:98:47:b9:d3:ec:7a:c5:a0:85:a4:f3:0a: aa:22:7f:08:d8:56:df:d4:32:79:1a:17:e6:14:e0: c0:ae:09:ea:a7:21:3e:99:48:73:8d:ac:ef:63:39: 60:13:07:71:21:d2:4a:ce:90:ba:20:3d:bc:dc:45: 32:1d:97:3b:10:4a:2a:9b:3a:39:72:22:58:03:66: 8d:ea:9c:d1:50:44:8f:6d:19:3e:ae:49:95:b0:66: 20:49:e6:13:10:eb:a3:45:49:03:1f:a7:bc:27:cb: 49:3d:e7:68:2d:84:f4:7f:e4:cb:af:da:f2:4e:c0: df:4a:93:24:bc:b6:83:9c:9d:96:91:8c:06:3d:e5: bd:d5:67:ca:b6:96:ab:8a:88:3a:f6:cd:2e:3e:ab: 52:33:b8:5f:4f:f4:4a:c0:9b:37:94:ba:b2:9a:17: cd:0c:7f:70:68:60:c8:4d:40:eb:b5:06:e6:78:de: 46:a2:83:df:d4:af:80:96:f3:8e:6f:aa:29:98:43: e1:62:ef:2c:be:64:5f:af:0a:e0:e5:07:35:6b:69: 25:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:32:63:21:01:19:60:93:F4:E2:C6:3B:86:44:23:EA:FE:C5:FA:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/78cbdf33-6aca-3a10-8d34-6f4f5d2c250d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:a2:74:ab:43:4f:e0:6c:e6:28:03:8c:11:fa:17:c3:b2:36: 95:51:ea:28:02:68:2c:f3:db:52:a2:39:cf:26:ca:18:89:b9: a6:2a:40:ff:86:02:fd:ad:bb:12:54:77:47:26:ee:52:1a:ce: 16:46:9f:b7:63:a7:b1:4e:58:8c:a2:5e:33:ec:19:4d:b1:04: f0:0a:8d:c6:ca:16:45:ae:35:b9:c0:58:8a:6c:00:81:52:6a: 21:be:59:4c:e1:ea:62:2c:f2:2e:33:1a:9e:9b:d3:c6:c8:e3: 05:20:0a:18:74:13:45:4c:34:93:06:7e:75:28:57:d2:f8:c5: 05:9c:78:2f:31:73:3c:69:d3:71:54:d5:00:ff:db:e4:d9:8e: d0:f1:23:57:78:15:4e:02:41:80:7d:9b:94:30:21:f1:10:20: 21:cc:14:17:d1:45:f3:99:78:74:0d:a2:b4:c6:c3:a8:89:f5: 53:9c:f5:64:fc:2a:89:55:88:57:ca:e7:de:fe:5b:9e:d7:65: f4:99:91:6d:b4:18:5a:df:37:2a:63:87:41:71:3a:ef:05:5e: 1c:97:ae:f9:f0:7c:31:05:8a:6c:b4:c0:be:82:87:0b:d9:38: 44:60:67:d0:57:95:7b:8d:d4:69:5e:d1:85:0f:69:e0:db:85: a8:c9:46:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LTmBJdSCggva8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk MWEwMTZlZWItNGEzMy00NTU2LTg5ZGEtNTYxMGVhMTQzMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcy8fkbSBCryL8McqEsq2zinfgKzQFPJ7fQe dfF7wP0JUXdBcMu3SZ4HGQT1PPWYR7nT7HrFoIWk8wqqIn8I2Fbf1DJ5GhfmFODA rgnqpyE+mUhzjazvYzlgEwdxIdJKzpC6ID283EUyHZc7EEoqmzo5ciJYA2aN6pzR UESPbRk+rkmVsGYgSeYTEOujRUkDH6e8J8tJPedoLYT0f+TLr9ryTsDfSpMkvLaD nJ2WkYwGPeW91WfKtpariog69s0uPqtSM7hfT/RKwJs3lLqymhfNDH9waGDITUDr tQbmeN5GooPf1K+AlvOOb6opmEPhYu8svmRfrwrg5Qc1a2klmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgyYyEBGWCT9OLGO4ZEI+r+xfrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzhjYmRmMzMtNmFjYS0z YTEwLThkMzQtNmY0ZjVkMmMyNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeidKtDT+Bs5igDjBH6F8OyNpVR6igCaCzz21KiOc8myhiJuaYqQP+G Av2tuxJUd0cm7lIazhZGn7djp7FOWIyiXjPsGU2xBPAKjcbKFkWuNbnAWIpsAIFS aiG+WUzh6mIs8i4zGp6b08bI4wUgChh0E0VMNJMGfnUoV9L4xQWceC8xczxp03FU 1QD/2+TZjtDxI1d4FU4CQYB9m5QwIfEQICHMFBfRRfOZeHQNorTGw6iJ9VOc9WT8 KolViFfK597+W57XZfSZkW20GFrfNypjh0FxOu8FXhyXrvnwfDEFimy0wL6ChwvZ OERgZ9BXlXuN1Gle0YUPaeDbhajJRtY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:37:48 2025 by rpki-client