$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa File: 7df32cde-57a3-3204-a1a7-165e477b27bc.roa (raw, json) Hash identifier: RyElloPmzA984oq7tNNLX5U/7SkPPkgTXeQdpLWjVPU= Subject key identifier: 66:8E:84:07:D9:9D:EB:B8:E5:72:40:8E:F0:39:88:AC:72:99:B0:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE1197EA357882C8321D740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.23.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:19:7e:a3:57:88:2c:83:21:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=71a3afa5-8019-4a4c-836d-ea1518fe500f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b4:03:b8:1c:ec:63:95:1c:07:45:6b:54:8c: d0:5a:60:b6:d0:49:45:84:ee:4f:33:fc:97:66:3e: 8f:38:b7:ac:a9:60:03:fe:ba:16:8d:b0:29:70:01: a8:96:57:71:97:f4:8c:83:53:45:9a:41:fe:8a:47: 34:02:e3:c4:85:be:3f:31:b3:cf:af:38:5f:1f:08: 2c:c8:ed:ea:4a:d0:05:95:02:56:41:42:a8:a2:fb: cb:40:9b:31:17:ce:cc:3c:91:db:c9:1c:9b:29:58: e9:a0:5c:a3:cc:90:6d:2b:4f:60:fb:b5:37:f4:4f: 85:79:a8:50:37:42:53:28:9f:da:42:43:f1:a8:50: ef:57:70:02:77:f0:1d:e1:5c:6c:29:72:23:58:07: 18:50:60:6e:85:72:8b:9a:8f:4d:c9:1b:6a:e5:38: 9b:c3:34:12:e5:f2:39:88:99:bc:17:d3:5e:07:be: 9e:42:5b:5f:df:dc:e2:a2:8b:78:84:25:1a:0b:e0: cf:0d:49:df:57:8d:c5:cb:75:df:2b:65:81:56:80: 7e:4a:23:ba:72:71:0d:f9:42:55:ad:32:54:f0:c3: 84:e3:d6:f0:2d:c1:b3:39:c2:00:01:87:7f:1e:a3: de:ed:64:64:66:03:a2:5d:da:ae:00:40:05:d8:b7: 61:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8E:84:07:D9:9D:EB:B8:E5:72:40:8E:F0:39:88:AC:72:99:B0:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7df32cde-57a3-3204-a1a7-165e477b27bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:76:0c:d8:0f:90:ea:6e:a6:06:79:91:00:85:d4:95:10:6c: ee:89:c1:1b:8e:04:db:bf:a5:df:81:c6:89:3b:52:ed:be:c4: 4b:df:98:97:5d:0c:ee:10:71:e0:ad:09:c0:e6:88:0b:ca:42: 50:2e:97:45:91:81:44:86:4c:32:d0:78:0d:31:d9:c0:12:c5: 61:39:4c:2e:a9:0c:da:21:06:44:6c:b3:81:f9:f5:46:dd:69: 07:4b:bf:c6:64:5e:02:9b:fe:22:f1:aa:a9:56:42:ec:8f:3e: b3:73:f4:bc:c9:33:24:b9:9d:fb:74:a8:68:7c:cf:69:a3:aa: 36:5f:22:7e:80:ee:15:03:66:3f:ce:2c:db:eb:3a:9c:06:fb: 17:8d:62:73:e3:d7:62:2c:00:b1:ea:c6:6b:36:15:bc:0d:ce: 7d:57:1d:d3:9a:30:04:1e:45:07:5b:03:92:65:bd:64:5d:bf: c9:ab:c1:4f:a2:9d:0e:61:b1:0b:b3:73:92:ad:83:4e:e6:d6: fc:76:dd:89:1c:0f:16:db:0e:b9:46:f8:8c:11:a0:c4:b9:4b: ca:a2:8c:94:92:92:45:d1:5f:ef:5e:ec:f0:6b:9c:3e:ec:58: 41:e7:85:1d:14:1b:a5:2f:06:36:a2:95:6a:f0:6a:98:6c:52: 01:26:70:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rl+o1eILIMh10AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NzFhM2FmYTUtODAxOS00YTRjLTgzNmQtZWExNTE4ZmU1MDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbQDuBzsY5UcB0VrVIzQWmC20ElFhO5PM/yX Zj6POLesqWAD/roWjbApcAGolldxl/SMg1NFmkH+ikc0AuPEhb4/MbPPrzhfHwgs yO3qStAFlQJWQUKoovvLQJsxF87MPJHbyRybKVjpoFyjzJBtK09g+7U39E+FeahQ N0JTKJ/aQkPxqFDvV3ACd/Ad4VxsKXIjWAcYUGBuhXKLmo9NyRtq5TibwzQS5fI5 iJm8F9NeB76eQltf39zioot4hCUaC+DPDUnfV43Fy3XfK2WBVoB+SiO6cnEN+UJV rTJU8MOE49bwLcGzOcIAAYd/HqPe7WRkZgOiXdquAEAF2Ldh2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaOhAfZneu45XJAjvA5iKxymbALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RmMzJjZGUtNTdhMy0z MjA0LWExYTctMTY1ZTQ3N2IyN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhfAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAR2DNgPkOpupgZ5kQCF1JUQbO6JwRuOBNu/pd+Bxok7Uu2+xEvfmJdd DO4QceCtCcDmiAvKQlAul0WRgUSGTDLQeA0x2cASxWE5TC6pDNohBkRss4H59Ubd aQdLv8ZkXgKb/iLxqqlWQuyPPrNz9LzJMyS5nft0qGh8z2mjqjZfIn6A7hUDZj/O LNvrOpwG+xeNYnPj12IsALHqxms2FbwNzn1XHdOaMAQeRQdbA5JlvWRdv8mrwU+i nQ5hsQuzc5Ktg07m1vx23YkcDxbbDrlG+IwRoMS5S8qijJSSkkXRX+9e7PBrnD7s WEHnhR0UG6UvBjailWrwaphsUgEmcPQ= -----END CERTIFICATE-----Generated at Sun Apr 6 04:46:30 2025 by rpki-client