$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84d1acdb-e68a-342f-ade1-b6c66619f895.roa File: 84d1acdb-e68a-342f-ade1-b6c66619f895.roa (raw, json) Hash identifier: Cc85Eo8t64ypfB4h3hB5/9FGa9L9XEWMBtMybmKkNgk= Subject key identifier: 91:9E:73:33:E6:94:5E:C1:84:04:39:49:77:F7:E8:71:52:22:CF:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B416698F1B84BC9C0680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84d1acdb-e68a-342f-ade1-b6c66619f895.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 98.17.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b4:16:69:8f:1b:84:bc:9c:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=b52e5835-766b-443b-8016-63499a3b6082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:57:78:92:ca:ff:a5:8e:04:b5:27:3d:0e:cd: e5:1e:82:bb:cf:3f:a8:ad:36:f1:51:d0:32:2c:87: 37:8a:a6:a7:6c:54:17:6e:e8:4b:03:06:5e:e6:4c: b8:4a:30:67:92:2e:8c:23:2e:a8:dc:a2:58:bf:9e: 6f:9b:86:d1:bf:7a:c5:a3:3e:d0:3f:88:bb:c0:96: 4d:26:a3:5f:5c:2e:59:6d:e4:20:25:1f:46:da:12: 92:bd:f7:59:29:31:75:c8:2e:3f:c8:96:46:d8:8f: a6:fb:a8:6c:24:ca:58:2b:19:7b:e1:40:24:04:a4: 70:0b:88:a3:23:87:b4:b2:a2:63:06:0a:3a:ea:38: e9:c2:3e:fa:46:86:05:66:e9:62:dd:55:0c:6a:fe: 44:0d:f9:7f:58:42:f6:86:95:08:a2:76:c5:a4:10: ab:bb:19:d2:0f:ce:68:80:5d:23:c7:b7:90:6b:8b: 7f:61:aa:ef:bf:b1:fc:82:45:f3:6c:57:76:5a:bd: 5c:28:19:61:bd:34:5d:e2:87:c2:54:57:e6:3d:86: 77:e8:a2:48:b4:f6:7f:52:b3:15:0a:52:1a:6c:26: cf:2e:d4:8c:78:f4:40:e6:34:76:43:23:bd:97:3b: e3:70:74:e2:bf:98:fc:e3:81:5f:8d:3b:67:0b:9f: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9E:73:33:E6:94:5E:C1:84:04:39:49:77:F7:E8:71:52:22:CF:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/84d1acdb-e68a-342f-ade1-b6c66619f895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:08:d0:a7:4b:6c:f3:0b:c5:ae:2e:87:f2:61:1c:5b:4f:4e: de:09:5f:88:4c:7d:c8:8c:b5:6c:af:7c:30:2a:16:0f:e6:ac: 6d:4d:96:40:68:4a:77:76:3b:88:71:5a:1e:cf:0c:14:b3:35: f7:1d:d3:ed:3b:43:32:09:9d:5e:b1:a6:c9:f2:2f:09:90:39: 88:16:c0:f5:b0:08:bd:4d:f8:b2:86:29:84:b9:c6:95:29:4c: d8:b8:36:66:5b:36:9f:6f:e8:b0:27:84:67:74:d1:4a:ac:38: 9f:96:ac:48:d0:8b:8f:ab:1b:bb:ab:ae:e3:43:ec:4f:3e:f2: f5:62:a6:ea:79:dd:62:35:33:f8:2b:17:57:4d:de:a9:b5:a7: f3:c8:f0:6d:2b:f5:09:08:6c:f1:69:c4:88:0e:67:2d:a3:2d: e4:ff:73:32:3b:c0:8d:16:05:e8:3f:cb:82:4e:c2:48:8f:65: a1:c3:57:e7:25:b0:c8:22:ae:28:b8:9a:d4:f2:2b:d9:5c:b0: 33:b4:36:59:92:23:39:a3:f8:17:5b:fd:f8:57:90:db:65:89: e1:36:03:40:77:8a:61:23:98:21:4f:42:10:17:f1:8e:e8:7a: 2d:36:9e:88:22:97:eb:80:c8:f5:0c:a0:fc:6a:1a:5c:7e:7a: 5b:81:fe:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LQWaY8bhLycBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk YjUyZTU4MzUtNzY2Yi00NDNiLTgwMTYtNjM0OTlhM2I2MDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Vd4ksr/pY4EtSc9Ds3lHoK7zz+orTbxUdAy LIc3iqanbFQXbuhLAwZe5ky4SjBnki6MIy6o3KJYv55vm4bRv3rFoz7QP4i7wJZN JqNfXC5ZbeQgJR9G2hKSvfdZKTF1yC4/yJZG2I+m+6hsJMpYKxl74UAkBKRwC4ij I4e0sqJjBgo66jjpwj76RoYFZuli3VUMav5EDfl/WEL2hpUIonbFpBCruxnSD85o gF0jx7eQa4t/Yarvv7H8gkXzbFd2Wr1cKBlhvTRd4ofCVFfmPYZ36KJItPZ/UrMV ClIabCbPLtSMePRA5jR2QyO9lzvjcHTiv5j844FfjTtnC5+FjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGeczPmlF7BhAQ5SXf36HFSIs99MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODRkMWFjZGItZTY4YS0z NDJmLWFkZTEtYjZjNjY2MTlmODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJQI0KdLbPMLxa4uh/JhHFtPTt4JX4hMfciMtWyvfDAqFg/mrG1NlkBo Snd2O4hxWh7PDBSzNfcd0+07QzIJnV6xpsnyLwmQOYgWwPWwCL1N+LKGKYS5xpUp TNi4NmZbNp9v6LAnhGd00UqsOJ+WrEjQi4+rG7urruND7E8+8vVipup53WI1M/gr F1dN3qm1p/PI8G0r9QkIbPFpxIgOZy2jLeT/czI7wI0WBeg/y4JOwkiPZaHDV+cl sMgirii4mtTyK9lcsDO0NlmSIzmj+Bdb/fhXkNtlieE2A0B3imEjmCFPQhAX8Y7o ei02nogil+uAyPUMoPxqGlx+eluB/mM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:07 2025 by rpki-client