$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa File: 877abb4a-c6fb-3cc9-82bf-8650167161b6.roa (raw, json) Hash identifier: QvdtakkbLhyVb0DOyBXi9QswnX+BOVxRj6+Pa7VSU5c= Subject key identifier: 0C:37:69:C9:DB:FF:55:7B:0A:65:DB:E9:9F:0B:BC:45:58:33:15:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11ABC52A193BD68492F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.17.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1a:bc:52:a1:93:bd:68:49:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=b6b73002-8493-46c5-af5f-07ab08903c77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:bb:e4:39:46:65:16:df:cf:bc:8f:6f:f3: 59:00:a1:c6:94:ce:10:ae:7a:e8:24:6b:39:56:e0: 9d:a1:02:9f:25:fb:22:bd:42:a1:e5:30:79:34:7b: 24:34:74:3f:61:4f:88:56:43:a6:be:ab:07:33:46: 80:d4:0b:ea:b8:d3:ba:da:a8:1d:4a:57:48:fe:cf: 93:62:f8:bb:04:c5:20:73:17:7d:31:4b:d2:6e:fc: c9:51:7f:10:b8:94:df:4b:33:d0:07:05:56:c4:16: 36:1e:1f:c9:d9:91:b1:ff:36:f7:b6:b2:8b:09:76: d8:66:46:9a:a1:11:18:65:a7:15:31:a1:66:08:a8: b3:6b:a2:35:fd:57:ce:dd:aa:75:18:fc:38:3d:8f: 09:df:1b:ac:6d:ad:ad:b1:0b:28:f4:64:fd:79:fc: 1f:38:e8:ab:16:c8:64:64:50:0f:a4:31:30:1a:bf: 59:e9:80:cf:2c:2f:1f:5a:f6:4e:70:0f:8e:43:79: 2e:94:90:16:f4:09:a3:22:88:80:8e:08:39:18:64: fd:78:d6:ed:f0:27:dd:82:45:c0:62:1d:b6:ed:38: 0f:ec:59:e3:77:d9:ef:24:fd:44:29:eb:19:10:f5: 11:5a:ae:4e:38:06:b7:34:6b:ea:a5:52:bf:fc:a1: 62:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:37:69:C9:DB:FF:55:7B:0A:65:DB:E9:9F:0B:BC:45:58:33:15:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/877abb4a-c6fb-3cc9-82bf-8650167161b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fa:a2:be:85:d5:bb:9a:d7:9d:f9:ff:70:32:ca:54:cd:e4: 49:74:51:08:43:dc:f8:41:21:47:d4:70:72:84:3f:82:2d:9b: 80:79:05:51:3d:d1:f4:38:43:cd:bb:89:30:81:13:07:52:d9: 57:d8:39:d3:ac:b3:cc:2d:c7:5b:a8:98:7e:8c:63:85:22:5e: 49:f4:bd:c0:03:e8:24:c1:f6:7f:79:77:32:d5:d8:40:15:e7: 90:dc:82:6d:06:78:c6:03:b8:75:e8:39:82:70:f6:d3:8e:63: 10:4d:89:63:cc:55:a8:88:42:96:dc:38:94:e9:19:58:2b:1c: a2:55:31:72:ef:75:40:ea:f9:f0:da:44:f2:6a:a6:e9:30:3d: c5:ea:cf:05:a3:cb:b3:55:5b:c7:9c:f9:44:2e:18:56:e0:7a: e2:b8:ab:83:1e:2b:c5:22:84:fb:e7:e1:1f:e7:75:ea:e6:de: 42:02:f0:b5:22:1f:03:20:c0:92:50:b2:25:85:0f:57:16:ba: 44:4f:b4:32:d0:13:9f:ec:ec:8c:ec:f6:ee:11:bf:d3:e6:eb: 3a:19:dd:8e:da:b8:4f:92:f6:27:a1:46:97:35:7f:02:9c:6b: 0b:d3:97:68:d9:03:1d:f2:07:1a:73:08:ad:95:9f:c8:8c:d9: 76:a1:93:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rq8UqGTvWhJL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YjZiNzMwMDItODQ5My00NmM1LWFmNWYtMDdhYjA4OTAzYzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+i75DlGZRbfz7yPb/NZAKHGlM4QrnroJGs5 VuCdoQKfJfsivUKh5TB5NHskNHQ/YU+IVkOmvqsHM0aA1AvquNO62qgdSldI/s+T Yvi7BMUgcxd9MUvSbvzJUX8QuJTfSzPQBwVWxBY2Hh/J2ZGx/zb3trKLCXbYZkaa oREYZacVMaFmCKiza6I1/VfO3ap1GPw4PY8J3xusba2tsQso9GT9efwfOOirFshk ZFAPpDEwGr9Z6YDPLC8fWvZOcA+OQ3kulJAW9AmjIoiAjgg5GGT9eNbt8CfdgkXA Yh227TgP7Fnjd9nvJP1EKesZEPURWq5OOAa3NGvqpVK//KFiZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAw3acnb/1V7CmXb6Z8LvEVYMxUuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc3YWJiNGEtYzZmYi0z Y2M5LTgyYmYtODY1MDE2NzE2MWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP6or6F1bua1535/3AyylTN5El0UQhD3PhBIUfUcHKEP4Itm4B5BVE9 0fQ4Q827iTCBEwdS2VfYOdOss8wtx1uomH6MY4UiXkn0vcAD6CTB9n95dzLV2EAV 55Dcgm0GeMYDuHXoOYJw9tOOYxBNiWPMVaiIQpbcOJTpGVgrHKJVMXLvdUDq+fDa RPJqpukwPcXqzwWjy7NVW8ec+UQuGFbgeuK4q4MeK8UihPvn4R/nderm3kIC8LUi HwMgwJJQsiWFD1cWukRPtDLQE5/s7Izs9u4Rv9Pm6zoZ3Y7auE+S9iehRpc1fwKc awvTl2jZAx3yBxpzCK2Vn8iM2Xahk7c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:15 2025 by rpki-client