$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89deca3d-559a-35b9-a3aa-196062ff0d33.roa File: 89deca3d-559a-35b9-a3aa-196062ff0d33.roa (raw, json) Hash identifier: oBwv+YQw/e9QJEhBhCZwZ3fFuDch9jt8/b0vT0q6tcQ= Subject key identifier: B6:D2:F1:73:0E:1B:90:41:D0:9A:87:AD:61:53:EB:C6:C0:8B:92:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F16C011FC5AC0FA1B600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89deca3d-559a-35b9-a3aa-196062ff0d33.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.17.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f1:6c:01:1f:c5:ac:0f:a1:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=df68265b-28c5-4707-a5f4-e063696de569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:83:76:9b:d8:49:29:db:2a:e1:a8:c9:3e: a4:e3:66:f7:06:88:d7:00:4a:33:7b:1a:5f:bf:bc: 6f:01:46:e4:ed:ec:44:10:81:2f:39:13:af:b0:35: 99:bd:f0:1a:a9:c7:45:8a:95:af:e2:83:7f:ea:7d: 44:f6:71:e8:c7:33:c6:d6:b9:1d:c5:ca:ba:bb:84: b5:8b:e3:47:aa:df:b7:9c:e8:41:69:0e:b6:50:58: 5c:5a:53:c5:91:b7:24:a2:31:c0:f1:e2:30:f9:91: c0:74:93:e7:ac:06:7a:84:3d:8d:e4:16:e9:d3:3b: 2a:d5:56:7a:0a:d5:81:78:5b:fa:7f:e5:b1:57:25: bd:8f:d3:1b:41:57:3d:08:e1:91:dd:cc:27:58:2d: 7a:f4:a4:4e:e7:12:0a:3d:80:b0:10:f7:c7:81:a9: 59:41:3e:5c:26:28:c0:3e:30:bf:f9:47:1c:ce:c1: 46:c0:5d:cf:32:a1:86:fe:f0:08:d8:0b:00:02:4d: 4c:00:ab:27:15:19:61:d4:ea:5b:06:db:a6:e8:5a: 90:a8:a4:83:ea:84:6a:4e:dd:f3:cc:d8:53:1a:35: 08:e0:65:93:7f:aa:da:49:ca:71:d2:28:31:fc:e1: 55:75:de:f2:b8:b3:26:f4:b4:11:d3:18:b4:db:c0: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D2:F1:73:0E:1B:90:41:D0:9A:87:AD:61:53:EB:C6:C0:8B:92:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/89deca3d-559a-35b9-a3aa-196062ff0d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f6:43:d2:e8:c6:51:75:11:0e:ae:f8:61:9c:7c:d8:f2:b8: 03:e5:3e:be:1a:a0:89:e8:66:e9:5e:f5:ed:67:e0:18:82:e4: f4:21:0b:96:5f:f7:fd:a0:c6:d6:89:ae:a0:d5:2e:bc:9a:d3: f0:a7:34:b9:35:8f:e5:c4:6e:a3:47:f4:a5:f4:97:73:f9:38: db:fc:41:72:e5:a5:47:e3:b1:bb:76:f9:a0:29:72:34:23:cd: fa:35:a6:d9:b7:f0:0c:8a:c6:04:da:d8:15:b4:d8:d5:a4:eb: 18:ce:69:0b:42:5c:41:0d:de:7e:69:a4:7b:38:ef:c6:84:1c: 37:99:38:2a:e9:68:ee:c3:a7:52:23:3f:0d:a6:48:e5:a3:6f: c9:e7:bf:a0:13:06:24:73:69:d1:1f:0e:1b:de:61:a7:39:b1: 15:47:c0:d6:6b:7c:d1:57:d8:36:cd:c6:4c:81:70:6c:46:bc: 68:02:5b:43:71:5e:a1:f5:ff:bd:0a:8d:82:08:b6:32:1a:45: b8:3c:15:a3:09:56:cb:ff:75:b1:ab:7f:84:ee:7a:c6:fc:c9: fe:34:53:87:b8:bc:d4:66:32:8d:17:a8:2e:c9:7f:13:81:63: 2a:11:a1:4f:c8:5e:9b:d8:12:e9:99:b2:81:33:36:03:36:6b: b3:92:d4:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPFsAR/FrA+htgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZGY2ODI2NWItMjhjNS00NzA3LWE1ZjQtZTA2MzY5NmRlNTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLyDdpvYSSnbKuGoyT6k42b3BojXAEozexpf v7xvAUbk7exEEIEvOROvsDWZvfAaqcdFipWv4oN/6n1E9nHoxzPG1rkdxcq6u4S1 i+NHqt+3nOhBaQ62UFhcWlPFkbckojHA8eIw+ZHAdJPnrAZ6hD2N5Bbp0zsq1VZ6 CtWBeFv6f+WxVyW9j9MbQVc9COGR3cwnWC169KRO5xIKPYCwEPfHgalZQT5cJijA PjC/+UcczsFGwF3PMqGG/vAI2AsAAk1MAKsnFRlh1OpbBtum6FqQqKSD6oRqTt3z zNhTGjUI4GWTf6raScpx0igx/OFVdd7yuLMm9LQR0xi028ADfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbS8XMOG5BB0JqHrWFT68bAi5JRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODlkZWNhM2QtNTU5YS0z NWI5LWEzYWEtMTk2MDYyZmYwZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB72Q9LoxlF1EQ6u+GGcfNjyuAPlPr4aoInoZule9e1n4BiC5PQhC5Zf 9/2gxtaJrqDVLrya0/CnNLk1j+XEbqNH9KX0l3P5ONv8QXLlpUfjsbt2+aApcjQj zfo1ptm38AyKxgTa2BW02NWk6xjOaQtCXEEN3n5ppHs478aEHDeZOCrpaO7Dp1Ij Pw2mSOWjb8nnv6ATBiRzadEfDhveYac5sRVHwNZrfNFX2DbNxkyBcGxGvGgCW0Nx XqH1/70KjYIItjIaRbg8FaMJVsv/dbGrf4Tuesb8yf40U4e4vNRmMo0XqC7JfxOB YyoRoU/IXpvYEumZsoEzNgM2a7OS1PM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:06 2025 by rpki-client