$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90b62ada-c6e3-3b5b-a65d-0a1142b9e535.roa File: 90b62ada-c6e3-3b5b-a65d-0a1142b9e535.roa (raw, json) Hash identifier: XHdrMMeLU5ICYo/uzBCi+vl6q5PebyhxlNQnJSX8YNA= Subject key identifier: 7D:DE:9B:C0:3A:B7:EB:43:3A:B8:5D:99:62:1A:C7:FB:56:46:FB:1A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CB94075F38A3E25B76CD9080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90b62ada-c6e3-3b5b-a65d-0a1142b9e535.roa Signing time: Thu 06 Feb 2025 18:14:15 +0000 ROA not before: Thu 06 Feb 2025 18:14:15 +0000 ROA not after: Wed 07 May 2025 17:14:15 +0000 asID: 7029 IP address blocks: 98.16.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:94:07:5f:38:a3:e2:5b:76:cd:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 6 18:14:15 2025 GMT Not After : May 7 17:14:15 2025 GMT Subject: CN=c339902a-f706-474d-bbf3-8996c9912970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5f:2a:e5:d5:7c:8c:b9:f3:40:f0:fa:af:2b: 61:c8:0a:58:5e:e9:ed:3e:7d:e6:2e:8d:70:9d:b1: a6:d9:37:c9:ac:ea:39:b6:4a:e1:ab:1e:12:c8:c9: fd:e0:9f:3f:7d:f1:c2:19:0f:de:32:a0:2b:d1:23: 96:ce:68:e2:84:2d:9e:f2:15:5b:e9:35:49:3d:e3: 6a:cb:69:60:ba:ab:e2:fe:a5:08:20:c7:aa:79:23: a9:ab:ab:bf:cb:62:35:8f:86:af:05:a1:6e:a8:f7: 4a:31:3c:4d:96:49:58:a2:cc:cc:9b:fd:c4:fe:11: ef:1f:c9:91:b9:6b:33:70:45:5b:5e:ed:4f:e9:f0: fb:0a:d3:1b:9b:19:bf:82:70:7b:02:60:4d:a4:f2: 15:fe:fb:89:d2:16:ee:ef:64:91:06:35:46:95:61: fe:e9:fd:67:f3:47:d6:e5:b7:fe:dc:96:0f:37:2d: 64:f6:fa:62:3a:31:e0:ab:3b:be:b3:2a:10:d8:e0: 84:d9:5b:d4:ca:e3:29:b6:07:99:53:8e:ad:65:d4: d4:04:0f:27:db:e0:dc:da:5b:3c:4e:54:25:08:17: 2d:e3:30:97:ee:ed:e3:78:80:a8:56:61:ee:c9:81: 3b:45:6f:43:65:b8:b4:ab:2a:f0:fc:89:0b:13:01: 1c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DE:9B:C0:3A:B7:EB:43:3A:B8:5D:99:62:1A:C7:FB:56:46:FB:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90b62ada-c6e3-3b5b-a65d-0a1142b9e535.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a0:4e:54:e0:0f:33:1b:4c:03:18:70:0f:7a:3a:22:98:0e: 97:f4:16:80:6c:bd:03:52:35:8d:dc:6a:d4:06:6e:15:9f:03: 3d:b7:20:a9:c0:94:b2:1b:b8:6c:6f:33:2a:6c:e1:90:90:f0: 2c:53:5a:32:33:e1:52:63:fe:e1:a7:00:ca:3c:7f:9e:aa:08: 9e:ba:d9:c0:29:bb:a5:5d:8e:1a:6f:33:95:c1:1b:25:92:e6: ed:88:7c:03:78:b4:0a:16:0c:5d:a8:14:17:db:36:e0:8e:69: c1:75:9e:84:a7:4b:3c:d9:3e:73:cb:18:95:d8:32:50:d9:b3: ea:42:53:02:3e:d9:54:42:e6:8d:88:c6:71:84:1f:44:45:5b: 52:35:7b:90:e5:ad:12:1e:39:52:f3:c3:ca:61:b2:35:4e:e6: cf:a1:18:28:15:52:80:62:80:7d:fb:c0:50:82:ca:d2:43:a0: 3e:64:aa:20:c6:52:12:ec:97:73:b8:72:c7:61:66:97:3d:36: a7:b8:fe:6b:a2:3e:79:07:fb:13:20:e1:92:c1:d0:58:bc:32: ec:00:cb:8b:40:2a:05:5e:e2:71:8d:c8:22:7b:c9:9b:2e:57: 47:2a:3f:94:85:ef:9e:dc:ec:0f:cc:65:1c:d0:3f:3e:67:03: cd:5d:93:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLlAdfOKPiW3bNkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNjE4MTQxNVoXDTI1MDUwNzE3MTQxNVowLzEtMCsGA1UEAxMk YzMzOTkwMmEtZjcwNi00NzRkLWJiZjMtODk5NmM5OTEyOTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo18q5dV8jLnzQPD6rythyApYXuntPn3mLo1w nbGm2TfJrOo5tkrhqx4SyMn94J8/ffHCGQ/eMqAr0SOWzmjihC2e8hVb6TVJPeNq y2lguqvi/qUIIMeqeSOpq6u/y2I1j4avBaFuqPdKMTxNlklYoszMm/3E/hHvH8mR uWszcEVbXu1P6fD7CtMbmxm/gnB7AmBNpPIV/vuJ0hbu72SRBjVGlWH+6f1n80fW 5bf+3JYPNy1k9vpiOjHgqzu+syoQ2OCE2VvUyuMptgeZU46tZdTUBA8n2+Dc2ls8 TlQlCBct4zCX7u3jeICoVmHuyYE7RW9DZbi0qyrw/IkLEwEcfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3em8A6t+tDOrhdmWIax/tWRvsaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTBiNjJhZGEtYzZlMy0z YjViLWE2NWQtMGExMTQyYjllNTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhCwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSgTlTgDzMbTAMYcA96OiKYDpf0FoBsvQNSNY3catQGbhWfAz23IKnA lLIbuGxvMyps4ZCQ8CxTWjIz4VJj/uGnAMo8f56qCJ662cApu6VdjhpvM5XBGyWS 5u2IfAN4tAoWDF2oFBfbNuCOacF1noSnSzzZPnPLGJXYMlDZs+pCUwI+2VRC5o2I xnGEH0RFW1I1e5DlrRIeOVLzw8phsjVO5s+hGCgVUoBigH37wFCCytJDoD5kqiDG UhLsl3O4csdhZpc9Nqe4/muiPnkH+xMg4ZLB0Fi8MuwAy4tAKgVe4nGNyCJ7yZsu V0cqP5SF757c7A/MZRzQPz5nA81dkzc= -----END CERTIFICATE-----Generated at Sun Apr 6 07:17:45 2025 by rpki-client