$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa File: 9432961b-b9f4-3427-913a-57bfde8f4d9f.roa (raw, json) Hash identifier: AkbAXa4jg9O6HQAt97fWNL/dzAGjYcX7iIffBjBwKZ0= Subject key identifier: DA:80:B1:08:F8:5F:45:E9:73:9C:58:58:4A:38:89:D7:A9:99:CE:1C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F18B6B60137AEBC4D260 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.17.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f1:8b:6b:60:13:7a:eb:c4:d2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=d7dc7738-13df-4eb1-8712-dd91085d6daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f0:5a:2a:1a:73:a2:de:97:11:13:17:75:9d: 85:8e:46:75:b0:cc:de:17:7a:8c:9a:6b:05:91:28: f4:64:85:ef:e3:de:00:50:42:1c:ae:ec:91:ed:84: e1:0a:6a:45:50:02:0c:71:38:8e:9f:68:e2:9b:74: c9:ea:4d:d9:3f:96:ec:db:0e:f0:22:4e:79:c7:23: a3:d4:81:ab:63:f6:b2:ed:58:8a:e0:61:19:72:94: 83:a7:1b:a1:55:55:a7:1f:ba:82:a4:b8:64:06:9b: 4f:cd:fe:e1:32:0a:7e:07:ec:1e:bd:5f:d9:a9:93: 53:7a:70:65:e8:5e:e3:1e:64:23:3c:a0:c6:0b:19: 30:da:7b:14:52:bd:74:c7:af:f5:c2:93:0d:7e:62: 5b:b8:f0:34:74:73:16:41:48:d3:39:75:2f:ad:e0: b5:ac:7a:03:60:d7:6a:b7:21:17:23:1a:2d:d0:ec: 66:c5:46:e4:08:29:05:ed:9e:05:57:13:1f:93:a3: 09:68:ff:f4:7b:21:94:55:d1:e7:aa:ee:71:a3:0a: b1:29:45:44:c7:ed:c8:45:2b:4e:85:06:71:a6:71: e3:12:cd:d3:77:38:64:f8:04:d4:aa:ff:39:5c:61: 63:12:61:db:d1:85:c0:bd:a4:49:72:f7:49:54:56: 8d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:80:B1:08:F8:5F:45:E9:73:9C:58:58:4A:38:89:D7:A9:99:CE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9432961b-b9f4-3427-913a-57bfde8f4d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8f:f7:6f:42:51:69:d0:31:2b:5f:f6:f0:cf:50:2f:69:21: 11:68:04:2d:e0:e6:37:88:c4:6a:e0:b1:76:76:e6:68:c6:63: c9:5a:73:02:97:79:5b:d1:ed:b2:7e:1c:90:87:85:2b:95:7c: cd:51:dc:f2:5b:b4:f6:d1:14:b7:b7:e6:7f:13:b0:7a:7c:56: 6e:03:5e:86:0c:5d:36:86:a9:d7:d4:76:c3:ed:9a:0d:30:3c: 50:4a:c7:95:53:c8:03:04:2a:a4:1a:99:b3:90:d0:03:b2:d2: c1:f0:2b:3e:e4:23:8f:fd:08:74:8a:4b:7d:83:3f:d5:a6:a1: d9:22:3e:27:f5:fd:68:92:0b:1b:87:1f:02:22:86:94:fb:d0: a7:37:bb:54:2a:f3:bc:ac:d3:f9:e1:8f:fa:cf:3e:3f:a5:c4: cc:dd:42:b0:98:e4:d0:09:d6:d1:42:96:49:ba:ff:4e:e7:b8: a8:ee:e6:de:55:3b:d4:58:61:ea:19:2a:ca:0f:7c:db:3a:ff: 8c:a5:98:4d:79:44:e5:62:ab:09:6c:7c:b4:26:55:82:67:53: 6a:8b:d4:77:b3:80:9f:3c:3d:48:ea:3f:48:2e:16:8e:bc:f9: 3b:30:57:b7:f6:79:9f:52:05:17:5a:d2:61:d7:3c:33:5a:0c: 3a:6d:ec:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPGLa2ATeuvE0mAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZDdkYzc3MzgtMTNkZi00ZWIxLTg3MTItZGQ5MTA4NWQ2ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/BaKhpzot6XERMXdZ2FjkZ1sMzeF3qMmmsF kSj0ZIXv494AUEIcruyR7YThCmpFUAIMcTiOn2jim3TJ6k3ZP5bs2w7wIk55xyOj 1IGrY/ay7ViK4GEZcpSDpxuhVVWnH7qCpLhkBptPzf7hMgp+B+wevV/ZqZNTenBl 6F7jHmQjPKDGCxkw2nsUUr10x6/1wpMNfmJbuPA0dHMWQUjTOXUvreC1rHoDYNdq tyEXIxot0OxmxUbkCCkF7Z4FVxMfk6MJaP/0eyGUVdHnqu5xowqxKUVEx+3IRStO hQZxpnHjEs3Tdzhk+ATUqv85XGFjEmHb0YXAvaRJcvdJVFaNjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqAsQj4X0Xpc5xYWEo4idepmc4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQzMjk2MWItYjlmNC0z NDI3LTkxM2EtNTdiZmRlOGY0ZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhHYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaP929CUWnQMStf9vDPUC9pIRFoBC3g5jeIxGrgsXZ25mjGY8lacwKX eVvR7bJ+HJCHhSuVfM1R3PJbtPbRFLe35n8TsHp8Vm4DXoYMXTaGqdfUdsPtmg0w PFBKx5VTyAMEKqQambOQ0AOy0sHwKz7kI4/9CHSKS32DP9WmodkiPif1/WiSCxuH HwIihpT70Kc3u1Qq87ys0/nhj/rPPj+lxMzdQrCY5NAJ1tFClkm6/07nuKju5t5V O9RYYeoZKsoPfNs6/4ylmE15ROViqwlsfLQmVYJnU2qL1HezgJ88PUjqP0guFo68 +TswV7f2eZ9SBRda0mHXPDNaDDpt7KA= -----END CERTIFICATE-----Generated at Sat Apr 5 20:47:59 2025 by rpki-client