$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9708aa22-527d-31ae-97e2-3bc7f96fc872.roa File: 9708aa22-527d-31ae-97e2-3bc7f96fc872.roa (raw, json) Hash identifier: tfeFXskaXTkMIYbNJJT+sgQaxgJpiGbsSgjo09HBDdk= Subject key identifier: DD:F8:77:1B:A9:09:4E:3B:67:56:D9:AF:54:6C:34:CA:2C:2B:77:D9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F2762C74430066909000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9708aa22-527d-31ae-97e2-3bc7f96fc872.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.21.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f2:76:2c:74:43:00:66:90:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ae0d9d78-457a-4a15-ab5d-c4e4e2a2eab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b8:45:bf:23:d4:52:ad:f7:01:fc:87:b3:63: 99:6f:b7:d8:cb:7e:3e:cb:04:6d:06:1d:a7:08:7f: 54:b9:fc:af:eb:65:88:0b:45:f0:47:32:17:a0:3b: d3:5f:63:7d:a0:0d:a0:82:1e:50:be:d7:8c:6b:ee: 8b:04:41:33:62:31:cb:59:07:08:f1:87:41:da:18: c7:8d:d3:9f:a1:c3:31:c3:96:10:87:7e:50:ba:04: 39:cc:9c:93:38:45:f0:2e:a4:1b:9c:34:8c:66:7b: 78:d5:76:2c:09:6d:69:75:19:4f:38:de:2f:2c:2e: 79:09:5b:54:b2:37:6b:2f:3b:c7:78:85:cc:19:07: 8f:1b:8f:3a:07:3e:4b:ae:41:7e:ac:3b:2f:11:7c: a1:0a:41:d4:3f:f9:80:b5:88:ff:27:bb:0e:2f:f3: d6:fc:05:36:38:8c:ca:3e:8c:36:99:16:20:76:5b: 9c:01:fd:dd:e1:63:5b:f1:e1:29:f2:8a:58:b3:a7: ae:48:72:bf:a9:78:47:4d:1a:0c:fc:5d:8e:59:35: 9f:e9:f1:85:aa:8b:ab:33:55:f1:14:27:30:6a:2a: ac:2a:89:51:fd:f2:68:04:7b:fa:2c:35:6b:bd:51: 87:5c:fa:d4:38:71:e5:50:df:2b:a1:32:9d:cc:5b: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F8:77:1B:A9:09:4E:3B:67:56:D9:AF:54:6C:34:CA:2C:2B:77:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9708aa22-527d-31ae-97e2-3bc7f96fc872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:33:90:2d:b3:49:f8:54:4d:1c:03:a3:86:88:a4:28:66:b1: c6:af:46:ba:45:8d:dc:15:58:42:f6:e9:68:62:b8:de:17:ee: c7:c7:e2:e5:31:86:e8:b6:05:65:e4:be:eb:82:34:69:d2:6a: d7:c8:cc:66:25:ab:c7:49:54:85:50:eb:7f:9a:74:d6:a1:b5: 40:82:8b:0b:65:54:ab:3b:28:7a:86:41:37:6f:a7:31:67:3c: 0c:18:0e:c8:a4:cd:79:f7:cc:82:27:bf:1f:d4:e7:5d:1e:0d: e8:37:59:20:a2:92:8e:0b:b0:a2:97:ea:42:a7:ff:da:0d:7d: 1c:cf:d0:0f:2c:4f:fd:dd:8f:ef:f3:c3:b1:e2:91:03:2f:51: b3:65:bd:5b:27:37:be:ac:eb:60:7a:8b:3c:b0:93:14:a2:91: 09:93:50:69:62:94:b9:7b:b8:3e:99:91:8a:17:e5:ea:1a:5b: 8c:f5:86:27:b4:e5:0e:74:41:01:27:0d:3b:2f:a1:1b:55:b3: ae:5c:64:51:07:5a:2e:36:c0:df:1d:ce:13:74:ef:e2:c5:32: c7:63:63:39:8b:a8:78:ea:f5:95:b8:ff:32:e2:91:3f:96:d4: 80:76:01:5a:b4:77:49:a4:f5:5b:b6:a9:18:85:9e:7f:71:93: 56:fd:d0:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPJ2LHRDAGaQkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWUwZDlkNzgtNDU3YS00YTE1LWFiNWQtYzRlNGUyYTJlYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7hFvyPUUq33AfyHs2OZb7fYy34+ywRtBh2n CH9Uufyv62WIC0XwRzIXoDvTX2N9oA2ggh5QvteMa+6LBEEzYjHLWQcI8YdB2hjH jdOfocMxw5YQh35QugQ5zJyTOEXwLqQbnDSMZnt41XYsCW1pdRlPON4vLC55CVtU sjdrLzvHeIXMGQePG486Bz5LrkF+rDsvEXyhCkHUP/mAtYj/J7sOL/PW/AU2OIzK Pow2mRYgdlucAf3d4WNb8eEp8opYs6euSHK/qXhHTRoM/F2OWTWf6fGFqourM1Xx FCcwaiqsKolR/fJoBHv6LDVrvVGHXPrUOHHlUN8roTKdzFv/0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN34dxupCU47Z1bZr1RsNMosK3fZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTcwOGFhMjItNTI3ZC0z MWFlLTk3ZTItM2JjN2Y5NmZjODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4zkC2zSfhUTRwDo4aIpChmscavRrpFjdwVWEL26WhiuN4X7sfH4uUx hui2BWXkvuuCNGnSatfIzGYlq8dJVIVQ63+adNahtUCCiwtlVKs7KHqGQTdvpzFn PAwYDsikzXn3zIInvx/U510eDeg3WSCiko4LsKKX6kKn/9oNfRzP0A8sT/3dj+/z w7HikQMvUbNlvVsnN76s62B6izywkxSikQmTUGlilLl7uD6ZkYoX5eoaW4z1hie0 5Q50QQEnDTsvoRtVs65cZFEHWi42wN8dzhN07+LFMsdjYzmLqHjq9ZW4/zLikT+W 1IB2AVq0d0mk9Vu2qRiFnn9xk1b90KA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:29 2025 by rpki-client