$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98b1c775-ae3e-39fb-843a-f4c011970199.roa File: 98b1c775-ae3e-39fb-843a-f4c011970199.roa (raw, json) Hash identifier: fgR62OmTnFW/8goIqXa1f1HGnghQ/CYxLvB1ixhbY3Q= Subject key identifier: 89:D7:81:54:A5:11:7F:24:CD:40:C2:1A:FF:99:0D:74:38:84:5D:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F5E79A6BA3D372261D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98b1c775-ae3e-39fb-843a-f4c011970199.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 174.130.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f5:e7:9a:6b:a3:d3:72:26:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4295f9e3-e4ea-485f-9046-f31062f386db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:13:26:cc:5a:f1:70:2d:d0:03:a8:88:db:01: 72:f9:03:49:a9:0e:36:6a:b1:fd:ca:94:3f:58:46: 0d:c8:93:b5:d0:0a:b0:5f:70:38:a7:be:bd:83:fd: 3c:36:31:8f:18:ca:1c:58:76:23:d9:90:c7:3a:85: 74:8a:49:d4:e3:da:71:10:46:9a:61:96:d0:df:b2: a5:1c:be:e0:4c:87:90:de:af:eb:5c:d9:69:2d:47: a9:e5:ef:e6:f0:0d:95:47:c8:e6:4f:90:56:1a:33: 53:01:64:73:1f:a5:d0:27:9d:25:c8:d3:38:8e:5e: 30:78:29:31:34:a3:28:36:27:89:73:00:a4:fb:1c: 23:30:64:ea:40:17:39:df:cd:8e:db:a6:10:da:21: 82:c5:6b:1c:cc:f4:8c:e4:79:8c:51:12:f7:aa:18: 99:5b:e9:67:c8:bc:ce:27:ae:14:41:ed:ac:21:d0: 6a:45:8e:9c:51:79:f5:77:00:7e:86:b6:3b:ac:85: 70:ba:9c:3b:35:38:cc:25:79:43:55:4a:32:1e:cb: 4e:69:62:fb:c5:d4:06:bb:4d:c6:cf:47:d4:9f:3e: a5:b4:87:33:d7:be:72:e1:bc:40:f2:24:44:2e:a5: d0:6a:10:ad:de:e3:66:d5:6f:97:cc:8a:aa:1f:b0: 38:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D7:81:54:A5:11:7F:24:CD:40:C2:1A:FF:99:0D:74:38:84:5D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/98b1c775-ae3e-39fb-843a-f4c011970199.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:d7:62:a6:46:af:e6:75:18:f4:0a:52:97:fe:0f:0c:a4:40: 05:55:16:7f:95:6a:96:f4:75:2e:19:a6:73:20:d1:48:f1:02: dd:f1:ba:9f:d2:1a:5a:c6:3d:29:3d:62:a8:04:c1:15:a1:71: 49:2b:7e:bc:fc:d6:ce:3b:6a:16:84:f5:fa:c2:bd:32:a1:2f: 49:3b:91:75:ea:9b:65:2f:f0:9f:7a:93:8d:98:35:6f:09:5f: 88:e3:ab:d3:02:83:c7:07:2d:a1:20:e9:5c:bf:d3:43:55:9b: 67:dc:94:4d:15:fc:70:2f:98:a0:42:51:70:cf:f6:a4:74:45: 15:63:91:cf:27:cc:df:b2:d8:5b:a3:f7:2b:01:c5:05:11:70: c3:e2:78:77:ed:d8:25:29:4a:b5:de:04:bb:34:67:89:4f:13: e5:a1:39:38:8a:9b:26:6f:40:64:0e:77:31:26:27:0b:ae:98: ba:69:81:e2:fc:a3:32:83:a4:b0:d9:fe:80:ec:b8:a2:c2:b3: e0:5e:78:5e:26:fb:67:d7:17:0c:a8:79:87:a1:ed:69:e8:2b: 4b:b3:63:51:cf:2c:90:d7:75:be:62:b1:e9:8d:43:e4:90:1c: cc:0c:2c:cc:30:40:f8:70:66:3e:00:ef:56:88:4d:48:58:4d: 8c:c2:f4:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPXnmmuj03ImHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDI5NWY5ZTMtZTRlYS00ODVmLTkwNDYtZjMxMDYyZjM4NmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRMmzFrxcC3QA6iI2wFy+QNJqQ42arH9ypQ/ WEYNyJO10AqwX3A4p769g/08NjGPGMocWHYj2ZDHOoV0iknU49pxEEaaYZbQ37Kl HL7gTIeQ3q/rXNlpLUep5e/m8A2VR8jmT5BWGjNTAWRzH6XQJ50lyNM4jl4weCkx NKMoNieJcwCk+xwjMGTqQBc5382O26YQ2iGCxWsczPSM5HmMURL3qhiZW+lnyLzO J64UQe2sIdBqRY6cUXn1dwB+hrY7rIVwupw7NTjMJXlDVUoyHstOaWL7xdQGu03G z0fUnz6ltIcz175y4bxA8iRELqXQahCt3uNm1W+XzIqqH7A4XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInXgVSlEX8kzUDCGv+ZDXQ4hF30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOThiMWM3NzUtYWUzZS0z OWZiLTg0M2EtZjRjMDExOTcwMTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroIAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzXYqZGr+Z1GPQKUpf+DwykQAVVFn+Vapb0dS4ZpnMg0UjxAt3xup/S GlrGPSk9YqgEwRWhcUkrfrz81s47ahaE9frCvTKhL0k7kXXqm2Uv8J96k42YNW8J X4jjq9MCg8cHLaEg6Vy/00NVm2fclE0V/HAvmKBCUXDP9qR0RRVjkc8nzN+y2Fuj 9ysBxQURcMPieHft2CUpSrXeBLs0Z4lPE+WhOTiKmyZvQGQOdzEmJwuumLppgeL8 ozKDpLDZ/oDsuKLCs+BeeF4m+2fXFwyoeYeh7WnoK0uzY1HPLJDXdb5isemNQ+SQ HMwMLMwwQPhwZj4A71aITUhYTYzC9EY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:02 2025 by rpki-client