$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa File: 9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa (raw, json) Hash identifier: TssKVuh1lPqzNTHeVAeJ+cmE4ykhSvMv3kqkXdVkFXA= Subject key identifier: 63:F9:C8:16:83:D3:4F:BE:0B:F0:3F:10:CA:F4:00:93:D9:22:14:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D7162984642153ABBCF2560 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.18.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:62:98:46:42:15:3a:bb:cf:25:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=e8e8e708-9e6e-4a21-ba1b-c590d8c4f486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0f:94:20:c4:1c:d4:3e:3a:7d:dd:0d:2d:ef: 28:9e:a1:5f:f8:0b:bd:ce:88:e6:da:28:f3:d0:23: dc:57:e9:86:79:2e:ef:c0:8c:d8:9f:4b:7f:18:37: 98:1a:5e:7a:6b:ff:07:ef:73:8e:a2:99:75:2e:d9: 9a:79:76:b3:71:0a:f2:26:38:f6:3b:cf:0b:67:51: f5:be:43:2b:15:2d:1a:c6:76:15:ad:4e:de:81:9d: 77:b1:77:a9:25:0e:38:7b:0e:48:d5:ad:ba:e7:3e: 69:9d:b1:88:6c:3a:03:b4:d3:41:74:a0:31:92:cf: 70:09:d7:df:d4:8b:b4:11:ba:bf:81:a2:7a:0b:18: 1b:d2:c0:af:a8:47:f3:b4:99:76:1c:45:ce:1e:ef: b7:56:6c:d7:df:87:7f:39:06:a1:55:34:c0:2d:92: f8:5b:bf:37:e0:c3:91:9f:16:d3:5c:77:42:8d:e4: 64:f6:e4:4b:3b:18:30:3f:bb:92:f2:99:13:58:07: 08:3a:d8:58:6e:94:4d:c7:88:a2:7c:f8:71:a9:1d: 0b:5c:2d:e8:c1:ad:99:e3:e0:3e:bb:90:41:ee:c3: 0c:1e:de:1f:6c:24:db:07:6f:be:19:da:1e:a6:b8: 7d:38:6b:1b:09:dc:a2:67:59:3c:0f:50:f8:6d:67: d7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F9:C8:16:83:D3:4F:BE:0B:F0:3F:10:CA:F4:00:93:D9:22:14:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f1cd4b1-8c79-32f7-8dac-68d8fcb73e7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:24:ea:6d:35:d9:49:91:fa:64:0c:c2:86:d4:e7:1e:df:02: 3e:a3:97:a1:cd:4e:16:c0:e6:2c:8c:58:ee:0d:53:b5:37:41: 78:0e:9f:b9:d6:34:6f:6d:50:e1:67:61:00:ce:18:72:d1:a1: 5d:1f:72:a7:68:fd:a7:9a:11:74:eb:70:a6:24:45:09:93:c1: cf:63:c6:6e:c3:ec:44:93:a2:74:c6:08:d1:fa:f2:19:5a:7f: 34:ac:e9:14:fb:b9:40:55:b5:6f:c9:bb:f7:99:55:72:63:05: 39:77:8d:b6:ca:ba:bc:9b:61:53:56:76:e5:d1:bd:5e:89:54: f7:6f:21:a6:d5:97:cb:d2:f9:2c:d1:ec:c2:d8:45:1a:89:af: 90:35:5b:eb:69:28:d7:c6:1d:fe:43:e6:c6:c9:03:48:cc:c2: 6a:83:c9:44:be:0a:b1:e0:7e:ad:75:90:c8:41:8c:a3:7b:22: c4:c4:d7:1d:56:3c:c9:2e:f5:f0:11:a4:d8:6c:32:6e:f6:51: a7:29:bc:71:b1:52:36:3b:7e:20:f0:53:33:e3:57:de:8a:1b: 83:f4:84:c0:b9:8b:d7:5b:47:c7:4f:7b:95:67:8d:52:f2:2c: 03:4f:8a:97:fd:7d:bc:46:c2:3f:5c:a1:0e:78:04:f9:13:cd: 54:0e:d5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWKYRkIVOrvPJWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZThlOGU3MDgtOWU2ZS00YTIxLWJhMWItYzU5MGQ4YzRmNDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg+UIMQc1D46fd0NLe8onqFf+Au9zojm2ijz 0CPcV+mGeS7vwIzYn0t/GDeYGl56a/8H73OOopl1LtmaeXazcQryJjj2O88LZ1H1 vkMrFS0axnYVrU7egZ13sXepJQ44ew5I1a265z5pnbGIbDoDtNNBdKAxks9wCdff 1Iu0Ebq/gaJ6Cxgb0sCvqEfztJl2HEXOHu+3VmzX34d/OQahVTTALZL4W7834MOR nxbTXHdCjeRk9uRLOxgwP7uS8pkTWAcIOthYbpRNx4iifPhxqR0LXC3owa2Z4+A+ u5BB7sMMHt4fbCTbB2++Gdoeprh9OGsbCdyiZ1k8D1D4bWfXewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP5yBaD00++C/A/EMr0AJPZIhQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYxY2Q0YjEtOGM3OS0z MmY3LThkYWMtNjhkOGZjYjczZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUk6m012UmR+mQMwobU5x7fAj6jl6HNThbA5iyMWO4NU7U3QXgOn7nW NG9tUOFnYQDOGHLRoV0fcqdo/aeaEXTrcKYkRQmTwc9jxm7D7ESTonTGCNH68hla fzSs6RT7uUBVtW/Ju/eZVXJjBTl3jbbKurybYVNWduXRvV6JVPdvIabVl8vS+SzR 7MLYRRqJr5A1W+tpKNfGHf5D5sbJA0jMwmqDyUS+CrHgfq11kMhBjKN7IsTE1x1W PMku9fARpNhsMm72UacpvHGxUjY7fiDwUzPjV96KG4P0hMC5i9dbR8dPe5VnjVLy LANPipf9fbxGwj9coQ54BPkTzVQO1cs= -----END CERTIFICATE-----Generated at Fri Mar 14 11:11:06 2025 by rpki-client