$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a497725a-c9d8-30b4-ab87-e0665089bff2.roa File: a497725a-c9d8-30b4-ab87-e0665089bff2.roa (raw, json) Hash identifier: svcIGCsyytPSB9ziEalAP841pbscONLD5fxfM7WpBkE= Subject key identifier: BB:8F:41:8C:33:A0:33:1A:1F:5E:16:8B:FF:E8:9C:89:09:80:31:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F15F001880269ADB0200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a497725a-c9d8-30b4-ab87-e0665089bff2.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.16.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f1:5f:00:18:80:26:9a:db:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=9bad4a79-69d8-4f23-9312-610ffba49106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ac:c6:24:6b:ac:a3:63:40:b4:78:20:fa:f8: 6e:f3:0e:b7:3d:c9:f0:f2:dd:74:b3:c1:ea:79:09: d0:80:44:d7:2b:d9:c7:6f:b8:4e:14:67:43:17:4c: 69:c2:d3:97:5e:4c:5e:ac:77:e9:ff:88:9d:f5:a4: 68:a9:5a:7c:c6:06:92:83:75:bf:1e:8d:85:58:f6: 0e:47:58:7c:9e:1e:ed:75:b8:f5:c9:2d:72:b8:fc: 1c:c1:ab:11:e1:50:13:a0:bd:6b:a0:94:c7:b5:d6: d2:b7:c4:75:e6:74:99:da:f1:e0:84:da:f6:36:31: d6:cb:14:75:b7:c0:71:60:c5:7c:65:b3:97:aa:a1: 9d:7f:d6:6c:dc:31:a7:13:04:37:31:1b:a5:2d:ae: 9e:ab:27:9a:c0:bd:9c:5f:f2:c3:18:52:77:7b:52: 79:3a:a9:68:13:b9:59:42:9e:b7:77:d3:ed:eb:21: 4f:51:14:c3:80:eb:ec:f7:5e:38:d4:77:d1:77:94: 65:e0:2a:05:5a:1d:a6:d6:04:92:a0:a8:ba:1b:f6: 9d:bc:72:93:71:ed:20:ba:95:84:94:7a:3b:e0:4d: 25:c7:2a:d0:f3:83:ad:9e:ca:ac:3c:f9:ed:f9:d0: 4c:5f:a9:02:41:55:f0:27:62:2d:a0:2d:aa:27:8c: db:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8F:41:8C:33:A0:33:1A:1F:5E:16:8B:FF:E8:9C:89:09:80:31:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a497725a-c9d8-30b4-ab87-e0665089bff2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:14:16:7a:97:d0:b3:85:7c:f9:4d:e1:89:55:6e:0c:bb:9b: fa:97:8c:f4:fa:91:80:1a:23:47:10:eb:51:69:e4:19:f2:cb: 97:17:84:87:03:03:1a:e6:9a:f1:76:1c:35:3a:e6:3f:04:9e: 21:44:b7:0f:d6:31:9a:aa:df:58:25:76:37:f7:29:52:54:1e: d2:62:13:99:d3:80:33:e4:e3:2d:1c:ea:28:d1:07:b5:31:37: 4d:20:2e:07:7f:65:c0:9a:4b:6c:f7:a2:d9:ac:ec:21:b9:c1: 0d:11:db:42:f5:dd:7d:17:ac:2d:e5:86:ee:b0:20:09:e6:10: c9:99:46:5f:2d:9a:69:9e:33:f0:cb:68:d1:f3:01:9a:c9:7a: 43:fd:d6:c3:64:5e:43:f0:b9:16:2f:aa:82:be:c2:0f:59:ea: e9:ac:a1:e6:f6:ec:74:14:48:2b:69:1b:08:43:cd:ac:7f:07: 83:bd:cd:87:45:2d:33:6e:10:c1:95:b1:a9:bc:1d:7b:77:9f: 54:c0:5c:af:73:62:ec:f6:1f:fb:c7:56:17:ad:cb:9e:95:4a: 39:80:95:91:06:dc:b6:45:2e:38:52:38:8d:76:b7:22:1c:5f: 88:33:8e:e6:0c:4a:86:37:ec:f3:08:6c:3d:d7:fc:4d:2f:c4: 85:75:77:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPFfABiAJprbAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OWJhZDRhNzktNjlkOC00ZjIzLTkzMTItNjEwZmZiYTQ5MTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKzGJGuso2NAtHgg+vhu8w63Pcnw8t10s8Hq eQnQgETXK9nHb7hOFGdDF0xpwtOXXkxerHfp/4id9aRoqVp8xgaSg3W/Ho2FWPYO R1h8nh7tdbj1yS1yuPwcwasR4VAToL1roJTHtdbSt8R15nSZ2vHghNr2NjHWyxR1 t8BxYMV8ZbOXqqGdf9Zs3DGnEwQ3MRulLa6eqyeawL2cX/LDGFJ3e1J5OqloE7lZ Qp63d9Pt6yFPURTDgOvs91441HfRd5Rl4CoFWh2m1gSSoKi6G/advHKTce0gupWE lHo74E0lxyrQ84OtnsqsPPnt+dBMX6kCQVXwJ2ItoC2qJ4zbyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuPQYwzoDMaH14Wi//onIkJgDH4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTQ5NzcyNWEtYzlkOC0z MGI0LWFiODctZTA2NjUwODliZmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhDYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8UFnqX0LOFfPlN4YlVbgy7m/qXjPT6kYAaI0cQ61Fp5Bnyy5cXhIcD AxrmmvF2HDU65j8EniFEtw/WMZqq31gldjf3KVJUHtJiE5nTgDPk4y0c6ijRB7Ux N00gLgd/ZcCaS2z3otms7CG5wQ0R20L13X0XrC3lhu6wIAnmEMmZRl8tmmmeM/DL aNHzAZrJekP91sNkXkPwuRYvqoK+wg9Z6umsoeb27HQUSCtpGwhDzax/B4O9zYdF LTNuEMGVsam8HXt3n1TAXK9zYuz2H/vHVhety56VSjmAlZEG3LZFLjhSOI12tyIc X4gzjuYMSoY37PMIbD3X/E0vxIV1dx0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:41 2025 by rpki-client