$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a136ac-30e4-3fdf-b588-d54c51315330.roa File: a6a136ac-30e4-3fdf-b588-d54c51315330.roa (raw, json) Hash identifier: JrTLkDYC6fOjOwwKGJwJmRHnKtgMUxICaZDYIdqGaBA= Subject key identifier: CF:77:86:02:18:3C:E5:33:1B:1D:21:C8:8E:43:7A:08:98:54:E1:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858490364A8497666DD03058D3D80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a136ac-30e4-3fdf-b588-d54c51315330.roa Signing time: Wed 26 Feb 2025 18:04:04 +0000 ROA not before: Wed 26 Feb 2025 18:04:04 +0000 ROA not after: Tue 27 May 2025 17:04:04 +0000 asID: 7029 IP address blocks: 98.17.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:03:64:a8:49:76:66:dd:03:05:8d:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 26 18:04:04 2025 GMT Not After : May 27 17:04:04 2025 GMT Subject: CN=1be43c1b-e83d-4bf3-8294-53a59b419c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:72:c7:29:6c:7d:9a:af:41:55:e3:e4:ee: af:35:0f:71:bf:3b:20:2c:f1:21:81:9a:ef:28:fa: 4b:ec:21:ad:bb:94:12:3a:8a:35:4d:0c:bb:e7:9c: 85:0f:da:dd:24:42:64:c1:82:ef:d5:9a:1a:d2:99: c9:10:62:04:cc:03:2b:a3:67:8c:fa:04:18:51:b8: 17:db:2a:de:95:23:fa:f9:50:70:70:7f:54:62:80: e4:83:20:3e:4f:23:62:65:8f:1e:9b:a9:48:6f:79: 31:a8:d7:c2:d0:09:39:77:c1:94:aa:f0:69:7e:58: ed:d9:4b:cf:a2:6a:cc:f1:4f:08:52:3c:a1:94:f5: f6:a4:10:de:72:39:94:f6:f3:6b:8e:25:b9:c1:f5: de:e9:12:3b:0d:30:82:71:2e:ea:ce:a9:e2:1d:0b: 66:3d:dd:c9:2e:8e:c7:af:c8:fc:df:fc:6d:11:9d: 4a:6f:eb:11:dc:8a:6c:79:1b:71:a5:ad:eb:d3:96: c7:c8:fa:6a:4e:d8:b7:d7:b2:6e:e4:04:25:c2:08: 12:79:73:23:6b:78:18:27:b9:66:0a:e8:ec:00:96: 2c:67:46:27:95:8b:64:12:45:de:e4:2e:87:ff:31: 9e:14:24:08:e0:e5:94:f5:40:bf:00:3e:74:f9:02: 9b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:77:86:02:18:3C:E5:33:1B:1D:21:C8:8E:43:7A:08:98:54:E1:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6a136ac-30e4-3fdf-b588-d54c51315330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:de:cd:7e:08:eb:ae:19:ee:6d:00:55:49:1b:eb:2e:99:66: a8:1d:8c:22:4d:25:43:f2:6e:31:79:3f:8b:87:63:f8:32:5b: 1b:8f:af:d4:12:a4:56:e0:58:4a:e1:13:04:74:a6:22:d7:12: 10:21:b3:6e:08:84:71:b0:d0:d6:2d:f6:2e:fe:f2:7c:2f:77: 32:41:ac:c2:61:2b:43:ce:2d:80:bd:1a:f6:f8:d2:6b:53:2e: 10:72:98:3f:c9:c5:ef:0f:12:2f:7c:e2:4b:56:bb:5f:5b:8d: ac:8e:c3:bc:7c:db:17:9d:8b:22:48:aa:60:0f:72:a2:cd:b8: 83:19:86:ad:4d:8c:e3:6c:6f:0d:a2:ad:5c:21:e1:36:7e:10: e4:f1:e7:61:4a:ba:ac:76:13:ae:b1:15:f2:db:6e:f2:64:76: fa:4c:4d:85:14:4c:b1:2a:f8:f5:f5:07:de:15:4c:0e:3d:e5: 12:e0:27:9f:08:4e:a9:de:07:37:58:a6:f6:1a:a1:0e:11:17: 08:0e:2e:00:94:e4:92:b5:14:3d:85:c7:00:f4:33:d8:ba:d4: 59:77:6b:40:51:0c:13:3d:8a:04:bd:c9:d5:8c:7e:a8:66:4c: 2f:28:77:7b:43:41:f8:43:a6:39:e9:0f:6b:ea:2a:2c:88:e8: 96:2b:53:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkDZKhJdmbdAwWNPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyNjE4MDQwNFoXDTI1MDUyNzE3MDQwNFowLzEtMCsGA1UEAxMk MWJlNDNjMWItZTgzZC00YmYzLTgyOTQtNTNhNTliNDE5Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvRyxylsfZqvQVXj5O6vNQ9xvzsgLPEhgZrv KPpL7CGtu5QSOoo1TQy755yFD9rdJEJkwYLv1Zoa0pnJEGIEzAMro2eM+gQYUbgX 2yrelSP6+VBwcH9UYoDkgyA+TyNiZY8em6lIb3kxqNfC0Ak5d8GUqvBpfljt2UvP omrM8U8IUjyhlPX2pBDecjmU9vNrjiW5wfXe6RI7DTCCcS7qzqniHQtmPd3JLo7H r8j83/xtEZ1Kb+sR3IpseRtxpa3r05bHyPpqTti317Ju5AQlwggSeXMja3gYJ7lm CujsAJYsZ0YnlYtkEkXe5C6H/zGeFCQI4OWU9UC/AD50+QKbHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM93hgIYPOUzGx0hyI5DegiYVOGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTZhMTM2YWMtMzBlNC0z ZmRmLWI1ODgtZDU0YzUxMzE1MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhGWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3ezX4I664Z7m0AVUkb6y6ZZqgdjCJNJUPybjF5P4uHY/gyWxuPr9QS pFbgWErhEwR0piLXEhAhs24IhHGw0NYt9i7+8nwvdzJBrMJhK0POLYC9Gvb40mtT LhBymD/Jxe8PEi984ktWu19bjayOw7x82xediyJIqmAPcqLNuIMZhq1NjONsbw2i rVwh4TZ+EOTx52FKuqx2E66xFfLbbvJkdvpMTYUUTLEq+PX1B94VTA495RLgJ58I TqneBzdYpvYaoQ4RFwgOLgCU5JK1FD2FxwD0M9i61Fl3a0BRDBM9igS9ydWMfqhm TC8od3tDQfhDpjnpD2vqKiyI6JYrU5o= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:37 2025 by rpki-client