$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa File: a72af3db-4149-3870-b873-369d08de432c.roa (raw, json) Hash identifier: I0nm7D+3QMvOv3rlMfcCpPqlsApYP7Tq68dfzevJegk= Subject key identifier: 34:75:38:B9:36:85:C9:30:6D:8C:3F:8B:91:C7:E5:B4:5A:32:B2:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D71692613B722B14F4F2F26 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.19.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:69:26:13:b7:22:b1:4f:4f:2f:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=8cd87633-90bc-4dca-877a-f1e04613681b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:21:a7:33:cc:1a:23:ee:1c:ec:d0:86:47:a1: 0b:b1:6c:9e:27:73:c3:1a:d4:90:0b:8b:36:02:5e: 7c:d1:a8:8f:51:cf:26:84:83:ef:a1:73:66:97:2c: 66:9e:89:06:54:f8:d9:66:b8:f5:65:a4:9f:c3:45: d5:5b:1c:73:3a:96:ea:5b:ad:c3:e4:02:be:d0:1b: 7c:0a:22:5e:5d:b4:89:61:8b:c6:64:95:b4:89:88: eb:96:03:00:76:ee:d2:98:8e:bb:e6:74:3d:f7:ca: 45:fa:c3:e3:23:2a:91:01:6a:03:61:93:13:96:9e: e6:1d:b0:15:a7:68:05:43:0c:7d:6b:40:67:1f:bd: c4:8d:e7:ad:2b:2b:1a:f4:44:a3:2b:45:f3:19:ad: 02:bd:9a:52:96:e9:a9:0b:97:7e:bd:d3:8d:c9:8e: b1:10:80:c3:27:74:a4:e2:c3:c5:27:f8:e7:d0:a7: c2:f5:6d:c5:04:f3:4b:94:fe:4a:11:36:26:2a:f7: be:38:67:75:3d:ed:82:8b:af:1a:26:de:6f:2f:29: 17:97:42:b6:45:27:76:93:40:2c:70:c7:b7:64:17: 2c:a6:fb:23:51:b9:34:a3:19:31:65:0e:74:af:db: bc:87:6d:57:fe:a6:54:bc:73:22:d1:85:a7:77:2d: 80:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:75:38:B9:36:85:C9:30:6D:8C:3F:8B:91:C7:E5:B4:5A:32:B2:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a72af3db-4149-3870-b873-369d08de432c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:9f:2a:2a:0d:5c:cd:14:d8:0f:8b:7a:fe:c2:cc:d3:42:10: 42:ab:c8:17:8e:bd:bd:57:c4:59:9c:b6:d4:0a:8d:94:ec:7a: 7a:bb:85:ad:f1:c6:5d:6a:36:41:d0:71:9c:e3:c5:36:56:f5: cc:6f:18:29:98:22:d0:27:00:5f:c6:ea:51:f0:f4:ad:3e:c2: fd:34:45:3d:4b:ef:58:c9:10:37:b4:80:0f:e7:6a:79:15:87: 09:c0:d2:ba:54:66:c7:36:0c:6c:a3:6f:49:53:36:30:55:a8: a3:cd:d2:88:56:dd:6c:ce:6d:bf:13:4a:f8:40:95:e3:83:ba: 76:73:bb:e9:4d:c1:75:6a:e0:8e:40:68:e5:85:00:c6:94:09: a5:4c:27:8a:5e:75:b6:c4:9a:d9:89:80:91:b6:61:37:2a:06: fd:50:60:df:1b:c7:62:bd:34:c3:c9:0d:b6:f7:e3:52:0e:89: ed:72:06:ae:c3:ce:65:62:bb:56:96:3e:36:87:d1:21:3d:9f: fa:ce:f6:33:24:0a:a4:15:6e:08:31:b4:4b:9c:aa:22:1a:4d: 49:42:78:53:32:f4:d9:eb:fb:45:65:60:85:14:76:d3:f3:7c: 5a:08:32:cb:26:6e:bf:ac:4a:4c:f9:25:73:da:80:84:21:8b: 43:97:d6:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWkmE7cisU9PLyYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OGNkODc2MzMtOTBiYy00ZGNhLTg3N2EtZjFlMDQ2MTM2ODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyGnM8waI+4c7NCGR6ELsWyeJ3PDGtSQC4s2 Al580aiPUc8mhIPvoXNmlyxmnokGVPjZZrj1ZaSfw0XVWxxzOpbqW63D5AK+0Bt8 CiJeXbSJYYvGZJW0iYjrlgMAdu7SmI675nQ998pF+sPjIyqRAWoDYZMTlp7mHbAV p2gFQwx9a0BnH73EjeetKysa9ESjK0XzGa0CvZpSlumpC5d+vdONyY6xEIDDJ3Sk 4sPFJ/jn0KfC9W3FBPNLlP5KETYmKve+OGd1Pe2Ci68aJt5vLykXl0K2RSd2k0As cMe3ZBcspvsjUbk0oxkxZQ50r9u8h21X/qZUvHMi0YWndy2A1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDR1OLk2hckwbYw/i5HH5bRaMrJmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTcyYWYzZGItNDE0OS0z ODcwLWI4NzMtMzY5ZDA4ZGU0MzJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhMwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2fKioNXM0U2A+Lev7CzNNCEEKryBeOvb1XxFmcttQKjZTsenq7ha3x xl1qNkHQcZzjxTZW9cxvGCmYItAnAF/G6lHw9K0+wv00RT1L71jJEDe0gA/nankV hwnA0rpUZsc2DGyjb0lTNjBVqKPN0ohW3WzObb8TSvhAleODunZzu+lNwXVq4I5A aOWFAMaUCaVMJ4pedbbEmtmJgJG2YTcqBv1QYN8bx2K9NMPJDbb341IOie1yBq7D zmViu1aWPjaH0SE9n/rO9jMkCqQVbggxtEucqiIaTUlCeFMy9Nnr+0VlYIUUdtPz fFoIMssmbr+sSkz5JXPagIQhi0OX1gE= -----END CERTIFICATE-----Generated at Wed Apr 9 18:09:09 2025 by rpki-client