$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa File: a76862bc-99e6-3f16-a88d-6b07293a09d3.roa (raw, json) Hash identifier: bpZv0UNyUh3KRlZTO+Fg1ak6ELFlbbKqit+cY66GwzU= Subject key identifier: F2:42:1F:54:55:E8:B7:95:B4:E3:67:F5:28:57:B2:10:A2:FD:BC:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11E7A3ADA6C9B4F884580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.23.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:7a:3a:da:6c:9b:4f:88:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=b4b49523-eafc-4766-8fef-124c34f5e958 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:32:ea:b0:d4:d5:03:e4:c9:68:0b:d9:98:bd: 01:21:81:18:30:87:d6:b5:10:8b:a3:a9:88:5d:56: 57:99:bd:88:da:a0:c5:81:8e:6f:c8:3d:41:7e:43: e8:45:94:f0:13:53:05:04:ad:a2:02:05:23:54:ad: ac:88:c4:bd:68:ac:da:4e:27:21:d2:46:64:10:d9: 09:b2:e1:26:6e:cf:1d:66:3d:55:5a:55:ce:cf:08: fb:14:fa:80:a5:d1:c3:10:82:8f:bb:55:aa:82:41: 07:4f:40:f0:a5:2d:a7:04:32:b9:39:12:9e:f3:21: a2:39:fb:cd:93:98:01:3f:e8:81:f0:4b:ff:12:29: 8a:32:d5:51:6a:b1:68:b7:04:3a:fc:ad:bf:25:ad: d3:30:d0:af:13:c3:ce:1e:50:8d:21:85:4e:9a:00: e0:57:4f:91:5e:34:a5:9c:cf:40:e5:fe:96:7b:e5: 7f:ff:ab:62:6c:a5:be:b0:52:ab:e2:77:2f:6a:c5: 57:a6:b2:9f:48:a2:49:77:7a:05:23:c4:89:cf:40: f6:44:65:2e:c6:b6:95:66:5d:07:8b:e0:9e:3b:33: 74:d4:06:cc:7a:d2:b5:e9:69:8e:07:72:fc:4f:ad: 52:de:f4:82:b4:86:b1:f1:d9:4c:6c:b1:3c:92:b5: 70:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:42:1F:54:55:E8:B7:95:B4:E3:67:F5:28:57:B2:10:A2:FD:BC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a76862bc-99e6-3f16-a88d-6b07293a09d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.23.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b6:66:c8:91:72:33:9b:cb:3c:2a:ee:e2:be:08:23:a7:f1: eb:36:6e:ba:b3:49:59:21:a3:c5:48:72:ad:59:61:0a:69:a2: 2e:ee:6d:49:7a:b9:da:0a:cc:61:14:25:86:3f:dd:3d:97:34: d8:34:33:ab:dd:f2:b1:18:fc:61:7b:54:fb:4f:41:d0:32:5e: 17:5c:80:71:8e:87:ae:b5:f1:0e:88:bd:aa:73:92:44:1e:0a: db:cd:ac:47:b0:58:85:f7:b4:e7:dd:19:f2:3e:e5:e7:1a:ac: 6e:64:e5:f0:65:0a:90:0f:f3:9d:53:c5:6e:ac:15:d7:d1:96: 14:43:7f:d8:52:00:aa:ff:76:ea:1f:c2:bf:e6:af:ff:49:fe: f7:dd:12:2e:d5:33:b9:33:63:22:a5:5e:01:d2:38:9f:94:1a: 56:b2:88:a7:42:bc:5a:c8:fe:5e:e7:05:dd:0b:11:06:54:48: fb:a9:f6:14:7a:83:5b:21:7b:be:88:fa:36:10:b9:d8:89:b6: 9f:4a:37:b6:02:72:61:70:01:a0:b1:5f:59:fc:4e:c7:2f:a8: 6d:0a:56:96:1c:50:4a:34:d8:0d:ca:8f:2e:f1:ff:59:bb:2c: 41:79:62:e2:cd:3f:66:84:26:fc:74:a7:89:37:0c:8d:52:44: 8c:10:46:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R56Otpsm0+IRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YjRiNDk1MjMtZWFmYy00NzY2LThmZWYtMTI0YzM0ZjVlOTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDLqsNTVA+TJaAvZmL0BIYEYMIfWtRCLo6mI XVZXmb2I2qDFgY5vyD1BfkPoRZTwE1MFBK2iAgUjVK2siMS9aKzaTich0kZkENkJ suEmbs8dZj1VWlXOzwj7FPqApdHDEIKPu1WqgkEHT0DwpS2nBDK5ORKe8yGiOfvN k5gBP+iB8Ev/EimKMtVRarFotwQ6/K2/Ja3TMNCvE8POHlCNIYVOmgDgV0+RXjSl nM9A5f6We+V//6tibKW+sFKr4ncvasVXprKfSKJJd3oFI8SJz0D2RGUuxraVZl0H i+CeOzN01AbMetK16WmOB3L8T61S3vSCtIax8dlMbLE8krVwPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJCH1RV6LeVtONn9ShXshCi/bx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc2ODYyYmMtOTllNi0z ZjE2LWE4OGQtNmIwNzI5M2EwOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhfYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy2ZsiRcjObyzwq7uK+CCOn8es2brqzSVkho8VIcq1ZYQppoi7ubUl6 udoKzGEUJYY/3T2XNNg0M6vd8rEY/GF7VPtPQdAyXhdcgHGOh6618Q6IvapzkkQe CtvNrEewWIX3tOfdGfI+5ecarG5k5fBlCpAP851TxW6sFdfRlhRDf9hSAKr/duof wr/mr/9J/vfdEi7VM7kzYyKlXgHSOJ+UGlayiKdCvFrI/l7nBd0LEQZUSPup9hR6 g1she76I+jYQudiJtp9KN7YCcmFwAaCxX1n8TscvqG0KVpYcUEo02A3Kjy7x/1m7 LEF5YuLNP2aEJvx0p4k3DI1SRIwQRlU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:56:02 2025 by rpki-client