$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa File: a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa (raw, json) Hash identifier: /lSqRvw6slnGTQ5hMmeNY1lOTcSbaCdug7sn58ymhiA= Subject key identifier: 88:F4:9F:A8:9F:D3:53:59:06:EE:7F:7A:CF:5B:13:64:BB:D1:6B:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE119452A7802D67D5A62A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.16.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:19:45:2a:78:02:d6:7d:5a:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=e1a41de9-f35d-4c40-a93c-ff54ae71c340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:17:bf:b7:78:e9:a4:5a:03:fc:b3:25:e3:93: ec:65:89:cf:ab:62:94:ca:26:2e:9f:dd:a9:8d:af: 08:36:71:6b:41:38:2a:14:cb:fd:70:09:ae:c5:5e: 76:39:a4:b4:45:f8:9d:8e:c5:ca:6b:bf:2a:6f:ce: f9:ad:b1:b9:aa:24:ca:8d:95:f0:61:f2:57:f6:d5: 45:13:74:f6:35:d4:09:d1:ca:03:68:fa:3d:82:80: ee:05:fb:67:6f:5a:43:9a:a5:07:65:6d:27:61:c2: 0f:e0:69:2b:a1:4f:64:ec:7a:7f:bf:c2:61:30:1a: 1d:01:23:b4:25:a4:2f:35:b3:6b:c2:3f:6c:c7:23: 6d:a7:f0:10:6b:6a:db:9d:5e:92:af:b7:f9:07:a7: d6:6b:5e:a4:50:1b:d5:20:7b:ce:84:ee:02:43:1e: f0:81:ad:51:af:37:2d:39:d2:ef:bd:c9:c9:3e:af: 80:19:b8:6d:db:5c:f8:2e:5e:05:e5:e9:33:3b:1c: 44:51:36:26:1d:36:27:41:62:ab:6e:ca:42:76:e9: de:f5:72:41:dc:87:82:16:5f:28:68:2f:3b:86:1b: 57:4a:d2:f3:8a:e2:0e:6d:c8:a1:f3:0b:67:ea:39: cf:ef:43:66:4f:9a:cf:47:5a:69:34:4b:d7:91:e7: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F4:9F:A8:9F:D3:53:59:06:EE:7F:7A:CF:5B:13:64:BB:D1:6B:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a7c15379-9d7e-300d-a34d-48d0b1e884d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c8:31:25:10:9f:ff:e2:07:16:11:3a:10:26:c3:78:a8:46: 2b:b9:e6:4f:70:e5:6d:d2:e0:87:ba:55:1c:78:1f:e2:b5:35: 5c:33:73:2d:c4:52:d0:97:ae:b8:6d:ba:ab:fb:16:81:43:a7: dd:f7:31:cc:73:fc:7e:0c:4f:52:bc:2e:e4:cc:91:7d:5b:98: 88:62:06:36:35:5d:90:8d:74:62:47:f8:4a:8d:82:04:4c:e7: c6:15:7b:0d:94:3e:e5:22:db:04:94:c7:5c:98:77:1e:b3:35: 4d:18:8f:28:c0:e7:08:41:a7:bf:26:4c:e7:b6:bd:e6:5e:8b: d3:b8:1d:dc:25:62:72:ad:18:9c:4b:9d:76:40:02:f4:f4:4c: 36:4e:ba:6a:eb:4e:cc:e3:23:c7:72:ed:3a:cf:a6:95:75:5f: 2d:f3:f6:36:da:80:20:56:e6:63:e2:6a:21:de:ed:6e:20:05: 31:bd:e2:c5:e7:8d:47:20:7f:cb:f6:4a:3a:cf:f9:a0:da:1f: 32:98:98:3e:f1:03:86:a0:62:fc:59:17:39:0b:10:48:fc:f2: fa:a0:9d:40:b6:6d:27:90:75:c5:d2:51:19:2a:7c:fd:13:ab: 5f:50:ae:47:a6:5c:17:d9:b4:aa:3f:ce:6b:c9:70:16:11:ce: 7d:45:f6:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RlFKngC1n1aYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZTFhNDFkZTktZjM1ZC00YzQwLWE5M2MtZmY1NGFlNzFjMzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBe/t3jppFoD/LMl45PsZYnPq2KUyiYun92p ja8INnFrQTgqFMv9cAmuxV52OaS0RfidjsXKa78qb875rbG5qiTKjZXwYfJX9tVF E3T2NdQJ0coDaPo9goDuBftnb1pDmqUHZW0nYcIP4GkroU9k7Hp/v8JhMBodASO0 JaQvNbNrwj9sxyNtp/AQa2rbnV6Sr7f5B6fWa16kUBvVIHvOhO4CQx7wga1Rrzct OdLvvcnJPq+AGbht21z4Ll4F5ekzOxxEUTYmHTYnQWKrbspCdune9XJB3IeCFl8o aC87hhtXStLziuIObcih8wtn6jnP70NmT5rPR1ppNEvXkec6wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj0n6if01NZBu5/es9bE2S70Wu+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTdjMTUzNzktOWQ3ZS0z MDBkLWEzNGQtNDhkMGIxZTg4NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfIMSUQn//iBxYROhAmw3ioRiu55k9w5W3S4Ie6VRx4H+K1NVwzcy3E UtCXrrhtuqv7FoFDp933Mcxz/H4MT1K8LuTMkX1bmIhiBjY1XZCNdGJH+EqNggRM 58YVew2UPuUi2wSUx1yYdx6zNU0YjyjA5whBp78mTOe2veZei9O4HdwlYnKtGJxL nXZAAvT0TDZOumrrTszjI8dy7TrPppV1Xy3z9jbagCBW5mPiaiHe7W4gBTG94sXn jUcgf8v2SjrP+aDaHzKYmD7xA4agYvxZFzkLEEj88vqgnUC2bSeQdcXSURkqfP0T q19QrkemXBfZtKo/zmvJcBYRzn1F9sA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:18 2025 by rpki-client