$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa File: a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa (raw, json) Hash identifier: p3WEEi4JkUsgRtiOVXrWF+AI2QE5jaYnvWTFZF+Vao0= Subject key identifier: 4C:76:19:EF:3F:0C:2E:D7:E5:7A:81:96:48:22:3A:E5:F3:09:D7:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11ADBC1DD8C93A1CB1B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.19.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1a:db:c1:dd:8c:93:a1:cb:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=8ad62e1a-f91d-4320-af52-11e7422967cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0d:2b:88:38:85:6f:0a:9c:12:92:36:f8:e2: 13:9f:9d:05:00:26:2a:23:95:98:de:f3:38:87:c3: 39:7b:c7:bd:80:da:ae:13:95:88:75:c1:27:ea:df: fe:b8:41:66:39:71:74:6c:bd:49:85:84:71:d8:12: c1:14:be:ff:be:c5:db:01:a7:2e:e7:cd:eb:f5:06: 12:93:d9:f0:61:10:dc:e2:15:43:77:b6:df:b0:f2: 47:c3:01:ce:2b:04:87:1f:72:45:27:4b:68:3d:ba: 7e:ca:b3:f1:fa:9e:f9:93:24:9b:60:34:c1:d0:94: 7f:8c:5e:53:7b:bc:05:73:e5:e9:6e:92:79:e0:47: 74:28:43:27:70:d7:4f:ae:aa:9d:62:53:da:16:44: e6:64:93:e3:4f:0b:5f:27:4c:be:1b:55:7f:40:63: 7c:1a:af:73:93:ab:4f:ea:6f:49:10:27:35:ce:b5: d5:51:1c:97:a0:47:8d:bc:8e:33:2a:4f:13:cf:8e: 44:4e:a8:90:a2:e3:59:36:a7:83:00:18:8c:01:06: c4:de:8b:38:a7:0b:ac:c2:3c:8f:8f:ef:30:bc:58: 62:79:3c:a1:14:10:27:5d:7e:9e:3f:9a:ab:a5:dd: ae:c8:01:e0:ea:e8:b8:34:49:b5:2a:b3:17:23:54: 3f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:76:19:EF:3F:0C:2E:D7:E5:7A:81:96:48:22:3A:E5:F3:09:D7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a8f97805-f32a-39ec-a0bf-8b961c9dd287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.19.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:85:df:c2:bd:b1:67:3b:61:9f:85:b4:54:50:2d:b7:08:f1: 7d:c3:37:26:c1:82:86:b9:06:5d:2e:f3:ed:d5:e5:ad:9c:ac: 3e:bc:00:b7:02:ff:dc:e6:3b:28:57:99:2e:c2:c5:7f:39:b0: 80:85:72:62:ae:8e:05:88:04:76:10:e2:42:e1:eb:38:2e:1d: 8c:4c:1c:bf:57:58:4e:dd:cc:0a:bd:c0:96:b7:6f:62:da:4a: 57:f5:e2:c1:15:60:2e:0c:de:21:7a:4c:bb:5c:11:99:e6:ab: cb:7e:07:40:dd:1b:0e:4e:b3:76:ba:b0:8d:81:0e:cb:b8:bc: 33:1e:6b:3e:b0:c4:af:45:fe:bc:c3:e2:3d:00:77:27:69:54: 07:e2:1a:c8:3e:17:c1:a6:31:1f:52:eb:48:c0:63:42:76:0c: 45:22:26:3d:ca:00:1b:10:06:79:c7:fb:0c:9f:b8:51:45:7b: e3:52:c9:f4:23:15:3d:ec:7b:7c:a2:21:56:7b:c5:27:47:92: 92:f3:18:a2:ea:50:b9:bd:4c:3d:e7:1d:23:4e:22:da:75:33: c2:f2:f9:48:a5:d4:5d:af:41:54:3a:bc:28:ce:49:a9:2b:82: 96:0f:7f:62:07:2b:68:ee:e2:4d:62:45:ba:5c:20:23:b3:a0: a8:8a:81:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rrbwd2Mk6HLGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OGFkNjJlMWEtZjkxZC00MzIwLWFmNTItMTFlNzQyMjk2N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug0riDiFbwqcEpI2+OITn50FACYqI5WY3vM4 h8M5e8e9gNquE5WIdcEn6t/+uEFmOXF0bL1JhYRx2BLBFL7/vsXbAacu583r9QYS k9nwYRDc4hVDd7bfsPJHwwHOKwSHH3JFJ0toPbp+yrPx+p75kySbYDTB0JR/jF5T e7wFc+XpbpJ54Ed0KEMncNdPrqqdYlPaFkTmZJPjTwtfJ0y+G1V/QGN8Gq9zk6tP 6m9JECc1zrXVURyXoEeNvI4zKk8Tz45ETqiQouNZNqeDABiMAQbE3os4pwuswjyP j+8wvFhieTyhFBAnXX6eP5qrpd2uyAHg6ui4NEm1KrMXI1Q//wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEx2Ge8/DC7X5XqBlkgiOuXzCdffMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYThmOTc4MDUtZjMyYS0z OWVjLWEwYmYtOGI5NjFjOWRkMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSF38K9sWc7YZ+FtFRQLbcI8X3DNybBgoa5Bl0u8+3V5a2crD68ALcC /9zmOyhXmS7CxX85sICFcmKujgWIBHYQ4kLh6zguHYxMHL9XWE7dzAq9wJa3b2La Slf14sEVYC4M3iF6TLtcEZnmq8t+B0DdGw5Os3a6sI2BDsu4vDMeaz6wxK9F/rzD 4j0AdydpVAfiGsg+F8GmMR9S60jAY0J2DEUiJj3KABsQBnnH+wyfuFFFe+NSyfQj FT3se3yiIVZ7xSdHkpLzGKLqULm9TD3nHSNOItp1M8Ly+Uil1F2vQVQ6vCjOSakr gpYPf2IHK2ju4k1iRbpcICOzoKiKgdQ= -----END CERTIFICATE-----Generated at Fri Mar 14 13:17:02 2025 by rpki-client