$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa File: b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa (raw, json) Hash identifier: DpsTr6XekxcLS/mFMysENLV1qJRriQRHyNQnOBMRTSg= Subject key identifier: 88:48:62:A6:D5:31:BB:48:F6:81:8B:35:41:95:0D:76:D7:14:35:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858490F7BF3CD35D31799B17F0580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.20.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:f3:cd:35:d3:17:99:b1:7f:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=86dfc61c-8502-445a-b045-50376801f1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5f:55:88:77:7b:3e:d0:27:11:12:81:16:f3: 64:bd:98:9a:c7:dd:eb:c6:ee:d9:49:06:90:97:29: ce:07:4c:de:72:f6:48:b9:18:9f:9c:b8:45:ef:e5: 5b:14:e4:f3:7a:99:d4:17:47:ec:95:f4:ca:45:1d: 16:88:17:66:fa:6b:21:67:1c:17:6a:c6:b4:05:53: 8f:33:b4:0b:98:f4:d7:f7:ae:c4:b4:44:d4:de:63: 9d:95:4e:e2:1e:70:e3:6b:c1:51:ce:10:0d:75:2f: 0d:32:00:c1:40:f4:cd:36:d4:6f:e4:db:fa:4c:2e: aa:01:a1:88:12:19:ff:61:01:76:41:46:fc:97:58: 40:25:5b:33:6f:3b:75:ed:3b:35:90:4f:68:5f:d1: b9:28:aa:d0:00:0c:91:96:ac:ac:9d:68:33:32:85: d0:df:ac:22:5f:d5:f6:e1:ca:5e:4d:ee:43:2d:05: 04:d8:bb:5b:a2:be:31:7f:47:e2:5a:b9:bc:96:e3: 3f:8a:e1:a4:5b:10:61:d0:c5:20:ce:a1:47:88:c0: 2e:12:d8:4e:4c:32:91:34:11:ab:1e:5b:a5:3d:39: cb:0b:79:82:45:e5:ba:d8:61:d2:5a:30:60:a1:33: 1a:af:da:e0:79:6a:59:00:17:e5:21:a3:ed:9c:d1: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:48:62:A6:D5:31:BB:48:F6:81:8B:35:41:95:0D:76:D7:14:35:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7912e51-6fa9-3e44-9e6c-13ba9c3076bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:6b:c6:ea:e6:9a:4d:d0:11:a4:a1:e7:64:d0:49:5f:c0:ca: 1a:8f:eb:97:c4:b0:7b:eb:78:2c:c4:52:ec:7b:e5:ae:e0:76: 72:91:da:44:28:6e:7b:5f:bf:01:aa:13:17:b2:fd:87:54:0d: ed:d2:d6:36:52:ea:40:b7:53:d6:29:c1:a9:c1:77:0c:13:7b: 47:09:64:fe:ab:f8:2a:f2:f1:3a:b5:2b:b4:08:9a:fc:14:89: b3:ac:03:fc:4b:73:72:67:a3:fa:4a:5f:16:14:b7:94:53:e1: 7b:bf:4d:54:e7:93:09:d4:e3:62:58:d9:1f:94:58:65:28:ea: 2a:32:bb:3b:0e:b8:f5:72:0d:9c:15:8a:11:65:82:da:e5:50: e4:b0:b6:38:40:6d:fe:a9:e8:51:40:f6:c9:ac:8d:ab:f5:34: ab:95:6c:1c:7a:41:15:08:7b:13:8e:38:68:e5:6d:bc:9a:b0: 55:1f:fb:9d:e9:e8:6e:fb:7e:f7:69:3b:9e:0c:0b:34:25:77: e0:2a:dd:d8:65:d3:5e:92:9c:52:06:3e:f9:8d:64:3a:f3:99: d3:2d:b1:38:a6:b7:f0:66:b8:e5:ac:2b:35:ca:62:1c:41:a6: cd:6a:58:ad:81:13:83:0c:c8:1b:f7:b5:bb:0b:09:6d:8d:63: 96:2f:f0:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/PNNdMXmbF/BYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk ODZkZmM2MWMtODUwMi00NDVhLWIwNDUtNTAzNzY4MDFmMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh19ViHd7PtAnERKBFvNkvZiax93rxu7ZSQaQ lynOB0zecvZIuRifnLhF7+VbFOTzepnUF0fslfTKRR0WiBdm+mshZxwXasa0BVOP M7QLmPTX967EtETU3mOdlU7iHnDja8FRzhANdS8NMgDBQPTNNtRv5Nv6TC6qAaGI Ehn/YQF2QUb8l1hAJVszbzt17Ts1kE9oX9G5KKrQAAyRlqysnWgzMoXQ36wiX9X2 4cpeTe5DLQUE2Ltbor4xf0fiWrm8luM/iuGkWxBh0MUgzqFHiMAuEthOTDKRNBGr HlulPTnLC3mCReW62GHSWjBgoTMar9rgeWpZABflIaPtnNHNcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhIYqbVMbtI9oGLNUGVDXbXFDX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc5MTJlNTEtNmZhOS0z ZTQ0LTllNmMtMTNiYTljMzA3NmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhT3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5rxurmmk3QEaSh52TQSV/AyhqP65fEsHvreCzEUux75a7gdnKR2kQo bntfvwGqExey/YdUDe3S1jZS6kC3U9YpwanBdwwTe0cJZP6r+Cry8Tq1K7QImvwU ibOsA/xLc3Jno/pKXxYUt5RT4Xu/TVTnkwnU42JY2R+UWGUo6ioyuzsOuPVyDZwV ihFlgtrlUOSwtjhAbf6p6FFA9smsjav1NKuVbBx6QRUIexOOOGjlbbyasFUf+53p 6G77fvdpO54MCzQld+Aq3dhl016SnFIGPvmNZDrzmdMtsTimt/BmuOWsKzXKYhxB ps1qWK2BE4MMyBv3tbsLCW2NY5Yv8Dc= -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:51 2025 by rpki-client