$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa File: baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa (raw, json) Hash identifier: SwMh8sKTnaO+WwTSt1Finj7C3z2AtkADZWMbkcNYDzM= Subject key identifier: 9E:B2:AF:22:34:6C:11:0F:42:0F:28:38:45:5D:23:ED:AD:63:77:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DF258C9CC2FB29181170DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa Signing time: Thu 13 Feb 2025 18:27:48 +0000 ROA not before: Thu 13 Feb 2025 18:27:48 +0000 ROA not after: Wed 14 May 2025 17:27:48 +0000 asID: 7029 IP address blocks: 98.17.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:25:8c:9c:c2:fb:29:18:11:70:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 13 18:27:48 2025 GMT Not After : May 14 17:27:48 2025 GMT Subject: CN=8e5b0ee0-83aa-4434-ac80-8191605eb58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:71:79:7a:eb:bd:12:03:eb:c2:86:5e:d4:5b: 76:7a:06:75:9b:54:ea:69:45:8b:dc:70:4c:82:b4: b5:27:a1:c2:f6:5d:01:c9:65:9f:70:25:c4:1a:18: 08:2e:39:13:1a:36:22:39:76:18:be:2e:53:fc:93: cf:89:d7:db:1b:b4:0d:4d:cc:04:36:cc:a5:fc:27: bb:34:6c:8b:96:6b:53:d8:b5:7b:d8:fb:be:b3:b2: 6a:b7:cb:0c:08:d6:b9:b9:4c:a5:d6:79:48:b8:7a: 0e:b2:49:57:c1:21:27:27:bc:7e:24:c3:16:f4:a5: d4:5c:7c:6f:9e:1a:55:0e:bd:c5:af:d1:b2:ce:83: 4f:85:f0:9c:53:61:35:70:e9:25:0a:31:f7:fa:aa: 57:2e:8f:dc:cb:c1:7c:8b:b1:d9:b9:aa:c4:0c:32: bb:63:4e:b1:a7:87:8d:c2:a9:31:d7:7b:08:44:31: bd:67:ff:e2:cd:49:f8:92:1c:73:b9:36:76:f1:9f: 19:ec:ff:e7:66:97:ba:92:1a:60:65:55:a3:e1:0d: 66:0b:2f:57:c2:cd:7e:37:32:e7:fe:90:ed:41:31: a3:a8:e5:46:26:df:53:4c:77:c4:fc:b0:aa:ef:b3: b3:6b:d1:39:47:31:60:96:02:09:ea:be:4b:2d:e9: 3f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:AF:22:34:6C:11:0F:42:0F:28:38:45:5D:23:ED:AD:63:77:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/baed1b7e-1e45-3e0a-95c0-37feb57a0000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:fb:af:af:49:47:27:f3:b6:29:94:8b:5a:97:96:a3:af:22: 85:1a:6b:75:36:8c:04:16:f6:5b:6b:1e:cf:5e:5b:d9:82:70: a7:38:6a:a0:85:7d:48:f9:80:e7:24:f6:7b:f7:b8:6e:7c:cd: 32:23:dc:eb:86:42:d7:57:88:7d:5a:72:fc:11:21:69:64:00: 0e:33:79:aa:11:5e:49:ff:5b:a1:de:4e:52:8d:03:a0:f5:c1: 7f:94:af:0b:7b:9a:1e:b8:26:79:8f:96:32:70:1e:3b:94:7e: d9:54:e0:3f:4f:2d:7b:6d:f9:90:43:4e:82:06:3c:ce:4b:98: ba:e5:c6:29:f9:44:ee:a6:7f:dd:66:74:71:d3:a6:5a:0f:b1: 1a:37:36:63:94:7d:24:17:2e:28:2e:d1:0b:6c:3a:47:59:c0: 84:50:e2:e4:2e:9b:a7:14:e2:6d:67:c6:01:64:82:b0:47:cb: 7e:5a:af:b9:f0:f8:26:45:ac:a4:40:fb:86:e4:ef:9c:e1:31: 9a:0f:4d:95:41:71:dc:ed:12:32:cf:87:91:15:69:13:f5:5e: b7:9c:61:78:20:7b:64:af:19:0c:83:f2:64:dc:bd:2e:56:a1: 5e:35:05:d1:a6:f8:f3:2f:82:ac:b0:4c:0e:55:b0:9c:bf:36: 32:0c:16:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfJYycwvspGBFw2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMzE4Mjc0OFoXDTI1MDUxNDE3Mjc0OFowLzEtMCsGA1UEAxMk OGU1YjBlZTAtODNhYS00NDM0LWFjODAtODE5MTYwNWViNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynF5euu9EgPrwoZe1Ft2egZ1m1TqaUWL3HBM grS1J6HC9l0ByWWfcCXEGhgILjkTGjYiOXYYvi5T/JPPidfbG7QNTcwENsyl/Ce7 NGyLlmtT2LV72Pu+s7Jqt8sMCNa5uUyl1nlIuHoOsklXwSEnJ7x+JMMW9KXUXHxv nhpVDr3Fr9GyzoNPhfCcU2E1cOklCjH3+qpXLo/cy8F8i7HZuarEDDK7Y06xp4eN wqkx13sIRDG9Z//izUn4khxzuTZ28Z8Z7P/nZpe6khpgZVWj4Q1mCy9Xws1+NzLn /pDtQTGjqOVGJt9TTHfE/LCq77Oza9E5RzFglgIJ6r5LLek/QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6yryI0bBEPQg8oOEVdI+2tY3cQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmFlZDFiN2UtMWU0NS0z ZTBhLTk1YzAtMzdmZWI1N2EwMDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhHoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT7r69JRyfztimUi1qXlqOvIoUaa3U2jAQW9ltrHs9eW9mCcKc4aqCF fUj5gOck9nv3uG58zTIj3OuGQtdXiH1acvwRIWlkAA4zeaoRXkn/W6HeTlKNA6D1 wX+Urwt7mh64JnmPljJwHjuUftlU4D9PLXtt+ZBDToIGPM5LmLrlxin5RO6mf91m dHHTploPsRo3NmOUfSQXLigu0QtsOkdZwIRQ4uQum6cU4m1nxgFkgrBHy35ar7nw +CZFrKRA+4bk75zhMZoPTZVBcdztEjLPh5EVaRP1XrecYXgge2SvGQyD8mTcvS5W oV41BdGm+PMvgqywTA5VsJy/NjIMFqY= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:14 2025 by rpki-client