$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd766fd5-a818-3907-934f-15bdf11cd3a0.roa File: bd766fd5-a818-3907-934f-15bdf11cd3a0.roa (raw, json) Hash identifier: UUyJw3WisovwikbpAq1zYP8Utt12N/Tn6wlbhU1Ei9M= Subject key identifier: B1:79:4D:D0:8A:E2:85:EA:D3:C0:62:84:87:3B:A8:B2:67:C9:CA:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E006863BF8A99C40C0BA5080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd766fd5-a818-3907-934f-15bdf11cd3a0.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.21.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:86:3b:f8:a9:9c:40:c0:ba:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=856ef3de-ce4f-4085-a462-0cc6ca69d78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0e:ce:d4:60:db:d4:fb:36:ce:69:2a:8d:02: 97:78:82:b2:a1:fc:d8:3a:df:9a:ac:ce:de:e5:21: 5b:bf:17:0a:13:4c:da:4c:6b:20:cf:3e:5f:16:89: a0:03:e3:39:87:04:4c:77:00:c5:1f:81:4b:ae:cb: 71:5e:92:43:a0:0d:b2:90:80:03:b3:5f:60:b4:ab: c3:57:f2:92:50:cd:c0:bf:5c:7c:d4:d4:63:86:3a: 07:05:41:8b:6d:0d:9b:1f:45:58:4b:b1:6a:3a:80: d6:14:ac:a7:be:c4:96:ec:64:d7:a6:a1:45:68:46: ae:bd:5b:73:d2:11:a8:58:22:e3:7b:7c:6b:5e:0e: 06:06:c3:ea:be:d9:cf:ca:7f:73:2a:cc:8a:a5:3c: 54:25:4e:26:0a:f1:fe:5b:27:1a:98:7b:2d:bc:58: 5f:56:30:37:f8:9b:dd:5c:48:52:89:2a:b7:eb:64: 73:c1:f5:0c:5d:a8:26:7b:68:4c:f6:96:ce:f3:9c: c0:c4:d6:85:1d:7a:11:d4:4f:8b:10:0a:1c:13:c5: 27:54:f2:a1:25:fd:5c:47:3e:66:ff:be:97:de:39: 81:88:d2:f5:95:2e:06:4d:c5:36:58:47:d1:06:83: 49:99:2e:12:22:6a:5d:9b:e3:ec:e8:0e:34:1b:a3: 86:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:79:4D:D0:8A:E2:85:EA:D3:C0:62:84:87:3B:A8:B2:67:C9:CA:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bd766fd5-a818-3907-934f-15bdf11cd3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.21.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bd:33:e6:43:2c:20:19:d3:69:4d:a7:7a:7b:38:ed:04:b6: 73:fe:68:71:eb:c5:ed:36:9c:2b:78:e2:58:d4:e8:66:9e:e4: 64:f3:3a:99:ac:7b:a9:fb:f9:4f:a6:b5:c0:66:7b:b2:ae:8a: a7:9a:fb:2d:bb:34:e0:b5:00:1e:03:96:20:40:c7:1b:37:e5: 89:9d:af:f2:b6:6c:dd:c0:ab:fa:9f:e5:4a:72:63:44:30:6f: 49:9b:7c:15:9b:e2:af:a7:91:8b:70:bc:ea:81:eb:11:b9:ac: 58:10:9b:7d:5f:d2:40:89:a7:b7:5d:2d:e7:1c:8a:10:3d:18: 6c:0e:68:ec:33:ae:db:21:9c:5b:90:2e:30:f1:98:be:1d:69: fa:5b:2d:1e:80:9e:60:ce:1e:22:16:96:86:39:a1:e4:fe:9d: d4:dc:27:77:a4:e0:08:60:aa:05:45:d1:a0:56:d8:aa:9e:89: 25:4d:16:9e:97:b3:cb:55:02:24:83:cc:3a:fb:8b:e9:1f:1f: ac:d4:1b:8a:a4:0c:76:11:ee:67:ce:64:af:bf:6e:43:ab:4d: 46:9c:65:0d:9b:df:2e:ea:8b:27:cd:20:23:c3:63:15:e6:5c: 9e:b6:b3:28:6b:52:9e:a4:2a:16:e4:f2:7c:aa:99:ce:c6:9d: e0:69:52:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBoY7+KmcQMC6UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ODU2ZWYzZGUtY2U0Zi00MDg1LWE0NjItMGNjNmNhNjlkNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g7O1GDb1Ps2zmkqjQKXeIKyofzYOt+arM7e 5SFbvxcKE0zaTGsgzz5fFomgA+M5hwRMdwDFH4FLrstxXpJDoA2ykIADs19gtKvD V/KSUM3Av1x81NRjhjoHBUGLbQ2bH0VYS7FqOoDWFKynvsSW7GTXpqFFaEauvVtz 0hGoWCLje3xrXg4GBsPqvtnPyn9zKsyKpTxUJU4mCvH+WycamHstvFhfVjA3+Jvd XEhSiSq362RzwfUMXagme2hM9pbO85zAxNaFHXoR1E+LEAocE8UnVPKhJf1cRz5m /76X3jmBiNL1lS4GTcU2WEfRBoNJmS4SImpdm+Ps6A40G6OGYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLF5TdCK4oXq08BihIc7qLJnycpwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmQ3NjZmZDUtYTgxOC0z OTA3LTkzNGYtMTViZGYxMWNkM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG9M+ZDLCAZ02lNp3p7OO0EtnP+aHHrxe02nCt44ljU6Gae5GTzOpms e6n7+U+mtcBme7Kuiqea+y27NOC1AB4DliBAxxs35Ymdr/K2bN3Aq/qf5UpyY0Qw b0mbfBWb4q+nkYtwvOqB6xG5rFgQm31f0kCJp7ddLeccihA9GGwOaOwzrtshnFuQ LjDxmL4dafpbLR6AnmDOHiIWloY5oeT+ndTcJ3ek4AhgqgVF0aBW2KqeiSVNFp6X s8tVAiSDzDr7i+kfH6zUG4qkDHYR7mfOZK+/bkOrTUacZQ2b3y7qiyfNICPDYxXm XJ62syhrUp6kKhbk8nyqmc7GneBpUqM= -----END CERTIFICATE-----Generated at Fri Mar 14 09:28:45 2025 by rpki-client