$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9bd48eb-7f66-3ed2-ac4f-c2707c8dd682.roa File: c9bd48eb-7f66-3ed2-ac4f-c2707c8dd682.roa (raw, json) Hash identifier: tBVc0LO/3I1wWvN2uioLGf4c+pt17PyWmTyjiCAr/LU= Subject key identifier: B2:09:3F:95:66:64:A0:BC:09:0E:4D:27:FB:1E:DE:0F:3D:28:B7:46 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716BF2C81F5581DE4EDB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9bd48eb-7f66-3ed2-ac4f-c2707c8dd682.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.16.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6b:f2:c8:1f:55:81:de:4e:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=98ef2be7-e76c-4817-b384-66ab6a5f11fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:60:55:55:54:f5:86:43:9a:1a:4a:0b:b0:da: 5e:bd:84:76:20:f4:18:79:2e:a9:d7:79:56:19:1f: 06:e3:9f:a4:07:54:53:db:fc:7a:74:8b:cd:7e:27: 5c:cd:e1:f7:de:0a:3c:29:06:2d:5c:e4:15:ab:3f: 51:1f:49:3e:c7:38:ba:6f:e6:b0:da:ab:82:08:df: 29:14:76:76:ea:7a:3f:f5:31:32:d5:15:1e:94:6e: d0:7d:dd:bf:e9:9a:9c:60:8f:dc:df:3b:9f:00:95: f1:38:07:ee:61:37:25:ac:89:c6:cf:16:85:76:d1: 9a:de:06:d3:7b:34:7d:e3:03:7d:80:dd:fb:00:73: 4b:d9:4d:58:2c:19:ce:17:89:88:70:09:60:b9:b8: 52:bf:cd:c8:08:3a:7e:e2:79:9b:47:5a:4b:1f:93: 1b:5d:05:f5:11:11:17:ad:f5:6e:1d:e1:3c:0d:79: 50:7b:39:25:3f:d3:24:5a:74:f8:44:da:8a:08:a6: 78:b8:50:9f:c4:d9:e2:be:55:86:40:f6:ad:1e:fc: 55:54:45:3c:9f:20:3a:b5:43:34:20:b8:45:6c:7c: 03:da:00:b5:ba:8a:be:5b:2f:20:8b:f7:87:ea:fd: b6:8c:1e:a3:b1:f6:35:f2:69:2c:67:a0:3f:ca:e5: 06:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:09:3F:95:66:64:A0:BC:09:0E:4D:27:FB:1E:DE:0F:3D:28:B7:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9bd48eb-7f66-3ed2-ac4f-c2707c8dd682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:38:c1:31:32:01:cb:19:c8:ff:db:aa:83:a1:38:33:11:e7: 92:56:8e:4e:7b:f4:83:52:f7:40:65:7f:e9:b1:99:c2:c8:68: f1:e4:4b:5f:a7:60:4b:1a:94:1b:d7:9f:20:5a:98:8b:aa:9b: 20:db:5c:92:18:c6:8c:7f:30:95:84:53:0f:83:e8:de:87:24: 32:60:6e:3f:17:a8:16:b7:03:6e:30:28:91:6f:6a:42:29:c1: 54:6a:c0:f7:6f:6b:53:27:a5:20:dd:6b:f5:87:ce:5c:85:b8: d1:17:3e:90:a4:54:c6:a2:90:06:27:b9:d3:eb:fd:6a:b2:8e: ac:af:91:c8:4f:dc:f4:82:a0:af:7b:79:66:6f:97:7a:8a:ec: ad:ad:80:72:66:27:47:06:83:44:33:05:63:4d:02:0c:ea:dc: 65:4e:89:7a:cd:22:59:c4:6c:be:5c:a4:6a:b2:8d:f5:0f:c6: 1f:da:d1:02:aa:87:7c:f2:68:bb:ce:08:9a:36:f4:52:b8:85: f3:4d:bf:be:ce:c6:5e:3e:20:6d:20:13:a7:c4:f9:74:e6:ee: 98:9a:72:4b:43:4c:77:f2:c3:85:0e:13:49:0f:98:0a:e6:1e: 55:42:74:d6:ed:08:0f:46:f9:8b:ba:85:51:fd:8b:1c:bd:84: c4:d9:d1:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWvyyB9Vgd5O2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OThlZjJiZTctZTc2Yy00ODE3LWIzODQtNjZhYjZhNWYxMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWBVVVT1hkOaGkoLsNpevYR2IPQYeS6p13lW GR8G45+kB1RT2/x6dIvNfidczeH33go8KQYtXOQVqz9RH0k+xzi6b+aw2quCCN8p FHZ26no/9TEy1RUelG7Qfd2/6ZqcYI/c3zufAJXxOAfuYTclrInGzxaFdtGa3gbT ezR94wN9gN37AHNL2U1YLBnOF4mIcAlgubhSv83ICDp+4nmbR1pLH5MbXQX1EREX rfVuHeE8DXlQezklP9MkWnT4RNqKCKZ4uFCfxNnivlWGQPatHvxVVEU8nyA6tUM0 ILhFbHwD2gC1uoq+Wy8gi/eH6v22jB6jsfY18mksZ6A/yuUGjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIJP5VmZKC8CQ5NJ/se3g89KLdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzliZDQ4ZWItN2Y2Ni0z ZWQyLWFjNGYtYzI3MDdjOGRkNjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABA4wTEyAcsZyP/bqoOhODMR55JWjk579INS90Blf+mxmcLIaPHkS1+n YEsalBvXnyBamIuqmyDbXJIYxox/MJWEUw+D6N6HJDJgbj8XqBa3A24wKJFvakIp wVRqwPdva1MnpSDda/WHzlyFuNEXPpCkVMaikAYnudPr/WqyjqyvkchP3PSCoK97 eWZvl3qK7K2tgHJmJ0cGg0QzBWNNAgzq3GVOiXrNIlnEbL5cpGqyjfUPxh/a0QKq h3zyaLvOCJo29FK4hfNNv77Oxl4+IG0gE6fE+XTm7piacktDTHfyw4UOE0kPmArm HlVCdNbtCA9G+Yu6hVH9ixy9hMTZ0bY= -----END CERTIFICATE-----Generated at Sat Apr 5 20:37:18 2025 by rpki-client