$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa File: c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa (raw, json) Hash identifier: apc8EYs7ozb5RTpzmGUThNQ8SlcDOwu9lH0K4yVIPq4= Subject key identifier: 62:B7:8C:04:90:8E:3C:1D:AD:71:D6:62:58:59:BB:FD:09:AE:E2:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B4F98BB67D884E60AE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 98.22.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b4:f9:8b:b6:7d:88:4e:60:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=4bf74462-44b2-4db8-ad63-d6f59d78cea9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:30:8f:64:b8:e6:05:74:87:4a:0a:d4:a6: fe:fa:3f:14:1b:06:9a:ad:7a:4c:dd:cd:c9:82:3c: 7a:a0:d1:e0:2b:51:73:f8:0a:34:72:30:5b:05:ca: 2e:d7:a3:94:00:13:c1:9b:5d:9d:d7:a6:f5:88:be: d9:23:2d:4d:00:e0:70:2e:28:10:33:b0:46:1c:18: cf:f8:5b:91:80:e2:c8:65:df:4a:62:d6:a6:d9:14: a6:e9:12:a1:ec:de:5e:c2:cf:19:19:9f:1e:ed:fe: 3a:e8:ee:4b:05:df:e3:e0:f9:80:39:df:16:96:39: 85:9f:99:d8:c3:bd:68:e1:34:72:41:83:de:10:36: 05:c1:0e:0d:ef:b4:8f:58:f3:85:30:2f:9a:e5:25: f6:d4:f1:e0:16:8b:b9:91:eb:ff:47:90:bf:51:5e: 5b:46:3b:35:d3:ae:da:63:4c:33:c1:af:00:d3:04: c6:f2:3d:2b:de:21:f6:64:a2:78:7a:c0:e7:13:56: 7a:42:b4:52:72:cf:1e:f8:59:38:b6:ed:92:8a:5c: c9:f5:16:0a:c1:e0:e6:29:d2:5d:ef:77:45:43:c4: 9d:9c:21:26:ae:7c:ea:65:ed:21:1c:17:18:72:e6: 75:7c:50:34:ec:0a:e2:75:89:f6:3f:29:4c:3f:ca: 10:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B7:8C:04:90:8E:3C:1D:AD:71:D6:62:58:59:BB:FD:09:AE:E2:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c9c3041f-b4e0-3598-88e8-6aa0bf744382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:f7:96:a8:05:94:4a:38:0b:4e:f5:16:f6:4e:4c:96:86:c4: a2:d1:05:a8:5c:4f:80:97:c4:5a:64:7a:b0:f4:a9:60:aa:bf: 3b:d1:98:b7:2c:25:0e:13:a2:49:53:a1:98:91:81:2d:d9:4a: a6:92:1f:4b:68:fb:f7:bd:ff:e7:66:d4:0b:72:0b:7f:53:81: f2:c7:08:dd:15:7d:14:fe:29:0b:94:ae:25:11:0a:2e:9c:12: 92:65:89:6f:93:a5:56:4a:fe:0d:75:9b:b6:90:34:f4:ed:b6: 7d:3f:a3:0e:8c:2e:76:e3:24:0d:0d:e7:3a:40:95:63:ea:85: e6:ea:3c:5a:c7:60:65:ac:63:3e:5e:4c:07:9d:78:7e:9c:97: 00:aa:b1:2e:c5:5b:60:7a:d3:15:66:9f:d7:23:20:3e:be:da: fc:6e:6f:69:56:30:cc:6f:c6:df:9f:84:a7:8a:38:92:c5:81: 5d:35:71:80:3a:6b:77:9a:18:79:65:6f:f9:bc:76:0e:31:0d: cc:23:f4:6e:62:dc:2b:b0:94:f3:d3:a5:38:8b:33:f3:6c:dd: 44:8e:69:69:82:78:f7:d7:38:5d:43:de:ba:19:4b:59:16:13: 28:8b:80:b9:8e:f4:d7:c0:96:cf:f5:5c:3a:55:aa:31:a2:aa: 6b:f1:5e:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LT5i7Z9iE5groAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk NGJmNzQ0NjItNDRiMi00ZGI4LWFkNjMtZDZmNTlkNzhjZWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Lswj2S45gV0h0oK1Kb++j8UGwaarXpM3c3J gjx6oNHgK1Fz+Ao0cjBbBcou16OUABPBm12d16b1iL7ZIy1NAOBwLigQM7BGHBjP +FuRgOLIZd9KYtam2RSm6RKh7N5ews8ZGZ8e7f466O5LBd/j4PmAOd8WljmFn5nY w71o4TRyQYPeEDYFwQ4N77SPWPOFMC+a5SX21PHgFou5kev/R5C/UV5bRjs1067a Y0wzwa8A0wTG8j0r3iH2ZKJ4esDnE1Z6QrRScs8e+Fk4tu2SilzJ9RYKweDmKdJd 73dFQ8SdnCEmrnzqZe0hHBcYcuZ1fFA07AridYn2PylMP8oQ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGK3jASQjjwdrXHWYlhZu/0JruIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzljMzA0MWYtYjRlMC0z NTk4LTg4ZTgtNmFhMGJmNzQ0MzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhYoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP3lqgFlEo4C071FvZOTJaGxKLRBahcT4CXxFpkerD0qWCqvzvRmLcs JQ4ToklToZiRgS3ZSqaSH0to+/e9/+dm1AtyC39TgfLHCN0VfRT+KQuUriURCi6c EpJliW+TpVZK/g11m7aQNPTttn0/ow6MLnbjJA0N5zpAlWPqhebqPFrHYGWsYz5e TAedeH6clwCqsS7FW2B60xVmn9cjID6+2vxub2lWMMxvxt+fhKeKOJLFgV01cYA6 a3eaGHllb/m8dg4xDcwj9G5i3CuwlPPTpTiLM/Ns3USOaWmCePfXOF1D3roZS1kW EyiLgLmO9NfAls/1XDpVqjGiqmvxXq4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:44 2025 by rpki-client