$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa File: d7c658f8-55f3-37c9-b25e-b9627488fc03.roa (raw, json) Hash identifier: F7k3tjpmL+8bcw3nnnrcl6EV5JL79gyC/umLPccXvQs= Subject key identifier: 0E:20:8F:44:B4:B8:03:AD:95:B0:22:25:1B:6A:BA:3F:70:D8:7F:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE1195823209358CE3A1700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.16.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:19:58:23:20:93:58:ce:3a:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=ebe08e28-ba72-4b42-9c61-7da73b25f7bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:30:63:e5:b8:f8:87:5d:25:06:15:fd:04:2b: ac:b8:a2:2a:c6:33:fa:1e:bb:5e:a4:29:8a:8c:b7: 0f:fb:08:bf:c3:bc:fe:41:a2:94:0f:f9:13:0b:de: ce:93:54:4c:d6:af:18:89:b0:d4:c3:17:a4:8a:4b: 75:27:df:16:3d:7b:80:c9:4a:92:f8:ce:1a:e3:2a: 02:f0:a3:34:eb:af:7e:d2:e1:83:c2:dd:6a:09:ce: f8:a0:78:f9:43:79:2b:a7:65:57:ad:02:77:80:6a: f0:4a:c8:f3:8d:e8:62:a0:c1:b6:8f:f4:60:50:27: b4:57:62:77:67:c8:d5:ff:55:52:b0:c0:7d:71:f8: e6:23:f1:e8:0f:d8:e2:51:5d:7f:73:9d:93:d6:1e: 14:2e:d3:51:38:20:11:0e:65:bd:18:ed:21:73:29: 0e:95:6e:97:f8:a5:4e:52:ef:88:7e:08:90:aa:06: 57:2d:75:90:f0:3a:1c:15:71:0c:a8:e2:c9:4c:72: fd:f9:e1:c6:76:39:2c:9e:23:60:e3:61:3a:16:75: ab:28:69:ca:9f:6c:7c:4d:e0:3e:8e:1d:81:ae:25: 53:98:9d:31:e2:c9:90:66:49:0a:83:3c:c8:d6:ed: 1c:de:d7:c8:34:52:e4:97:fc:77:17:6f:0a:d4:5e: bd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:20:8F:44:B4:B8:03:AD:95:B0:22:25:1B:6A:BA:3F:70:D8:7F:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7c658f8-55f3-37c9-b25e-b9627488fc03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b4:50:96:bf:78:2f:7e:2f:48:57:aa:4f:26:17:c3:d2:39: 61:d3:8e:3e:d9:fb:c7:eb:c7:b8:6d:be:ad:3c:fd:c5:80:83: 85:9c:14:27:a5:6f:f6:06:93:a5:7c:26:19:23:e9:f3:57:72: 0d:dc:31:82:18:de:36:c3:d3:95:c8:55:27:9d:17:bd:6c:10: 6d:23:d4:b7:a3:2a:6e:60:98:5a:fc:f8:c6:ef:d0:80:6e:90: 51:80:06:13:03:a1:2c:4a:a0:26:22:11:59:78:f4:1a:82:3c: e6:72:26:1c:af:14:f3:85:dc:6e:af:bd:78:03:29:c5:4c:fb: 17:85:6e:6f:6a:82:91:f6:30:dc:e0:1b:2c:75:32:5f:2a:87: 0e:93:00:36:3f:93:37:fa:4d:eb:c7:6f:cf:e9:56:79:cc:b3: 57:55:1f:cc:68:30:ec:fb:27:84:0a:c3:4d:92:0d:48:6c:95: 71:89:82:e7:53:1e:6b:23:1a:49:9d:59:16:4e:e0:39:5f:1f: e3:16:78:b1:43:5d:20:9b:67:90:41:d9:80:94:1a:43:e7:73: 6e:35:14:4d:8e:51:45:52:6d:c6:b6:c2:79:0c:e4:9c:c7:01: 8e:a0:04:13:28:96:61:f2:bf:93:a0:0a:7e:4e:26:e2:76:1d: b3:47:6a:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RlYIyCTWM46FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZWJlMDhlMjgtYmE3Mi00YjQyLTljNjEtN2RhNzNiMjVmN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTBj5bj4h10lBhX9BCusuKIqxjP6HrtepCmK jLcP+wi/w7z+QaKUD/kTC97Ok1RM1q8YibDUwxekikt1J98WPXuAyUqS+M4a4yoC 8KM0669+0uGDwt1qCc74oHj5Q3krp2VXrQJ3gGrwSsjzjehioMG2j/RgUCe0V2J3 Z8jV/1VSsMB9cfjmI/HoD9jiUV1/c52T1h4ULtNROCARDmW9GO0hcykOlW6X+KVO Uu+IfgiQqgZXLXWQ8DocFXEMqOLJTHL9+eHGdjksniNg42E6FnWrKGnKn2x8TeA+ jh2BriVTmJ0x4smQZkkKgzzI1u0c3tfINFLkl/x3F28K1F69iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4gj0S0uAOtlbAiJRtquj9w2H8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdjNjU4ZjgtNTVmMy0z N2M5LWIyNWUtYjk2Mjc0ODhmYzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy0UJa/eC9+L0hXqk8mF8PSOWHTjj7Z+8frx7htvq08/cWAg4WcFCel b/YGk6V8Jhkj6fNXcg3cMYIY3jbD05XIVSedF71sEG0j1LejKm5gmFr8+Mbv0IBu kFGABhMDoSxKoCYiEVl49BqCPOZyJhyvFPOF3G6vvXgDKcVM+xeFbm9qgpH2MNzg Gyx1Ml8qhw6TADY/kzf6TevHb8/pVnnMs1dVH8xoMOz7J4QKw02SDUhslXGJgudT HmsjGkmdWRZO4DlfH+MWeLFDXSCbZ5BB2YCUGkPnc241FE2OUUVSbca2wnkM5JzH AY6gBBMolmHyv5OgCn5OJuJ2HbNHats= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:37 2025 by rpki-client