$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa File: d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa (raw, json) Hash identifier: hBXUV7qFpriE2x06tnd21MCzo04l6GuAjaNzIqWKTkM= Subject key identifier: 17:C3:2F:DD:45:7E:38:AE:15:72:C7:46:47:F2:C9:C3:F5:6D:FF:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2110701143BB7392034FA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 54142 IP address blocks: 98.16.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:07:01:14:3b:b7:39:20:34:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=3deb5e22-d76e-447a-8113-d051eefecbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2f:60:6e:2b:e3:8e:25:ee:18:8c:85:cb:40: 56:96:2c:33:71:4e:95:88:28:eb:62:89:5f:9a:b5: dd:4c:57:aa:b6:2a:4c:2c:87:54:cc:d9:60:ca:a8: a0:64:2b:0b:5e:a4:cc:77:56:af:e3:0d:7d:9c:76: 5a:6a:2d:c8:9f:3a:bd:70:19:f4:a9:f8:c6:68:85: cf:40:b5:8f:0f:47:0f:cc:c4:b2:9b:7a:e4:8c:5f: 8a:29:10:02:a4:7a:e2:e8:15:8e:74:e5:47:a0:fb: 33:a6:86:63:88:2c:9b:aa:36:88:37:38:94:ef:20: 5b:b8:11:2e:c1:b5:5c:ec:b0:72:70:40:1c:18:b0: 0e:54:a2:79:ae:e2:7c:d4:30:fd:76:e1:62:46:00: 9a:9b:45:6e:14:12:40:f7:58:5e:7a:2c:2f:4b:25: de:84:4a:a6:c1:5b:34:05:c7:14:15:33:aa:c9:b3: db:49:4c:88:c8:99:a7:7c:9e:4a:1f:fc:35:02:f2: e3:4d:13:0a:52:ba:09:f5:b1:2b:97:0b:44:4d:3e: 55:20:fd:1d:64:47:20:0a:c0:e4:3f:2b:f0:47:71: a4:68:51:98:c5:1d:5e:db:e7:0b:16:14:1e:7e:3f: bc:97:ac:92:ff:3d:82:62:a7:38:5b:fd:9c:5b:a8: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C3:2F:DD:45:7E:38:AE:15:72:C7:46:47:F2:C9:C3:F5:6D:FF:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d9cf9e9d-45a5-3c41-a654-960428cc2d0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d9:5c:06:55:f5:41:cd:33:5a:ec:f7:24:80:1c:fd:b1:81: 73:c0:1e:ce:00:f4:3c:ea:e4:12:1a:34:1c:13:0a:f7:2e:fe: cc:fa:f8:b9:7a:02:bd:f9:6f:05:47:51:db:44:1e:30:9e:26: 18:6a:2e:8e:27:a6:08:7f:3c:85:74:5b:07:6d:af:28:e5:ba: 45:b3:a1:7a:c4:9f:f1:f9:a7:e3:0f:04:7d:9c:2f:32:77:f0: e7:0c:fd:8e:64:78:3a:77:3a:43:a4:86:2d:26:50:8d:70:d3: 19:fe:4a:21:e6:38:9a:ad:46:b4:91:6d:d1:cd:91:fd:b6:b3: cb:5f:76:74:b9:64:26:9d:ec:8d:94:e9:83:2e:fa:fe:22:4d: 35:ed:39:24:86:d0:e1:19:bd:47:62:1c:0d:4a:bd:31:a0:95: 2f:82:9c:53:1c:50:26:f8:8f:1d:52:94:3e:84:74:ca:63:c4: f0:9c:be:a0:36:a6:cb:4c:e6:32:a4:32:22:c1:4b:60:d6:34: dd:26:ef:7c:4e:0b:74:e4:9a:a1:52:85:0d:45:c1:e4:df:60: 40:a5:e7:8c:33:8d:53:01:be:74:80:3f:69:b4:27:50:73:b2: 5a:77:da:2a:eb:99:da:90:00:89:eb:10:7b:3d:58:a1:1f:a1: a6:67:e0:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQcBFDu3OSA0+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2RlYjVlMjItZDc2ZS00NDdhLTgxMTMtZDA1MWVlZmVjYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS9gbivjjiXuGIyFy0BWliwzcU6ViCjrYolf mrXdTFeqtipMLIdUzNlgyqigZCsLXqTMd1av4w19nHZaai3Inzq9cBn0qfjGaIXP QLWPD0cPzMSym3rkjF+KKRACpHri6BWOdOVHoPszpoZjiCybqjaINziU7yBbuBEu wbVc7LBycEAcGLAOVKJ5ruJ81DD9duFiRgCam0VuFBJA91heeiwvSyXehEqmwVs0 BccUFTOqybPbSUyIyJmnfJ5KH/w1AvLjTRMKUroJ9bErlwtETT5VIP0dZEcgCsDk PyvwR3GkaFGYxR1e2+cLFhQefj+8l6yS/z2CYqc4W/2cW6jsSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfDL91FfjiuFXLHRkfyycP1bf8ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDljZjllOWQtNDVhNS0z YzQxLWE2NTQtOTYwNDI4Y2MyZDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrZXAZV9UHNM1rs9ySAHP2xgXPAHs4A9Dzq5BIaNBwTCvcu/sz6+Ll6 Ar35bwVHUdtEHjCeJhhqLo4npgh/PIV0WwdtryjlukWzoXrEn/H5p+MPBH2cLzJ3 8OcM/Y5keDp3OkOkhi0mUI1w0xn+SiHmOJqtRrSRbdHNkf22s8tfdnS5ZCad7I2U 6YMu+v4iTTXtOSSG0OEZvUdiHA1KvTGglS+CnFMcUCb4jx1SlD6EdMpjxPCcvqA2 pstM5jKkMiLBS2DWNN0m73xOC3TkmqFShQ1FweTfYECl54wzjVMBvnSAP2m0J1Bz slp32irrmdqQAInrEHs9WKEfoaZn4K4= -----END CERTIFICATE-----Generated at Mon Apr 7 11:53:00 2025 by rpki-client