$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa File: ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa (raw, json) Hash identifier: 7w219tvOjZZNoBPTTTXhaJVW7Hto84Eme406TPOW1yQ= Subject key identifier: 2C:49:0C:2F:E0:BD:10:24:BC:09:07:EB:42:C0:BC:10:54:7B:DF:FA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F1DD49976EA4081DB940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.18.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f1:dd:49:97:6e:a4:08:1d:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1a98b0cd-978f-45d6-b26b-ddef2d59ac7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:a3:01:0e:18:2a:b5:a0:25:1d:51:c0:b4: c9:8f:2d:16:62:d0:98:ba:10:6a:58:bd:74:89:d3: a0:d4:aa:3d:59:40:72:0f:82:77:d4:93:f1:f1:30: c7:1b:60:91:53:c3:30:ac:fd:56:db:9c:63:ed:ca: 2a:f7:35:02:9f:8e:27:ce:03:d1:0d:0c:ad:02:0d: 21:aa:a2:0b:04:05:fc:d6:4b:c3:89:34:87:3e:1c: a5:7a:9f:9f:2d:c4:22:00:45:a0:86:8c:5d:e9:8e: d1:1f:a6:7a:9c:82:a3:50:ae:02:d0:cb:74:ef:65: 17:38:5d:f4:f3:75:e1:cf:bf:6e:a5:96:83:33:06: ad:8a:ea:0f:0e:5c:28:ba:90:51:46:04:4f:57:bb: 3d:d5:cd:20:46:54:69:26:3c:98:07:de:e2:40:50: 76:5d:82:c1:b0:ca:a5:40:6c:52:11:62:99:32:77: 2c:84:c3:b2:21:50:42:e7:7c:3e:22:90:4a:79:3f: a3:95:46:d1:1c:6c:75:1f:40:94:f2:e8:37:e0:40: af:06:da:5a:3f:6c:c6:6f:63:f3:90:0b:90:5c:d4: 93:d2:7a:8e:9a:92:04:95:31:db:50:a6:34:8d:54: 0a:3a:29:39:d5:08:53:c9:61:6a:1a:33:07:5d:c4: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:49:0C:2F:E0:BD:10:24:BC:09:07:EB:42:C0:BC:10:54:7B:DF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec436aa5-f2e8-3818-85b7-c3ce57c49160.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.18.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:af:ba:47:90:86:95:b6:e1:8f:90:5a:1a:87:fd:1d:8b:8b: 12:a8:19:9b:6b:09:64:8e:a8:8b:06:54:ad:d7:46:26:65:c9: 28:04:c9:0f:55:be:23:02:d0:f7:25:d1:c6:fe:00:dc:04:00: 81:89:60:3b:9b:c0:8c:27:e5:97:85:a3:d5:80:3c:63:e5:ab: 2d:d8:00:3a:55:77:ce:56:20:0a:f6:a3:73:17:f3:5b:fd:96: 28:93:52:68:3b:3a:0d:64:66:5e:d2:a6:82:9c:6a:22:3d:95: 36:d9:c6:f3:1e:3f:ff:62:d3:a2:28:09:82:35:d1:f9:af:e4: ed:cd:3e:ad:b9:37:6f:ec:c0:0b:89:37:23:91:13:f3:80:a6: d1:67:5c:75:fa:01:a3:cf:8a:84:c5:03:cd:b8:f0:1a:a8:f2: 94:9c:2e:b5:9e:a2:f0:ad:6a:18:86:99:c4:15:6e:2b:3e:11: d5:d0:b5:eb:59:63:e6:86:7b:f4:9d:1d:98:16:be:c3:d0:55: d2:60:5a:18:c8:75:bd:a1:7a:ed:6c:57:9b:d4:67:51:ae:4c: 84:f0:ce:89:cd:59:99:7a:7e:f6:92:11:d7:41:32:10:91:59: 0d:70:73:08:3c:d7:b7:3e:fe:4f:8f:21:fe:5b:ef:fa:d4:dd: 20:7f:7f:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPHdSZdupAgduUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWE5OGIwY2QtOTc4Zi00NWQ2LWIyNmItZGRlZjJkNTlhYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1ejAQ4YKrWgJR1RwLTJjy0WYtCYuhBqWL10 idOg1Ko9WUByD4J31JPx8TDHG2CRU8MwrP1W25xj7coq9zUCn44nzgPRDQytAg0h qqILBAX81kvDiTSHPhylep+fLcQiAEWghoxd6Y7RH6Z6nIKjUK4C0Mt072UXOF30 83Xhz79upZaDMwatiuoPDlwoupBRRgRPV7s91c0gRlRpJjyYB97iQFB2XYLBsMql QGxSEWKZMncshMOyIVBC53w+IpBKeT+jlUbRHGx1H0CU8ug34ECvBtpaP2zGb2Pz kAuQXNST0nqOmpIElTHbUKY0jVQKOik51QhTyWFqGjMHXcRUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxJDC/gvRAkvAkH60LAvBBUe9/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWM0MzZhYTUtZjJlOC0z ODE4LTg1YjctYzNjZTU3YzQ5MTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2vukeQhpW24Y+QWhqH/R2LixKoGZtrCWSOqIsGVK3XRiZlySgEyQ9V viMC0Pcl0cb+ANwEAIGJYDubwIwn5ZeFo9WAPGPlqy3YADpVd85WIAr2o3MX81v9 liiTUmg7Og1kZl7SpoKcaiI9lTbZxvMeP/9i06IoCYI10fmv5O3NPq25N2/swAuJ NyORE/OAptFnXHX6AaPPioTFA8248Bqo8pScLrWeovCtahiGmcQVbis+EdXQtetZ Y+aGe/SdHZgWvsPQVdJgWhjIdb2heu1sV5vUZ1GuTITwzonNWZl6fvaSEddBMhCR WQ1wcwg817c+/k+PIf5b7/rU3SB/f1k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:56 2025 by rpki-client