$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa File: ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa (raw, json) Hash identifier: JiUUGxkGS6QdXVSeHf8fJspNTMsg2w3JjFfzB5osw0M= Subject key identifier: 8E:52:A9:D7:D1:B9:35:78:A8:26:C8:74:FF:B1:7C:AD:72:E3:AB:2E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F308528CEB750223EA95980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa Signing time: Tue 21 Jan 2025 20:38:11 +0000 ROA not before: Tue 21 Jan 2025 20:38:11 +0000 ROA not after: Mon 21 Apr 2025 19:38:11 +0000 asID: 7029 IP address blocks: 98.22.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:85:28:ce:b7:50:22:3e:a9:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:38:11 2025 GMT Not After : Apr 21 19:38:11 2025 GMT Subject: CN=e49829c8-d37f-428f-bd61-4cf0859d5ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0d:4d:d6:cb:9a:ae:7d:3c:78:a4:f3:57:ad: 0b:95:cb:3c:e5:59:77:0d:58:40:74:2d:5e:87:2a: 0f:95:d0:80:13:2b:6d:76:a5:b9:65:15:22:dc:9b: 33:90:57:90:5a:06:f4:ca:9a:c5:d7:97:af:d6:10: 9a:10:d7:fa:a2:94:ec:df:e1:bf:6a:b1:d5:2a:d1: 3d:f5:d2:6a:9f:cf:90:5c:52:a3:eb:b7:b5:71:0a: c8:e4:1c:e4:03:e9:4a:db:6c:4c:6f:aa:7f:fa:1a: c7:51:3c:7d:b3:dc:cf:ff:89:b2:e0:13:22:00:93: 94:5d:87:ae:19:40:ca:6d:50:00:29:28:e9:5f:2b: db:26:bc:87:7d:25:a1:bc:11:51:7f:11:ff:f8:12: fa:29:ae:c6:8e:4f:ce:e7:2c:a9:ba:cd:1f:5c:eb: fe:da:7e:4e:af:9b:6d:4d:56:d5:27:79:6d:dd:39: 61:17:c9:96:4d:4d:16:7d:e1:7c:3b:96:bb:ea:18: c5:0f:c6:76:2b:ba:c3:5f:ff:93:10:11:f2:6c:6c: 60:04:d8:f3:70:1a:23:8e:4e:4d:bd:aa:26:8a:bb: 0d:a1:b0:11:47:98:46:cb:3c:1f:72:9d:4d:8a:11: 4c:11:c0:5d:96:82:7f:f2:c2:c7:96:c0:03:e9:bc: f1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:52:A9:D7:D1:B9:35:78:A8:26:C8:74:FF:B1:7C:AD:72:E3:AB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ec65edfa-b54a-37bc-8557-271a06ed9ca1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.22.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ef:56:17:ae:1e:9f:21:31:2e:ac:ee:e0:9b:f4:87:51:de: 81:b7:72:fc:95:90:80:77:61:be:6d:8a:c0:eb:ce:7b:25:fd: 13:37:08:44:64:af:64:91:3d:9f:57:52:64:d5:f3:dd:01:55: d9:61:d5:90:ec:24:cf:72:98:c3:2d:ca:2c:bd:9b:42:f7:3e: 85:e3:bd:6e:8f:23:4b:c4:cc:d0:e6:81:1d:17:6b:f4:0b:99: 96:5d:23:36:67:21:90:87:1f:b4:e9:5c:01:dc:b8:22:ae:fb: 90:a9:a2:4e:f4:b4:c7:de:3c:3c:85:ab:37:26:6b:45:eb:52: a3:49:5a:53:23:fa:45:ab:63:df:9c:a5:87:8b:cf:5d:1a:5b: f4:a6:d2:c1:a7:49:04:8e:84:f6:54:11:c2:42:eb:69:16:fa: 9f:d0:6b:13:17:a6:be:93:d4:5d:e9:bb:d0:6a:1b:e7:02:d6: 85:9b:b8:cd:ac:59:4e:82:44:34:a3:a7:b0:85:0b:94:bc:28: 4c:a1:12:c2:80:4d:3b:bb:de:54:17:e1:f6:3b:38:0e:79:6f: 32:9d:48:60:50:c7:65:a1:bf:2c:a8:a8:b5:b7:ac:f8:22:6f: d3:ea:03:f3:48:7a:13:1b:52:73:d7:b7:b3:78:ce:d9:f6:bb: b7:5d:72:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMIUozrdQIj6pWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzgxMVoXDTI1MDQyMTE5MzgxMVowLzEtMCsGA1UEAxMk ZTQ5ODI5YzgtZDM3Zi00MjhmLWJkNjEtNGNmMDg1OWQ1ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ1N1suarn08eKTzV60Llcs85Vl3DVhAdC1e hyoPldCAEyttdqW5ZRUi3JszkFeQWgb0yprF15ev1hCaENf6opTs3+G/arHVKtE9 9dJqn8+QXFKj67e1cQrI5BzkA+lK22xMb6p/+hrHUTx9s9zP/4my4BMiAJOUXYeu GUDKbVAAKSjpXyvbJryHfSWhvBFRfxH/+BL6Ka7Gjk/O5yypus0fXOv+2n5Or5tt TVbVJ3lt3TlhF8mWTU0WfeF8O5a76hjFD8Z2K7rDX/+TEBHybGxgBNjzcBojjk5N vaomirsNobARR5hGyzwfcp1NihFMEcBdloJ/8sLHlsAD6bzxHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5SqdfRuTV4qCbIdP+xfK1y46suMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWM2NWVkZmEtYjU0YS0z N2JjLTg1NTctMjcxYTA2ZWQ5Y2ExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3vVheuHp8hMS6s7uCb9IdR3oG3cvyVkIB3Yb5tisDrznsl/RM3CERk r2SRPZ9XUmTV890BVdlh1ZDsJM9ymMMtyiy9m0L3PoXjvW6PI0vEzNDmgR0Xa/QL mZZdIzZnIZCHH7TpXAHcuCKu+5Cpok70tMfePDyFqzcma0XrUqNJWlMj+kWrY9+c pYeLz10aW/Sm0sGnSQSOhPZUEcJC62kW+p/QaxMXpr6T1F3pu9BqG+cC1oWbuM2s WU6CRDSjp7CFC5S8KEyhEsKATTu73lQX4fY7OA55bzKdSGBQx2WhvyyoqLW3rPgi b9PqA/NIehMbUnPXt7N4ztn2u7ddcnI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:26:46 2025 by rpki-client