$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa File: ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa (raw, json) Hash identifier: SvpzGW10EW8j64Efx969RLrIufmiBa+PZRbfCn5smtM= Subject key identifier: 47:F2:E1:A2:28:B5:89:B3:2E:95:F7:C7:CA:5E:A1:C1:20:43:2F:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B4613923A3C6E3DEF580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 98.20.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b4:61:39:23:a3:c6:e3:de:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=24605b55-05ab-4c09-a7d6-224e12a24e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:80:e7:01:bc:4c:6e:4b:3b:aa:59:45:39: 03:a0:4f:e3:1c:d1:56:5a:49:16:00:12:8f:8f:b7: 47:3f:57:b3:51:e6:f2:6f:88:5f:5f:75:ce:fd:95: ba:ee:e3:d9:aa:a8:98:8c:5e:fd:69:72:96:9e:ad: 92:9d:fd:85:c3:38:fb:45:0b:12:64:d3:39:d2:e8: e2:1b:a4:fc:41:14:70:c3:4a:d3:85:85:09:77:ac: 64:b0:b2:22:1d:88:41:d9:3d:d6:2e:f9:7f:27:0e: bd:33:90:c6:c4:9f:dc:de:86:10:79:e1:c7:a7:fd: 77:ef:a7:f2:d7:d6:00:4c:1f:89:86:1b:4d:4c:28: af:b7:3f:b0:36:63:67:b8:51:1d:a1:f0:7a:6a:1e: 2f:c0:07:60:72:0a:ee:09:ba:d5:ba:96:73:de:3d: e6:a1:23:cb:04:ee:29:2e:da:44:55:fe:bc:9c:81: 78:a8:b3:de:13:39:62:17:20:61:b1:44:ca:16:99: e9:d6:95:89:38:9f:63:64:19:9a:33:4f:97:8e:24: 72:26:2f:45:2b:17:66:fc:59:f1:5c:7c:9e:bf:04: a4:57:69:ec:e1:ae:64:a3:e5:81:11:ac:bf:fc:c4: fc:66:a7:a7:78:f2:ca:8c:49:a7:ab:57:bf:5a:6b: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F2:E1:A2:28:B5:89:B3:2E:95:F7:C7:CA:5E:A1:C1:20:43:2F:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ed00e4fa-6dbd-3b60-a692-e600f4e369a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:c2:14:9c:55:21:3f:78:a1:4c:c8:71:a0:86:f3:8e:e2:9d: 5d:88:0b:c5:ff:2b:e4:af:12:39:8e:ea:7c:43:dd:c3:24:e7: 7b:e9:e7:ca:d2:d6:8b:88:0b:65:ae:44:41:25:20:9e:66:64: 9a:6e:68:46:c8:59:b1:26:de:07:83:cf:dc:6d:31:4e:9e:26: f1:5a:bb:d8:6b:0a:fc:c5:85:48:82:89:41:87:0d:b5:4d:f7: c5:63:19:a4:84:37:55:e2:4e:b8:3e:91:a1:2d:b5:3f:15:e6: bd:0b:1a:6b:2f:85:60:3c:90:ab:e8:ad:ef:d3:38:b1:ed:e5: df:d0:63:ce:7e:1c:53:86:7f:65:9d:ec:10:0f:02:a2:32:fc: 08:1a:bb:bc:35:c5:93:49:e5:91:e0:19:38:02:e8:bc:8b:ad: b1:21:4a:1d:0d:b4:dd:57:35:d8:01:df:e7:09:8a:9f:08:aa: 04:2a:a9:14:e9:38:73:59:ca:b6:4c:bf:34:1b:13:e8:69:3c: 41:7c:c7:f1:5d:b4:43:52:d9:e9:bc:1b:45:30:61:35:4f:95: 68:fd:74:84:c0:85:00:f4:7d:09:7b:65:85:76:ab:4c:63:db: f1:65:a1:f1:f9:1b:e6:51:8b:10:12:74:70:bd:00:c0:05:81: 0f:72:a7:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LRhOSOjxuPe9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk MjQ2MDViNTUtMDVhYi00YzA5LWE3ZDYtMjI0ZTEyYTI0ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjSA5wG8TG5LO6pZRTkDoE/jHNFWWkkWABKP j7dHP1ezUebyb4hfX3XO/ZW67uPZqqiYjF79aXKWnq2Snf2Fwzj7RQsSZNM50uji G6T8QRRww0rThYUJd6xksLIiHYhB2T3WLvl/Jw69M5DGxJ/c3oYQeeHHp/1376fy 19YATB+JhhtNTCivtz+wNmNnuFEdofB6ah4vwAdgcgruCbrVupZz3j3moSPLBO4p LtpEVf68nIF4qLPeEzliFyBhsUTKFpnp1pWJOJ9jZBmaM0+XjiRyJi9FKxdm/Fnx XHyevwSkV2ns4a5ko+WBEay//MT8ZqenePLKjEmnq1e/WmsEEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfy4aIotYmzLpX3x8peocEgQy8iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWQwMGU0ZmEtNmRiZC0z YjYwLWE2OTItZTYwMGY0ZTM2OWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhQeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLCFJxVIT94oUzIcaCG847inV2IC8X/K+SvEjmO6nxD3cMk53vp58rS 1ouIC2WuREElIJ5mZJpuaEbIWbEm3geDz9xtMU6eJvFau9hrCvzFhUiCiUGHDbVN 98VjGaSEN1XiTrg+kaEttT8V5r0LGmsvhWA8kKvore/TOLHt5d/QY85+HFOGf2Wd 7BAPAqIy/Agau7w1xZNJ5ZHgGTgC6LyLrbEhSh0NtN1XNdgB3+cJip8IqgQqqRTp OHNZyrZMvzQbE+hpPEF8x/FdtENS2em8G0UwYTVPlWj9dITAhQD0fQl7ZYV2q0xj 2/FlofH5G+ZRixASdHC9AMAFgQ9yp/E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:12 2025 by rpki-client