$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa File: f2134156-80a5-3a22-8250-44093645e181.roa (raw, json) Hash identifier: DoUBGe0Bbq362B7wuaVGOxwBRjzi1El/eK0P/CDKnz4= Subject key identifier: 9E:C4:A4:1D:0E:A3:46:21:0C:26:38:B5:71:48:8F:71:8A:3A:14:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491D716C21EF257D2DF0278B80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 98.16.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:6c:21:ef:25:7d:2d:f0:27:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=a5f6e8ff-34b1-47dc-8e74-56fd8a5dc3f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:ba:c9:90:cd:4b:27:e2:66:62:11:1a:63:ce: ca:f1:16:29:24:61:ee:7c:43:62:83:68:13:5d:32: fb:ce:37:73:5a:1b:3e:13:11:a7:32:9c:75:9b:69: d1:58:fe:c0:9c:6f:db:4d:ad:94:62:f1:8d:c6:c2: a1:7f:58:10:6e:5c:ef:30:56:67:f8:b6:45:70:2d: a9:cb:6f:71:f9:f5:22:2b:56:bc:53:eb:96:0b:99: 11:c6:4a:28:b3:34:1b:b0:94:e7:0e:27:33:0d:1b: b8:d3:d9:10:59:c8:78:63:0b:8a:7a:e0:cf:1b:73: 60:d6:5c:0a:8b:bd:c0:60:d4:79:ad:9f:63:06:ec: 17:40:8c:36:78:5c:67:7b:01:c9:67:10:32:23:0c: 18:31:35:9e:f0:40:85:a8:bd:f9:2c:d4:1f:e2:c6: 9e:62:a3:13:ce:b4:6e:fa:e3:ad:88:ba:84:7a:67: 54:d6:37:fe:a0:f4:c8:b6:18:76:f9:6e:69:50:bd: 81:e0:c0:41:68:e4:5a:a5:c6:1b:94:01:e7:50:ca: 84:99:bc:ce:b4:56:4e:5d:eb:da:b9:ab:9c:28:92: 73:45:c9:41:7f:cd:fe:e3:9e:42:4c:0f:c5:85:7f: 35:4b:b6:9a:35:58:fd:5a:73:55:57:b7:df:15:6e: d3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C4:A4:1D:0E:A3:46:21:0C:26:38:B5:71:48:8F:71:8A:3A:14:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f2134156-80a5-3a22-8250-44093645e181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f4:c6:07:ba:6b:dd:4a:b7:78:d9:89:c2:d5:ae:7b:bb:fc: 8d:88:b2:26:ba:8d:2f:12:e8:34:b0:20:9d:64:49:7c:eb:f0: 14:29:15:64:cb:dc:57:8d:44:a3:43:35:fb:b9:8a:0d:76:d5: fc:26:7b:ea:df:eb:1a:4c:26:0b:b8:a3:7b:72:96:65:2d:c5: 49:b4:c9:45:15:67:82:90:47:0b:c1:73:48:ac:b9:7a:5b:07: 75:02:08:7f:66:9b:31:0c:ec:5c:d7:ca:16:64:20:9b:a9:7d: 18:5f:a7:5f:8a:39:40:e7:71:30:12:1c:52:63:0e:27:f3:eb: 31:89:64:7c:03:7d:0b:5c:b7:1c:47:46:09:8a:98:5d:78:e8: 6e:b7:eb:e1:7b:e3:f7:45:f4:73:8b:ad:1b:d7:e2:12:bf:f1: f0:e4:df:77:e6:ca:ec:dd:6a:72:72:29:cb:2a:0f:9d:50:90: b0:38:3b:0e:b6:4b:51:ea:13:65:c0:8e:37:c3:03:da:1f:0b: 86:c8:c1:f9:61:08:da:83:35:66:b8:7f:70:a7:40:5a:88:08: 68:eb:0c:8d:0d:c6:4d:da:fe:b7:15:da:9a:f1:77:72:d7:ad: 5f:80:bb:b0:81:3e:57:0d:7d:e5:99:4d:f1:dd:c2:7c:64:ab: 3d:b1:11:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcWwh7yV9LfAni4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YTVmNmU4ZmYtMzRiMS00N2RjLThlNzQtNTZmZDhhNWRjM2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA97rJkM1LJ+JmYhEaY87K8RYpJGHufENig2gT XTL7zjdzWhs+ExGnMpx1m2nRWP7AnG/bTa2UYvGNxsKhf1gQblzvMFZn+LZFcC2p y29x+fUiK1a8U+uWC5kRxkooszQbsJTnDiczDRu409kQWch4YwuKeuDPG3Ng1lwK i73AYNR5rZ9jBuwXQIw2eFxnewHJZxAyIwwYMTWe8ECFqL35LNQf4saeYqMTzrRu +uOtiLqEemdU1jf+oPTIthh2+W5pUL2B4MBBaORapcYblAHnUMqEmbzOtFZOXeva uaucKJJzRclBf83+455CTA/FhX81S7aaNVj9WnNVV7ffFW7TQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ7EpB0Oo0YhDCY4tXFIj3GKOhTEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIxMzQxNTYtODBhNS0z YTIyLTgyNTAtNDQwOTM2NDVlMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH0xge6a91Kt3jZicLVrnu7/I2Isia6jS8S6DSwIJ1kSXzr8BQpFWTL 3FeNRKNDNfu5ig121fwme+rf6xpMJgu4o3tylmUtxUm0yUUVZ4KQRwvBc0isuXpb B3UCCH9mmzEM7FzXyhZkIJupfRhfp1+KOUDncTASHFJjDifz6zGJZHwDfQtctxxH RgmKmF146G636+F74/dF9HOLrRvX4hK/8fDk33fmyuzdanJyKcsqD51QkLA4Ow62 S1HqE2XAjjfDA9ofC4bIwflhCNqDNWa4f3CnQFqICGjrDI0Nxk3a/rcV2prxd3LX rV+Au7CBPlcNfeWZTfHdwnxkqz2xEUc= -----END CERTIFICATE-----Generated at Sun Apr 6 06:04:44 2025 by rpki-client