$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa File: fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa (raw, json) Hash identifier: BED1fnvBfQqiOvOzhcj8E7V16ASoLQutA4dl2GAoiVI= Subject key identifier: 0C:EB:DF:22:57:9E:0F:D9:59:1F:A5:78:60:D4:BE:4D:99:6C:11:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211317A88802424F5A17590 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 55104 IP address blocks: 98.141.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:31:7a:88:80:24:24:f5:a1:75:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=68b0fb22-b960-4e04-b735-87184f9d4f7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:69:3f:6e:6c:5a:65:10:1e:3e:f2:90:21:1d: c6:f6:3b:c1:04:d5:03:88:38:8f:7e:a4:05:bb:ee: 6d:27:78:75:27:b6:c7:7e:49:96:a8:bc:7d:24:3a: df:16:ba:66:1b:66:5c:b8:22:f3:7c:2a:d0:74:38: eb:3c:c3:48:44:91:cf:3c:07:47:bb:6e:de:d1:5b: a9:46:19:bf:4f:7f:7a:d9:2d:5f:ab:b3:09:cd:28: aa:87:89:44:86:47:ab:1c:00:54:ba:2a:7a:e1:8b: c6:99:97:73:c8:62:73:38:f8:d1:dc:4d:82:ce:f3: bc:fd:1a:8e:6e:0c:5b:66:f5:b3:21:9d:8c:16:32: 06:df:30:12:49:b1:45:4e:f1:03:8a:60:c4:e6:00: cb:5e:7a:fa:65:a2:a5:b9:2e:b2:3e:12:0d:05:5b: 07:39:31:e1:f6:33:0c:97:30:ce:1a:5e:e6:7d:03: 78:13:f4:2b:b7:3c:0b:a3:0c:15:b2:b9:56:f9:e6: 18:06:a9:7d:24:44:a1:0f:45:b1:6f:55:9a:20:4d: e0:7a:db:fa:96:75:95:e5:51:b3:a7:d1:03:2c:87: b8:1f:30:35:d0:8a:d5:8a:26:83:0d:d9:93:34:2e: 46:4a:40:29:e8:b7:f9:29:4b:86:94:fb:dc:56:9f: a5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EB:DF:22:57:9E:0F:D9:59:1F:A5:78:60:D4:BE:4D:99:6C:11:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fcec51f2-e6d8-31a8-921b-47ce6911b45f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.141.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ab:5c:f8:c0:5e:9a:c5:7b:8d:c2:62:33:77:ed:75:ba:f3: 3f:98:19:64:75:ac:95:41:d3:64:db:16:24:92:fb:d6:1b:ab: 9e:2f:25:f3:ef:3c:b6:54:cb:f0:84:f8:28:91:a5:98:ff:c4: c1:4f:d5:44:4c:a6:9d:0d:a3:74:df:6c:ad:b9:e8:79:20:85: 71:e9:9b:7b:91:16:af:be:b0:cc:b4:51:04:f1:f0:e8:aa:58: 18:9d:1f:a2:01:a0:4a:1e:2c:5b:4e:24:ed:12:9e:c1:66:30: 54:f9:67:0e:5d:c5:bf:6f:43:f7:4a:5f:fb:3c:5e:fd:1e:b6: a3:1d:24:b7:05:cc:f4:d7:fb:03:5e:85:fb:d1:5f:06:ba:32: 80:6b:7c:b0:cf:70:7f:60:1a:a0:53:53:49:4e:75:0d:fb:34: 68:a8:08:70:28:e1:44:36:3c:4b:de:da:a3:5a:22:30:2a:75: b8:57:f9:4d:bf:e9:a6:3c:0f:54:c0:8f:2b:9d:b1:1b:5e:af: 8f:0d:ea:44:b0:49:68:5f:9b:d1:d4:75:41:04:bf:e0:d2:dc: 8e:02:d5:52:c0:00:7f:ed:c3:85:b9:7e:93:0b:04:58:5d:7e: 9d:a2:ee:7c:5e:90:80:2a:9e:a2:ee:22:46:35:56:46:46:38: f8:0f:cb:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETF6iIAkJPWhdZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjhiMGZiMjItYjk2MC00ZTA0LWI3MzUtODcxODRmOWQ0ZjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmk/bmxaZRAePvKQIR3G9jvBBNUDiDiPfqQF u+5tJ3h1J7bHfkmWqLx9JDrfFrpmG2ZcuCLzfCrQdDjrPMNIRJHPPAdHu27e0Vup Rhm/T3962S1fq7MJzSiqh4lEhkerHABUuip64YvGmZdzyGJzOPjR3E2CzvO8/RqO bgxbZvWzIZ2MFjIG3zASSbFFTvEDimDE5gDLXnr6ZaKluS6yPhINBVsHOTHh9jMM lzDOGl7mfQN4E/QrtzwLowwVsrlW+eYYBql9JEShD0Wxb1WaIE3getv6lnWV5VGz p9EDLIe4HzA10IrViiaDDdmTNC5GSkAp6Lf5KUuGlPvcVp+llwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzr3yJXng/ZWR+leGDUvk2ZbBGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmNlYzUxZjItZTZkOC0z MWE4LTkyMWItNDdjZTY5MTFiNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYo3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByrXPjAXprFe43CYjN37XW68z+YGWR1rJVB02TbFiSS+9Ybq54vJfPv PLZUy/CE+CiRpZj/xMFP1URMpp0No3TfbK256HkghXHpm3uRFq++sMy0UQTx8Oiq WBidH6IBoEoeLFtOJO0SnsFmMFT5Zw5dxb9vQ/dKX/s8Xv0etqMdJLcFzPTX+wNe hfvRXwa6MoBrfLDPcH9gGqBTU0lOdQ37NGioCHAo4UQ2PEve2qNaIjAqdbhX+U2/ 6aY8D1TAjyudsRter48N6kSwSWhfm9HUdUEEv+DS3I4C1VLAAH/tw4W5fpMLBFhd fp2i7nxekIAqnqLuIkY1VkZGOPgPy2k= -----END CERTIFICATE-----Generated at Mon Apr 7 11:53:01 2025 by rpki-client