$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa File: 0b6db478-8531-3fa9-ad15-f50272ba9617.roa (raw, json) Hash identifier: FU0TJAsdAycLB3kJSyaPzjF8iZAU26DIgw97yJ9WP8w= Subject key identifier: C9:5F:AF:D4:98:60:EF:C1:94:A6:C8:ED:DB:86:61:4C:F9:03:F9:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F65BF4EDB86A9A380A492980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 7029 IP address blocks: 98.20.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:f4:ed:b8:6a:9a:38:0a:49:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=24d4e38f-023a-45a3-b70e-929167230c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:63:06:32:ed:bd:24:9d:41:87:a9:d6:c0: 24:0a:39:78:6e:5e:1a:f8:ad:ff:b9:8a:bb:32:ef: 8b:03:09:7a:52:e0:0c:3d:30:ac:af:eb:f2:4b:66: b7:c4:66:2c:f1:d0:16:b2:e2:8c:4f:89:8d:68:61: 76:2f:79:cb:2e:1e:53:20:53:01:6d:99:0c:79:79: 2a:4d:1b:b5:a5:04:47:3e:97:db:34:5f:fc:08:37: 73:70:c7:47:63:f9:c2:b5:7c:57:bd:6e:2f:f1:f0: fd:1e:a8:f2:54:68:a8:61:1f:df:2c:02:2d:6d:8d: dd:91:a0:8d:da:bb:f2:94:c8:43:cf:ec:d5:ec:d2: 9a:64:cf:58:72:f5:e3:47:88:2e:68:1f:8a:09:27: 7d:eb:53:1c:a0:ff:d9:81:db:28:87:2e:f8:00:18: c9:fd:6a:09:0a:0f:29:1b:c8:d2:87:ba:de:6e:b2: 8e:60:c1:87:83:ce:2e:86:8c:e2:df:1f:85:fe:e4: 0e:c6:2b:55:b5:d9:5e:db:73:71:25:72:7b:f9:65: 42:cd:d0:a3:e1:c3:f3:b9:8d:d0:0c:fc:38:94:58: b2:b6:af:33:98:d7:dc:e9:47:3f:78:79:72:69:9c: 42:4d:22:22:6a:17:92:03:02:2a:4b:95:86:b2:49: 14:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:AF:D4:98:60:EF:C1:94:A6:C8:ED:DB:86:61:4C:F9:03:F9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b6db478-8531-3fa9-ad15-f50272ba9617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.20.200.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:40:b5:6f:8d:91:56:e1:c8:0e:93:62:4a:92:0b:e9:b7:9a: ed:5f:99:9c:be:54:f8:fc:44:ed:bd:67:36:30:f1:2d:54:42: 92:0d:94:8d:6e:46:26:eb:9c:71:df:27:31:30:fa:df:ad:59: 0b:d3:8a:e6:e3:b7:29:8b:e9:c6:d9:47:7a:2b:c4:85:a5:d0: e3:6a:09:b2:9f:76:85:49:42:b2:b4:f0:18:5e:e2:9f:ba:72: f0:33:13:dd:dc:1d:9c:07:2f:13:4b:75:cf:12:84:8e:56:f6: ad:33:3a:2f:55:d8:ea:2b:e5:88:3c:bb:3f:21:9e:93:f0:6f: 48:e5:95:04:a3:21:7b:3f:c2:9b:73:3a:25:9a:91:d3:a3:55: 01:ce:85:1c:41:be:55:4d:09:a2:60:8f:96:11:73:97:1e:b5: 15:05:a8:94:7c:22:a4:b5:67:69:60:12:17:1a:e6:45:e7:41: a4:8c:bd:97:1b:64:34:32:9b:d7:57:52:50:ae:ce:ee:ee:c3: 53:58:66:ea:fa:a1:91:b5:d2:c4:0e:60:6a:e9:09:f4:17:df: 02:08:48:53:0b:9c:19:66:2a:03:cf:6e:9e:bb:c8:c3:b6:32: 92:b3:bd:b9:c9:5a:8b:fe:73:0e:1e:bd:28:89:45:9b:d1:ea: 8b:83:a5:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W/TtuGqaOApJKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk MjRkNGUzOGYtMDIzYS00NWEzLWI3MGUtOTI5MTY3MjMwYzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB1jBjLtvSSdQYep1sAkCjl4bl4a+K3/uYq7 Mu+LAwl6UuAMPTCsr+vyS2a3xGYs8dAWsuKMT4mNaGF2L3nLLh5TIFMBbZkMeXkq TRu1pQRHPpfbNF/8CDdzcMdHY/nCtXxXvW4v8fD9HqjyVGioYR/fLAItbY3dkaCN 2rvylMhDz+zV7NKaZM9YcvXjR4guaB+KCSd961McoP/Zgdsohy74ABjJ/WoJCg8p G8jSh7rebrKOYMGHg84uhozi3x+F/uQOxitVtdle23NxJXJ7+WVCzdCj4cPzuY3Q DPw4lFiytq8zmNfc6Uc/eHlyaZxCTSIiaheSAwIqS5WGskkUsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlfr9SYYO/BlKbI7duGYUz5A/kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI2ZGI0NzgtODUzMS0z ZmE5LWFkMTUtZjUwMjcyYmE5NjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYhTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxAtW+NkVbhyA6TYkqSC+m3mu1fmZy+VPj8RO29ZzYw8S1UQpINlI1u RibrnHHfJzEw+t+tWQvTiubjtymL6cbZR3orxIWl0ONqCbKfdoVJQrK08Bhe4p+6 cvAzE93cHZwHLxNLdc8ShI5W9q0zOi9V2Oor5Yg8uz8hnpPwb0jllQSjIXs/wptz OiWakdOjVQHOhRxBvlVNCaJgj5YRc5cetRUFqJR8IqS1Z2lgEhca5kXnQaSMvZcb ZDQym9dXUlCuzu7uw1NYZur6oZG10sQOYGrpCfQX3wIISFMLnBlmKgPPbp67yMO2 MpKzvbnJWov+cw4evSiJRZvR6ouDpdI= -----END CERTIFICATE-----Generated at Sun Apr 27 04:11:41 2025 by rpki-client