$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45b11f59-434f-3be5-939a-514b5bc3fd8a.roa File: 45b11f59-434f-3be5-939a-514b5bc3fd8a.roa (raw, json) Hash identifier: AKJkl99ssrG4qhpWX2tWeRSGIRKAd09eeXfpXRyG4tM= Subject key identifier: F8:FC:68:BF:69:27:58:08:50:A9:59:79:39:9B:9B:5F:D5:27:86:BE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11CDF4DE3E79A962A8400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45b11f59-434f-3be5-939a-514b5bc3fd8a.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 98.17.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1c:df:4d:e3:e7:9a:96:2a:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=f0e563fd-f0a0-4a40-94c7-4adc2e318dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d8:3a:96:c4:9a:ed:d5:12:39:fd:65:25:2d: d4:02:5b:76:51:ad:37:1d:92:cb:64:80:b3:f1:b9: 6e:a0:3e:c5:39:fb:0f:7f:5e:39:49:51:64:03:24: 0d:1f:20:e5:63:df:23:ae:d9:7c:de:1d:2c:3c:57: fc:66:01:1f:a1:c4:37:b7:e3:97:69:92:d2:b6:e9: d3:16:8b:d3:75:0e:20:bd:e1:ac:14:82:2b:42:34: cc:c0:c0:3c:0e:e0:53:e7:00:32:00:01:f1:cf:23: 43:56:8f:fd:89:cb:88:33:1f:0a:bb:b8:31:d1:9f: ce:08:af:b7:d8:d4:9b:a2:88:73:79:d9:24:17:79: 3c:0f:f4:18:ac:5a:eb:cd:c8:78:e9:28:11:00:a8: b5:40:00:e7:0f:8e:05:09:ec:a9:c9:b3:38:29:3f: be:06:ae:a5:eb:d3:e9:bb:dc:5b:c7:9b:c7:68:e4: 72:32:af:40:23:16:a5:f9:5a:7e:19:27:99:f8:d5: 5f:c6:a0:7e:70:d8:eb:f7:fe:c1:1b:3f:67:ab:03: e6:28:f6:a7:6f:77:4a:55:cb:3b:1f:b4:59:e8:0b: 66:f1:a9:2d:a4:0e:c0:64:b6:e1:4f:4f:a2:7d:24: 55:8b:d0:18:d6:8e:e3:e8:42:e5:57:50:c2:10:e4: 77:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FC:68:BF:69:27:58:08:50:A9:59:79:39:9B:9B:5F:D5:27:86:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/45b11f59-434f-3be5-939a-514b5bc3fd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7c:34:70:33:89:8b:68:c9:09:77:cb:78:cb:85:c6:26:2d: 24:58:c9:15:8b:c6:94:68:7f:0f:13:48:11:c1:89:55:cd:05: a1:ab:9d:82:20:1f:dc:b8:77:e4:6f:e6:73:93:53:84:e3:c3: c0:7b:ca:11:06:5a:ee:ea:45:fb:68:ca:4e:c8:b9:09:55:48: cd:be:08:28:29:8e:9c:c0:8d:95:69:2d:39:27:c6:e4:b9:9e: 39:48:42:63:5b:69:16:bc:6c:d3:3e:5c:37:3c:d9:72:ed:4d: 3d:db:45:b1:7a:44:c5:4e:ab:17:88:f1:4a:4a:52:26:4c:92: b3:a4:e3:af:ec:89:56:7c:b2:0d:a0:0b:19:d0:fb:2d:ca:a0: 16:62:c7:fc:5f:ac:87:6b:fb:38:f3:c8:63:d8:9e:95:2c:15: 72:be:d7:08:a0:b3:82:8b:8b:49:c7:70:d7:d7:e1:2f:f8:97: ae:0d:b8:ab:57:ca:93:40:13:ca:a7:c2:ec:94:28:c9:c9:d6: 8e:22:52:2f:d4:ad:5f:d7:21:06:38:69:1e:be:21:3b:b5:5d: 73:64:af:8c:e7:05:95:52:b0:a1:47:3c:77:26:f2:12:01:92: c6:3c:a0:0b:34:63:4e:1d:a1:57:3f:d7:fc:1a:8e:37:70:9f: 8b:86:67:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RzfTePnmpYqhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZjBlNTYzZmQtZjBhMC00YTQwLTk0YzctNGFkYzJlMzE4ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNg6lsSa7dUSOf1lJS3UAlt2Ua03HZLLZICz 8bluoD7FOfsPf145SVFkAyQNHyDlY98jrtl83h0sPFf8ZgEfocQ3t+OXaZLStunT FovTdQ4gveGsFIIrQjTMwMA8DuBT5wAyAAHxzyNDVo/9icuIMx8Ku7gx0Z/OCK+3 2NSboohzedkkF3k8D/QYrFrrzch46SgRAKi1QADnD44FCeypybM4KT++Bq6l69Pp u9xbx5vHaORyMq9AIxal+Vp+GSeZ+NVfxqB+cNjr9/7BGz9nqwPmKPanb3dKVcs7 H7RZ6Atm8aktpA7AZLbhT0+ifSRVi9AY1o7j6ELlV1DCEOR3dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj8aL9pJ1gIUKlZeTmbm1/VJ4a+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDViMTFmNTktNDM0Zi0z YmU1LTkzOWEtNTE0YjViYzNmZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEYhFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ8NHAziYtoyQl3y3jLhcYmLSRYyRWLxpRofw8TSBHBiVXNBaGrnYIg H9y4d+Rv5nOTU4Tjw8B7yhEGWu7qRftoyk7IuQlVSM2+CCgpjpzAjZVpLTknxuS5 njlIQmNbaRa8bNM+XDc82XLtTT3bRbF6RMVOqxeI8UpKUiZMkrOk46/siVZ8sg2g CxnQ+y3KoBZix/xfrIdr+zjzyGPYnpUsFXK+1wigs4KLi0nHcNfX4S/4l64NuKtX ypNAE8qnwuyUKMnJ1o4iUi/UrV/XIQY4aR6+ITu1XXNkr4znBZVSsKFHPHcm8hIB ksY8oAs0Y04doVc/1/wajjdwn4uGZyc= -----END CERTIFICATE-----Generated at Mon Apr 28 09:31:24 2025 by rpki-client