$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa File: 466f6df5-9580-3849-bf40-eeaab04c5e4f.roa (raw, json) Hash identifier: JyBWbN5HmGZS6ARA/XcTelPvVS5nfLRjXFfwcbNuq8k= Subject key identifier: DD:E2:B9:A4:B3:3D:26:74:05:51:D7:E0:ED:4C:25:87:91:4A:45:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5E0C186D7C8BC0D1BC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 98.16.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5e:0c:18:6d:7c:8b:c0:d1:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=e4a02a3c-2319-43f1-a48f-a81c21128e7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:04:24:3a:f8:e1:67:24:bb:f4:4b:6e:bc: 5f:54:20:56:5f:f5:06:e6:b1:cf:a1:68:54:dc:3f: 3c:e3:c1:a2:d9:15:94:20:e8:d0:1e:b4:b8:4f:33: 57:c0:8d:03:5b:73:a9:f6:58:36:3b:21:d3:ab:ee: 27:fc:69:1c:cb:41:12:9b:06:63:6a:5d:e8:f7:62: 45:76:87:54:14:2b:91:7e:16:c4:cb:ed:2d:e4:be: 16:07:80:13:88:a0:af:6b:8d:eb:36:3e:0f:fc:f1: ec:ad:3e:2c:cd:f9:47:f9:af:9f:a1:99:aa:f7:61: f9:9b:94:e9:1e:5f:cf:bb:c7:78:ba:58:24:5d:fb: 50:a8:8f:7f:5f:a0:eb:c3:27:1d:b5:3a:da:d3:a1: eb:0d:a4:20:2a:4e:be:e4:d0:26:a5:43:73:7f:fd: b9:b5:ac:a1:27:ca:8d:a8:47:c0:4b:57:51:35:15: 56:00:aa:93:3a:88:e9:82:34:e0:fc:d5:f5:db:4d: f6:14:e8:e1:31:69:fa:eb:06:13:ee:5a:59:e5:a8: e2:b4:4b:8f:60:11:b3:d9:73:14:17:ed:f1:70:35: af:76:d8:04:64:a3:6b:46:11:c5:1f:19:2a:92:4d: ca:7e:15:ac:30:b5:82:20:db:2c:9c:04:87:f4:37: 45:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:B9:A4:B3:3D:26:74:05:51:D7:E0:ED:4C:25:87:91:4A:45:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/466f6df5-9580-3849-bf40-eeaab04c5e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:0e:f9:cd:bf:6f:96:a7:5a:34:23:24:cb:0e:c8:5a:c4:58: 93:6d:56:2d:e5:46:51:87:8a:db:5c:6b:d2:74:1f:70:ce:81: a0:e6:a6:f1:6f:b3:e4:f8:74:69:c9:03:a7:64:76:7b:cd:d3: ab:c7:e8:06:3a:44:86:e2:20:77:0f:3c:6e:a7:7c:7a:12:11: ac:75:54:23:51:d3:15:40:f2:53:67:50:d4:2b:83:f6:ac:a2: ac:a7:4e:81:f4:2a:a6:b3:2e:12:78:89:44:66:57:20:1e:e6: 6d:84:56:4a:f6:9c:2c:4a:a3:4a:0c:a9:c8:7b:7b:71:46:4b: 62:c4:a6:4e:1a:e3:eb:21:21:ad:81:bf:83:6e:79:35:6b:79: 13:c4:aa:d5:5c:34:36:66:b4:5f:83:7a:e1:c4:fe:c9:98:66: 3c:f8:ec:10:77:d0:b1:ca:ea:70:12:ba:32:4c:24:95:ad:6f: 06:ab:f7:c0:9d:eb:d2:38:45:d0:af:f0:41:b8:02:65:ef:48: cd:5a:3b:30:e5:ea:f8:63:e5:00:96:72:69:18:61:09:61:a3: 9f:8c:64:3d:7f:82:f7:24:c6:37:1b:e5:f5:b5:64:b0:fc:78: 2f:59:09:ba:02:d3:54:3d:fc:47:c2:a4:24:40:98:00:bd:ce: 69:a6:88:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF4MGG18i8DRvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZTRhMDJhM2MtMjMxOS00M2YxLWE0OGYtYTgxYzIxMTI4ZTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo4EJDr44Wcku/RLbrxfVCBWX/UG5rHPoWhU 3D8848Gi2RWUIOjQHrS4TzNXwI0DW3Op9lg2OyHTq+4n/Gkcy0ESmwZjal3o92JF dodUFCuRfhbEy+0t5L4WB4ATiKCva43rNj4P/PHsrT4szflH+a+foZmq92H5m5Tp Hl/Pu8d4ulgkXftQqI9/X6DrwycdtTra06HrDaQgKk6+5NAmpUNzf/25tayhJ8qN qEfAS1dRNRVWAKqTOojpgjTg/NX12032FOjhMWn66wYT7lpZ5ajitEuPYBGz2XMU F+3xcDWvdtgEZKNrRhHFHxkqkk3KfhWsMLWCINssnASH9DdFrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3iuaSzPSZ0BVHX4O1MJYeRSkUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDY2ZjZkZjUtOTU4MC0z ODQ5LWJmNDAtZWVhYWIwNGM1ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDYhAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwO+c2/b5anWjQjJMsOyFrEWJNtVi3lRlGHittca9J0H3DOgaDmpvFv s+T4dGnJA6dkdnvN06vH6AY6RIbiIHcPPG6nfHoSEax1VCNR0xVA8lNnUNQrg/as oqynToH0KqazLhJ4iURmVyAe5m2EVkr2nCxKo0oMqch7e3FGS2LEpk4a4+shIa2B v4NueTVreRPEqtVcNDZmtF+DeuHE/smYZjz47BB30LHK6nASujJMJJWtbwar98Cd 69I4RdCv8EG4AmXvSM1aOzDl6vhj5QCWcmkYYQlho5+MZD1/gvckxjcb5fW1ZLD8 eC9ZCboC01Q9/EfCpCRAmAC9zmmmiCo= -----END CERTIFICATE-----Generated at Sun Apr 27 03:58:20 2025 by rpki-client