$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa File: 5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa (raw, json) Hash identifier: NWFSeLHPuyi83EbVtmUQdK6JbonIYAPjWodxRfoGIwM= Subject key identifier: FF:C4:58:1C:A1:DF:C9:D5:E6:FA:CB:B9:EC:DD:FD:D8:29:60:D2:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F2AAD09B0BD23421E1494880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa Signing time: Thu 20 Feb 2025 18:16:41 +0000 ROA not before: Thu 20 Feb 2025 18:16:41 +0000 ROA not after: Wed 21 May 2025 17:16:41 +0000 asID: 7029 IP address blocks: 98.16.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:aa:d0:9b:0b:d2:34:21:e1:49:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 18:16:41 2025 GMT Not After : May 21 17:16:41 2025 GMT Subject: CN=efbdf397-da14-4626-a0f4-ac231b7fe2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:57:a6:67:81:2b:d3:88:a6:c3:12:61:89:27: ad:b8:96:eb:7c:17:92:d4:41:90:22:6c:52:18:67: 21:93:79:a5:27:0d:fa:0c:30:5b:de:da:9c:7b:6d: 3d:58:c1:ab:62:cb:b1:22:73:85:b9:b2:8c:46:61: 52:76:86:5a:56:f1:a6:68:89:8d:03:ca:ed:64:9e: 96:17:53:49:da:47:63:8d:5a:85:58:16:ac:cb:7e: 57:67:cb:9e:9a:5d:e9:9b:26:b5:ff:98:bb:d0:18: 45:73:70:7d:62:bd:14:a8:66:5d:71:7c:ad:a5:86: 22:4c:aa:dc:71:f7:35:1c:10:12:4b:c2:2c:53:5a: bb:9a:94:84:1f:79:ad:00:07:dc:ad:be:21:11:52: b9:c1:25:e7:b1:50:53:46:a6:c5:97:98:8c:5f:f7: b0:56:0e:a6:e4:12:f7:ec:00:c6:af:85:cf:a2:15: d3:23:88:0d:d0:f3:95:ae:0e:16:9d:20:c5:a4:32: 59:f3:53:b5:5b:14:77:2b:b4:97:e8:fa:f8:b4:71: 39:a8:c9:c4:f9:ce:0e:ee:4a:a4:c7:6a:08:47:bd: 37:25:ce:73:2c:9c:81:18:79:f0:4d:6c:4e:3a:16: b0:49:3f:2f:4d:cd:f7:cd:c2:9c:63:aa:74:8d:cd: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C4:58:1C:A1:DF:C9:D5:E6:FA:CB:B9:EC:DD:FD:D8:29:60:D2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5af03ba3-d6da-380c-9e77-cbc482f6dfe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.16.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:24:3e:24:f8:27:f8:d2:36:53:22:3e:7f:45:1b:68:6a:2e: 02:9d:01:c4:5a:46:d5:ef:9e:28:47:af:8f:cd:ca:7b:5e:84: dd:dd:cc:1e:f2:27:8d:9a:cc:73:58:9e:e7:78:cc:3a:d6:23: 72:0b:03:f3:28:2d:84:60:dc:3c:c6:35:22:62:7f:ea:8e:51: 2b:92:cc:40:2a:3f:ac:86:7d:c7:2d:d0:e8:21:e5:d4:0d:52: 14:c7:11:c6:d5:5a:54:dc:76:64:e3:ce:21:88:3e:9a:80:6f: 21:a0:55:74:8f:16:46:9e:a8:7e:ce:2b:b1:a7:5f:f9:76:76: d0:16:3f:f0:42:32:e4:ed:7c:c9:b1:e1:53:e9:e8:f7:02:73: f9:65:1e:03:c2:cc:dc:17:04:53:34:74:6a:cb:c2:a3:5c:eb: cc:1d:e6:94:1d:06:97:5f:6f:8a:b0:d3:30:80:a2:a0:2d:55: ec:58:82:d7:05:5a:b3:00:02:54:d3:5b:53:b0:8c:04:33:ca: d8:d7:02:94:0d:a8:6b:66:35:69:21:98:9a:5f:d4:28:b9:b6: 68:1f:24:2d:d2:a1:41:b0:58:d8:c4:e9:b8:5a:ba:24:6b:5b: fb:03:00:ee:41:17:78:cf:63:53:68:04:70:51:9c:84:61:ac: 2d:66:59:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyqtCbC9I0IeFJSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE4MTY0MVoXDTI1MDUyMTE3MTY0MVowLzEtMCsGA1UEAxMk ZWZiZGYzOTctZGExNC00NjI2LWEwZjQtYWMyMzFiN2ZlMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolemZ4Er04imwxJhiSetuJbrfBeS1EGQImxS GGchk3mlJw36DDBb3tqce209WMGrYsuxInOFubKMRmFSdoZaVvGmaImNA8rtZJ6W F1NJ2kdjjVqFWBasy35XZ8ueml3pmya1/5i70BhFc3B9Yr0UqGZdcXytpYYiTKrc cfc1HBASS8IsU1q7mpSEH3mtAAfcrb4hEVK5wSXnsVBTRqbFl5iMX/ewVg6m5BL3 7ADGr4XPohXTI4gN0POVrg4WnSDFpDJZ81O1WxR3K7SX6Pr4tHE5qMnE+c4O7kqk x2oIR703Jc5zLJyBGHnwTWxOOhawST8vTc33zcKcY6p0jc3vwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/EWByh38nV5vrLuezd/dgpYNJSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWFmMDNiYTMtZDZkYS0z ODBjLTllNzctY2JjNDgyZjZkZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYhCuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYkPiT4J/jSNlMiPn9FG2hqLgKdAcRaRtXvnihHr4/NyntehN3dzB7y J42azHNYnud4zDrWI3ILA/MoLYRg3DzGNSJif+qOUSuSzEAqP6yGfcct0Ogh5dQN UhTHEcbVWlTcdmTjziGIPpqAbyGgVXSPFkaeqH7OK7GnX/l2dtAWP/BCMuTtfMmx 4VPp6PcCc/llHgPCzNwXBFM0dGrLwqNc68wd5pQdBpdfb4qw0zCAoqAtVexYgtcF WrMAAlTTW1OwjAQzytjXApQNqGtmNWkhmJpf1Ci5tmgfJC3SoUGwWNjE6bhauiRr W/sDAO5BF3jPY1NoBHBRnIRhrC1mWZ0= -----END CERTIFICATE-----Generated at Sun Apr 27 02:10:24 2025 by rpki-client