$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61065ce0-2cbc-34f1-a3b6-3a0d0e15e835.roa File: 61065ce0-2cbc-34f1-a3b6-3a0d0e15e835.roa (raw, json) Hash identifier: B5Ex6kEMtKmmJdVO3eagwKcHHTQkchdBMJhIKZTY4bM= Subject key identifier: 42:7A:FA:9B:C5:1C:E1:D2:9B:E7:E2:21:41:13:97:53:06:D2:0E:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DF4496BE1D4EB5CA68CF3F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61065ce0-2cbc-34f1-a3b6-3a0d0e15e835.roa Signing time: Thu 13 Feb 2025 19:30:21 +0000 ROA not before: Thu 13 Feb 2025 19:30:21 +0000 ROA not after: Wed 14 May 2025 18:30:21 +0000 asID: 7029 IP address blocks: 98.17.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:df:44:96:be:1d:4e:b5:ca:68:cf:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 13 19:30:21 2025 GMT Not After : May 14 18:30:21 2025 GMT Subject: CN=ee24140b-f330-4b08-bd14-18a199da64bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bf:50:5b:30:39:11:b8:c2:0d:81:de:77:e1: 09:8c:6f:42:49:81:1b:39:96:d4:39:40:10:24:33: da:02:ec:a9:a3:20:57:69:75:6f:ef:a6:11:42:a5: 04:df:a4:fc:73:53:8e:17:a3:d1:d7:f6:b2:ec:c5: 3f:0f:29:a3:45:1a:e9:b2:e2:01:6e:c6:21:63:6f: 8d:30:f3:0a:e8:c4:a1:f4:9f:24:cc:36:31:75:cf: 65:32:72:12:e4:1d:90:47:de:2f:91:37:e9:8b:6a: ef:4e:11:9f:88:12:69:81:91:90:f3:8c:a0:37:6c: 99:2d:2f:35:f3:cc:a0:95:75:99:a3:6b:91:84:48: 31:80:90:97:b8:60:ee:54:3d:6e:d0:31:3b:9e:eb: ae:f9:f1:a5:31:d1:61:82:e5:ab:d5:18:4f:f7:b3: 24:38:5a:9c:0c:18:55:68:53:10:7d:5f:36:e6:14: 5b:a0:25:b1:e4:2b:42:4f:f0:01:64:a9:1d:cf:12: 09:55:0d:ea:6f:a7:da:43:f7:20:84:26:85:0a:67: cc:df:61:fa:91:ec:e1:2c:0f:52:77:79:f7:8c:e4: 75:03:86:4a:64:00:72:8c:03:98:20:0b:6a:98:55: 64:00:37:5a:60:3f:67:81:ee:6d:3c:25:76:49:cf: 67:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7A:FA:9B:C5:1C:E1:D2:9B:E7:E2:21:41:13:97:53:06:D2:0E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/61065ce0-2cbc-34f1-a3b6-3a0d0e15e835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 98.17.182.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:e4:ce:b7:4c:e1:10:c3:36:d1:b0:fd:8e:7e:9c:14:7e:d0: 2b:3e:63:d7:d4:6d:eb:78:71:10:71:4f:7e:26:3b:7b:98:04: 89:2f:45:73:d8:59:b9:2a:16:39:9b:84:b9:81:92:8e:df:b3: cb:c6:0f:e8:2c:90:79:38:1f:2b:c3:11:5f:63:f2:26:8b:68: 1f:55:d9:c1:02:99:84:bd:41:ca:70:58:62:b1:bc:9e:56:e0: 0f:b8:0c:db:24:56:37:79:4f:bf:7f:5c:52:87:91:d4:ed:d9: 49:8b:02:44:dd:06:19:5c:53:7a:36:76:41:46:c2:3e:d3:4e: e7:a5:31:e2:b1:97:36:76:2b:24:e4:70:ae:d6:a5:6f:c5:ed: 40:31:1a:1e:24:26:98:4d:0b:3a:8a:18:43:89:02:d6:b3:8a: d4:4d:80:c4:47:65:5b:29:d6:10:05:82:e5:3e:c2:19:2c:b3: 95:15:5a:35:e0:ed:a0:a0:0f:07:66:4c:ab:ef:5f:03:ee:f6: 32:74:b2:ea:1b:12:72:cd:8c:d4:ce:2b:9e:e4:44:db:ad:b1: 61:53:de:12:42:8c:42:2c:81:3e:0b:9d:48:32:3f:24:e3:da: ac:1d:f7:8e:80:7a:fe:21:6d:59:e3:ae:db:42:85:de:9c:c8: 93:7b:55:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjfRJa+HU61ymjPP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMzE5MzAyMVoXDTI1MDUxNDE4MzAyMVowLzEtMCsGA1UEAxMk ZWUyNDE0MGItZjMzMC00YjA4LWJkMTQtMThhMTk5ZGE2NGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx79QWzA5EbjCDYHed+EJjG9CSYEbOZbUOUAQ JDPaAuypoyBXaXVv76YRQqUE36T8c1OOF6PR1/ay7MU/DymjRRrpsuIBbsYhY2+N MPMK6MSh9J8kzDYxdc9lMnIS5B2QR94vkTfpi2rvThGfiBJpgZGQ84ygN2yZLS81 88yglXWZo2uRhEgxgJCXuGDuVD1u0DE7nuuu+fGlMdFhguWr1RhP97MkOFqcDBhV aFMQfV825hRboCWx5CtCT/ABZKkdzxIJVQ3qb6faQ/cghCaFCmfM32H6kezhLA9S d3n3jOR1A4ZKZAByjAOYIAtqmFVkADdaYD9nge5tPCV2Sc9noQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ6+pvFHOHSm+fiIUETl1MG0g5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjEwNjVjZTAtMmNiYy0z NGYxLWEzYjYtM2EwZDBlMTVlODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYhG2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjkzrdM4RDDNtGw/Y5+nBR+0Cs+Y9fUbet4cRBxT34mO3uYBIkvRXPY WbkqFjmbhLmBko7fs8vGD+gskHk4HyvDEV9j8iaLaB9V2cECmYS9QcpwWGKxvJ5W 4A+4DNskVjd5T79/XFKHkdTt2UmLAkTdBhlcU3o2dkFGwj7TTuelMeKxlzZ2KyTk cK7WpW/F7UAxGh4kJphNCzqKGEOJAtazitRNgMRHZVsp1hAFguU+whkss5UVWjXg 7aCgDwdmTKvvXwPu9jJ0suobEnLNjNTOK57kRNutsWFT3hJCjEIsgT4LnUgyPyTj 2qwd946Aev4hbVnjrttChd6cyJN7VQI= -----END CERTIFICATE-----Generated at Sun Apr 27 10:25:43 2025 by rpki-client