$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa File: 5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa (raw, json) Hash identifier: +oCAP8Nmi1OOcELVwXyi3fyVLdhDkjulDEvdO6tO8pA= Subject key identifier: ED:89:FB:F4:83:99:B3:18:5B:8C:33:FD:1C:26:6B:A7:EB:34:84:E4 Certificate issuer: /CN=8be3c3cb-836c-410b-a9f9-d19be851c4c1 Certificate serial: 010D0C9F43285848E2D11CC3FEDBF64362643190 Authority key identifier: A8:5C:E4:3D:DC:8B:3F:16:48:9D:C9:FF:5A:47:72:10:25:DF:B0:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 7238 IP address blocks: 144.198.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:1c:c3:fe:db:f6:43:62:64:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8be3c3cb-836c-410b-a9f9-d19be851c4c1 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=3c4911cf-c2ed-4ed7-8fe1-7a8516a1f993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bd:94:72:39:b6:1b:56:9f:d2:82:89:53:bc: f9:14:ba:ed:ae:44:a4:57:9c:49:e0:d4:d1:12:c2: 09:41:c5:cb:09:7f:e0:46:a3:1b:ca:06:b1:7a:2c: 7b:19:84:66:f1:a6:0e:1b:6c:da:34:c9:a9:0b:82: 29:0b:69:cd:1e:cd:7e:b4:c3:99:d9:04:65:e2:d6: 49:54:97:f6:3d:26:8d:72:00:36:6f:80:9e:7a:c6: 1a:7c:06:83:07:fe:5c:8e:6c:ca:be:42:03:b3:b5: 2a:ce:29:02:04:55:28:41:99:88:c8:47:2e:4e:4e: d4:7e:11:ee:a9:9f:14:e6:c3:d6:7c:06:06:31:ff: 42:43:a1:a5:9f:f6:c7:20:9f:49:0f:16:6d:c0:95: e7:e2:3e:55:68:05:44:8c:b2:64:e4:93:b8:01:62: d1:c4:3c:27:d3:8f:23:26:6d:fc:08:4c:93:bc:d5: db:44:b2:c4:5a:90:78:d0:e9:e2:9a:c4:06:c1:10: 8f:b2:17:0a:e6:67:ae:51:15:f2:f1:41:1b:1b:a2: 23:5f:7e:af:15:17:c5:db:da:45:61:dd:4a:e9:75: cb:a7:3f:33:fa:d8:f9:f1:93:49:be:62:45:ca:f2: 22:9b:ec:25:05:29:41:b2:21:16:03:c0:14:ae:da: 65:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:89:FB:F4:83:99:B3:18:5B:8C:33:FD:1C:26:6B:A7:EB:34:84:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/5049343c-d662-3c66-97f8-6e2d0ca3cd75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1/8be3c3cb-836c-410b-a9f9-d19be851c4c1.crl X509v3 Authority Key Identifier: keyid:A8:5C:E4:3D:DC:8B:3F:16:48:9D:C9:FF:5A:47:72:10:25:DF:B0:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8be3c3cb-836c-410b-a9f9-d19be851c4c1.cer sbgp-ipAddrBlock: critical IPv4: 144.198.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:13:b7:ba:05:4c:49:95:7e:89:52:df:8a:f6:95:0d:da:92: 63:55:d9:1f:95:ad:f5:f7:9a:53:fe:3f:da:d1:c7:db:e7:ab: 79:db:10:30:ab:0e:40:d4:62:1d:14:6c:f7:67:b2:34:72:3e: 42:84:ad:cf:ac:d9:1c:ce:fc:5e:80:8c:88:91:a3:9f:b2:62: a4:44:b3:c9:57:22:f6:a5:9c:8b:8d:d7:23:25:1a:38:f6:b4: 4f:91:59:1e:06:f0:7d:7c:ee:84:ad:73:f5:89:96:9f:5a:fb: 3a:7b:fc:76:3e:49:e4:99:f1:a1:1b:b6:5f:90:06:7c:b8:c8: 85:98:10:5d:77:37:5e:31:1e:e8:4b:0e:da:5c:1a:af:52:af: 5e:85:df:50:a1:d4:70:6a:98:32:86:b8:a3:57:9b:6e:1a:15: 98:51:4e:a7:5c:fd:3b:a6:e9:ea:83:ce:c7:d0:9e:99:80:eb: 53:2d:a4:c1:74:08:bb:fe:71:0f:f8:b5:a3:8c:8c:09:af:a6: 1b:aa:97:d5:53:29:93:4b:a8:37:50:49:12:bf:72:d7:31:fc: 02:b6:e2:0a:5b:f9:b4:5e:cd:1e:cd:eb:89:74:2d:51:9a:ae: 37:5c:ed:eb:ef:77:78:27:45:ef:6c:ad:3b:4a:3c:b9:39:9c: 99:cc:42:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0RzD/tv2Q2JkMZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGJlM2MzY2ItODM2Yy00MTBiLWE5ZjktZDE5YmU4NTFj NGMxMB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk M2M0OTExY2YtYzJlZC00ZWQ3LThmZTEtN2E4NTE2YTFmOTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmb2Ucjm2G1af0oKJU7z5FLrtrkSkV5xJ4NTR EsIJQcXLCX/gRqMbygaxeix7GYRm8aYOG2zaNMmpC4IpC2nNHs1+tMOZ2QRl4tZJ VJf2PSaNcgA2b4CeesYafAaDB/5cjmzKvkIDs7UqzikCBFUoQZmIyEcuTk7UfhHu qZ8U5sPWfAYGMf9CQ6Gln/bHIJ9JDxZtwJXn4j5VaAVEjLJk5JO4AWLRxDwn048j Jm38CEyTvNXbRLLEWpB40OnimsQGwRCPshcK5meuURXy8UEbG6IjX36vFRfF29pF Yd1K6XXLpz8z+tj58ZNJvmJFyvIim+wlBSlBsiEWA8AUrtpl6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2J+/SDmbMYW4wz/Rwma6frNITkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84YmUz YzNjYi04MzZjLTQxMGItYTlmOS1kMTliZTg1MWM0YzEvNTA0OTM0M2MtZDY2Mi0z YzY2LTk3ZjgtNmUyZDBjYTNjZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGJlM2MzY2ItODM2Yy00MTBiLWE5 ZjktZDE5YmU4NTFjNGMxLzhiZTNjM2NiLTgzNmMtNDEwYi1hOWY5LWQxOWJlODUx YzRjMS5jcmwwHwYDVR0jBBgwFoAUqFzkPdyLPxZIncn/WkdyECXfsOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84YmUzYzNjYi04MzZjLTQxMGItYTlmOS1kMTli ZTg1MWM0YzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkMYxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALATt7oFTEmVfolS34r2lQ3akmNV2R+VrfX3mlP+P9rRx9vnq3nbEDCr DkDUYh0UbPdnsjRyPkKErc+s2RzO/F6AjIiRo5+yYqREs8lXIvalnIuN1yMlGjj2 tE+RWR4G8H187oStc/WJlp9a+zp7/HY+SeSZ8aEbtl+QBny4yIWYEF13N14xHuhL DtpcGq9Sr16F31Ch1HBqmDKGuKNXm24aFZhRTqdc/Tum6eqDzsfQnpmA61MtpMF0 CLv+cQ/4taOMjAmvphuql9VTKZNLqDdQSRK/ctcx/AK24gpb+bRezR7N64l0LVGa rjdc7evvd3gnRe9srTtKPLk5nJnMQtY= -----END CERTIFICATE-----Generated at Fri Mar 14 11:09:26 2025 by rpki-client