$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa File: 0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa (raw, json) Hash identifier: ndwpwNqwIeF2jF+/vAIA9MCkRZBACiq1uTkbojqkO7Y= Subject key identifier: 71:EE:49:80:F5:BE:D3:A3:D5:90:2A:F6:60:F9:79:B3:24:96:50:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2110548E417587BFE8E4820 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 36471 IP address blocks: 209.255.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:05:48:e4:17:58:7b:fe:8e:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=30620e1b-5edb-46fc-9e79-a16ae65d72ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:67:0a:99:f2:af:9c:ac:84:e4:5e:ed:f7:fb: 4e:e2:58:90:d5:43:3b:4b:c2:71:d6:fc:6c:57:f2: 08:de:fa:e1:53:29:ff:d2:c9:b8:9a:7f:fa:85:f5: 3d:ac:61:bd:ab:67:9c:ce:af:2d:41:e3:e2:ae:10: 7b:77:78:c4:fc:38:a9:58:3a:ab:c5:52:b6:15:85: d3:f8:30:d5:99:a7:66:7c:68:dc:94:cc:e8:7d:4a: fc:aa:0b:ae:9e:de:e8:2e:11:d8:2a:c3:d2:bd:40: b2:93:a7:ad:0d:94:b9:3a:b8:84:c7:cc:8e:44:79: 4e:9e:68:75:65:af:c2:d3:92:2b:8c:b5:a7:4c:bf: 4b:18:cf:7c:aa:f5:37:bf:58:9c:39:29:39:9b:45: 4f:4a:58:0b:49:67:54:8b:41:4b:57:e5:01:73:1e: f9:f7:55:14:fe:6e:eb:a3:09:70:ea:25:1f:b4:92: 10:e7:c8:0b:5a:18:7f:75:e4:57:72:30:13:69:62: 19:c5:a9:74:ad:94:be:00:3c:32:16:f5:fc:e0:d8: fc:52:45:41:36:76:74:13:a0:cd:5e:c9:2c:2d:dd: e3:26:0c:ba:be:91:3c:70:72:c3:c8:7e:75:bf:ac: 30:7b:57:a0:64:5c:16:3a:b9:46:25:d0:e0:aa:0d: 09:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EE:49:80:F5:BE:D3:A3:D5:90:2A:F6:60:F9:79:B3:24:96:50:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a77814a-3c28-3da2-ac94-b7c6e1e40527.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:cd:59:10:51:af:c0:0e:c6:bd:f9:76:83:d7:c2:a7:7f:2d: 84:40:b2:0d:08:7f:87:39:4d:e0:3a:11:f9:86:a1:89:48:66: 04:29:67:fc:58:5d:1d:6d:01:f0:6b:e9:ae:22:fc:cc:ea:39: 62:c2:af:49:a7:94:ab:97:be:59:a7:c0:a7:f0:02:ae:7f:b5: 98:c3:db:f2:2a:7e:25:dd:d8:2c:c1:d2:2f:d9:4f:98:da:4d: 84:6a:95:00:7b:96:db:c9:81:59:10:22:fe:84:df:68:a5:1d: 29:d4:06:c7:71:41:28:9d:fa:ce:6a:42:b7:f3:5c:b8:71:c4: ae:68:22:69:01:5d:8e:7e:41:64:f0:68:84:3e:b5:54:f2:a4: 69:67:24:58:be:34:45:98:37:50:9a:77:59:48:0d:52:24:7a: 1d:65:90:81:e7:95:f7:b9:9a:f8:e9:7c:ab:11:8c:dc:de:7c: 4f:42:e8:98:4c:4c:88:aa:93:ab:ee:b6:8b:16:8a:d5:52:88: 7f:b1:e8:03:64:1b:f6:da:47:8c:9a:fa:6e:ff:49:8b:88:be: 69:8e:ec:a0:35:ce:52:97:2a:d8:96:38:82:55:c1:df:f4:cd: fd:e2:70:0c:0e:b5:43:3c:98:93:9b:81:e3:d9:e5:6e:0f:5d: ac:d8:a1:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQVI5BdYe/6OSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzA2MjBlMWItNWVkYi00NmZjLTllNzktYTE2YWU2NWQ3MmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2cKmfKvnKyE5F7t9/tO4liQ1UM7S8Jx1vxs V/II3vrhUyn/0sm4mn/6hfU9rGG9q2eczq8tQePirhB7d3jE/DipWDqrxVK2FYXT +DDVmadmfGjclMzofUr8qguunt7oLhHYKsPSvUCyk6etDZS5OriEx8yORHlOnmh1 Za/C05IrjLWnTL9LGM98qvU3v1icOSk5m0VPSlgLSWdUi0FLV+UBcx7591UU/m7r owlw6iUftJIQ58gLWhh/deRXcjATaWIZxal0rZS+ADwyFvX84Nj8UkVBNnZ0E6DN XsksLd3jJgy6vpE8cHLDyH51v6wwe1egZFwWOrlGJdDgqg0J3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHuSYD1vtOj1ZAq9mD5ebMkllBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE3NzgxNGEtM2MyOC0z ZGEyLWFjOTQtYjdjNmUxZTQwNTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7NWRBRr8AOxr35doPXwqd/LYRAsg0If4c5TeA6EfmGoYlIZgQpZ/xY XR1tAfBr6a4i/MzqOWLCr0mnlKuXvlmnwKfwAq5/tZjD2/IqfiXd2CzB0i/ZT5ja TYRqlQB7ltvJgVkQIv6E32ilHSnUBsdxQSid+s5qQrfzXLhxxK5oImkBXY5+QWTw aIQ+tVTypGlnJFi+NEWYN1Cad1lIDVIkeh1lkIHnlfe5mvjpfKsRjNzefE9C6JhM TIiqk6vutosWitVSiH+x6ANkG/baR4ya+m7/SYuIvmmO7KA1zlKXKtiWOIJVwd/0 zf3icAwOtUM8mJObgePZ5W4PXazYoeU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:21:18 2025 by rpki-client