$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa File: 10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa (raw, json) Hash identifier: qJUy7IqlGh6eGF3D/U8UJGvOT/VZwjSBUjXYVMlWo3U= Subject key identifier: E4:13:C3:EF:7B:59:8C:72:8B:DC:D7:B7:9A:4A:D8:E5:00:A7:71:FD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21125E0686906223D5B1480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 207.69.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:25:e0:68:69:06:22:3d:5b:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ef86f3ad-ba77-4ca1-90aa-944d2932c1e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1e:16:e1:10:14:c2:27:b5:0d:96:50:96:84: b9:41:d2:f4:c5:55:8b:9d:07:f4:a2:6b:7b:21:fe: ca:9a:ec:7c:93:1c:af:d3:ca:a8:b9:1b:45:f4:6b: 25:f3:57:17:c7:c9:e4:88:ae:55:f9:70:c3:32:24: c0:bc:53:31:c1:10:72:09:dc:ed:83:50:a8:49:c8: 34:74:04:5a:eb:26:af:73:78:96:d4:d5:2b:9e:4f: 29:5a:44:db:8d:bb:ea:13:e3:6f:73:66:f2:19:eb: dc:23:69:e9:14:28:3b:3c:b9:d9:20:38:2c:dc:94: 1d:47:85:00:91:63:70:f2:d6:09:e0:6d:b6:a9:ac: 64:fa:4a:5e:09:e1:ff:c3:32:6d:2e:dd:82:5c:80: 50:32:b4:09:cd:8b:76:0c:81:b2:56:70:cb:60:95: d4:95:68:e8:42:65:4c:07:90:0a:8d:87:4e:2d:05: 21:58:08:89:88:aa:f2:8c:42:3e:5c:d9:7b:0a:a9: b5:a5:f4:30:7d:44:f9:68:fa:75:48:22:c4:9f:9d: 02:97:85:58:e3:6d:07:6e:2c:69:c1:ee:b6:01:95: 85:6e:a5:2e:ae:31:b1:02:db:52:d6:2b:57:fa:07: 52:10:65:0e:f9:90:7c:08:95:66:b0:ca:63:94:6c: 77:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:13:C3:EF:7B:59:8C:72:8B:DC:D7:B7:9A:4A:D8:E5:00:A7:71:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10b95a4e-359e-311d-9432-cbe17e9bd1ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.69.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:04:47:48:f1:aa:b9:3b:99:eb:e1:f6:30:c7:ad:a8:2d:9d: 32:8e:5d:75:b7:4c:16:b9:58:bd:fc:dd:9e:db:71:65:14:f1: e4:ea:02:0c:f8:3a:76:aa:39:65:00:ca:23:9f:09:4e:a2:e8: 91:2e:12:9c:7c:de:67:73:d6:cf:0e:2d:39:a1:00:2d:5e:11: fa:c3:1d:59:54:79:06:b2:d8:93:2b:85:fc:88:e3:ff:ca:31: 5f:04:9c:65:6e:dc:8c:e2:13:e3:93:64:65:52:25:7d:a7:9e: f7:2f:50:ec:23:49:72:ac:10:a8:ac:a3:10:4b:3e:76:d4:eb: 99:01:ad:f6:c1:2d:a3:20:9a:a6:1a:bb:4f:c7:27:56:4e:45: ee:03:cf:da:a8:a2:77:2a:d0:91:39:31:43:c5:43:c1:de:64: 94:10:59:85:8a:e1:19:5e:72:23:ba:be:e5:4e:2a:6c:92:18: e2:46:d2:7b:43:b2:ee:ab:8f:54:c3:83:1b:9f:49:54:92:d2: 59:6b:e1:0e:62:c1:2a:3f:59:86:21:83:22:cf:e2:e5:6d:62: 23:b7:18:9d:5e:03:b9:11:d2:b4:ab:00:fa:a9:03:0d:27:fc: de:fd:a5:90:a4:fd:6f:01:d8:a7:8c:ae:7d:c7:b1:b8:2b:a4: 3d:b5:93:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESXgaGkGIj1bFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWY4NmYzYWQtYmE3Ny00Y2ExLTkwYWEtOTQ0ZDI5MzJjMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB4W4RAUwie1DZZQloS5QdL0xVWLnQf0omt7 If7Kmux8kxyv08qouRtF9Gsl81cXx8nkiK5V+XDDMiTAvFMxwRByCdztg1CoScg0 dARa6yavc3iW1NUrnk8pWkTbjbvqE+Nvc2byGevcI2npFCg7PLnZIDgs3JQdR4UA kWNw8tYJ4G22qaxk+kpeCeH/wzJtLt2CXIBQMrQJzYt2DIGyVnDLYJXUlWjoQmVM B5AKjYdOLQUhWAiJiKryjEI+XNl7Cqm1pfQwfUT5aPp1SCLEn50Cl4VY420Hbixp we62AZWFbqUurjGxAttS1itX+gdSEGUO+ZB8CJVmsMpjlGx3dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQTw+97WYxyi9zXt5pK2OUAp3H9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTBiOTVhNGUtMzU5ZS0z MTFkLTk0MzItY2JlMTdlOWJkMWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz0W8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgER0jxqrk7mevh9jDHragtnTKOXXW3TBa5WL383Z7bcWUU8eTqAgz4 OnaqOWUAyiOfCU6i6JEuEpx83mdz1s8OLTmhAC1eEfrDHVlUeQay2JMrhfyI4//K MV8EnGVu3IziE+OTZGVSJX2nnvcvUOwjSXKsEKisoxBLPnbU65kBrfbBLaMgmqYa u0/HJ1ZORe4Dz9qooncq0JE5MUPFQ8HeZJQQWYWK4RleciO6vuVOKmySGOJG0ntD su6rj1TDgxufSVSS0llr4Q5iwSo/WYYhgyLP4uVtYiO3GJ1eA7kR0rSrAPqpAw0n /N79pZCk/W8B2KeMrn3HsbgrpD21k7Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:42 2025 by rpki-client