$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15a96ddd-ca61-3ff2-ae16-99eda44b4fa3.roa File: 15a96ddd-ca61-3ff2-ae16-99eda44b4fa3.roa (raw, json) Hash identifier: kZ7g0WWjRdFdl25IK9kT0RPQaqUsupMT5ZDPkIrrkmM= Subject key identifier: BA:7F:92:15:95:F1:14:EA:96:DB:A1:F6:63:38:1D:31:30:BD:E1:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112534047EAE5E8BFCF680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15a96ddd-ca61-3ff2-ae16-99eda44b4fa3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 206.252.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:25:34:04:7e:ae:5e:8b:fc:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4e28bd21-6301-4709-bcdf-583c85a793a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:1c:02:10:f1:d4:ee:98:6e:d2:8b:ca:bf: 14:14:c6:3d:23:69:4c:67:17:f5:12:da:12:02:4c: 07:cd:db:27:3a:e0:d0:fb:66:03:11:bd:24:11:77: d8:1f:55:eb:30:97:ec:3a:ad:cd:c3:f6:50:53:6e: e7:a2:41:bd:b2:42:04:a0:00:4e:fa:b1:42:7d:22: ab:0f:81:78:61:ee:13:fb:a7:7b:56:f7:80:46:d7: b1:fb:2b:9e:69:08:c2:af:84:b7:33:86:18:68:c7: 19:f9:ac:a7:32:d5:80:65:3d:b2:9d:2e:7c:fd:21: dc:66:ac:83:cf:48:c4:3c:ee:30:5b:41:30:cc:a0: 70:be:50:b9:00:af:58:d0:6d:1a:19:cc:cd:30:4f: 9d:6e:9b:f1:bc:87:8d:89:f7:8d:5c:c4:a7:35:36: ff:49:b0:67:ab:18:a0:62:23:a9:56:41:d8:39:f9: ea:40:37:aa:82:13:17:97:e4:f0:92:86:3a:bc:de: 3c:70:46:85:c2:9f:4b:4c:d6:b4:3b:83:0f:bd:ec: 85:15:f6:5b:b0:47:2e:a4:f3:4e:54:f7:93:f2:eb: a5:49:5b:1d:95:82:af:46:2d:62:c4:46:f4:e9:0d: 20:86:8e:30:67:28:0b:df:b1:ea:29:13:ff:7e:d8: dd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7F:92:15:95:F1:14:EA:96:DB:A1:F6:63:38:1D:31:30:BD:E1:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15a96ddd-ca61-3ff2-ae16-99eda44b4fa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 206.252.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:39:97:35:56:08:a8:06:c2:d6:d7:d9:f8:51:2c:0c:e5:ad: e1:9c:3a:4e:a0:13:7c:37:99:b2:93:33:7b:cd:47:12:5b:90: 67:5c:12:5e:8e:1e:9e:3b:dc:8a:81:69:0c:76:11:ef:b1:27: 28:26:33:99:af:b9:da:8d:a2:d7:6e:00:a7:f9:9c:fa:d5:97: c2:dc:4e:ca:57:4b:0e:59:43:45:23:28:b2:46:9f:17:1e:68: 76:dc:63:81:f4:68:7b:80:5e:c1:53:4f:f9:4a:36:de:ad:16: ca:e1:31:d3:d3:7e:b6:36:c2:31:e0:3f:4b:39:77:15:8d:15: 7a:05:72:40:cd:54:82:6c:1f:3c:f3:6f:3f:eb:58:fc:f4:66: de:7f:af:7a:62:5a:41:43:a2:e3:12:9d:f2:91:b2:37:c2:52: 22:d4:e0:57:98:82:a4:24:a0:6a:48:4d:e7:29:8e:c6:2a:07: 0e:67:e9:62:61:e2:a6:69:22:1a:84:71:ee:51:45:a6:a0:3a: c0:64:da:1e:f3:28:7f:2c:58:d1:ae:6c:97:a6:1e:af:13:f3: 0b:0e:c5:2a:38:8c:08:32:6e:ad:73:02:d3:cf:b3:00:10:6b: aa:b8:fd:d4:b0:3e:dc:2b:75:37:d9:d5:d2:93:c9:e2:10:95: c5:7b:13:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESU0BH6uXov89oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGUyOGJkMjEtNjMwMS00NzA5LWJjZGYtNTgzYzg1YTc5M2EwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2kcAhDx1O6YbtKLyr8UFMY9I2lMZxf1EtoS AkwHzdsnOuDQ+2YDEb0kEXfYH1XrMJfsOq3Nw/ZQU27nokG9skIEoABO+rFCfSKr D4F4Ye4T+6d7VveARtex+yueaQjCr4S3M4YYaMcZ+aynMtWAZT2ynS58/SHcZqyD z0jEPO4wW0EwzKBwvlC5AK9Y0G0aGczNME+dbpvxvIeNifeNXMSnNTb/SbBnqxig YiOpVkHYOfnqQDeqghMXl+TwkoY6vN48cEaFwp9LTNa0O4MPveyFFfZbsEcupPNO VPeT8uulSVsdlYKvRi1ixEb06Q0gho4wZygL37HqKRP/ftjdUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp/khWV8RTqltuh9mM4HTEwveEjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTVhOTZkZGQtY2E2MS0z ZmYyLWFlMTYtOTllZGE0NGI0ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzvygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs5lzVWCKgGwtbX2fhRLAzlreGcOk6gE3w3mbKTM3vNRxJbkGdcEl6O Hp473IqBaQx2Ee+xJygmM5mvudqNotduAKf5nPrVl8LcTspXSw5ZQ0UjKLJGnxce aHbcY4H0aHuAXsFTT/lKNt6tFsrhMdPTfrY2wjHgP0s5dxWNFXoFckDNVIJsHzzz bz/rWPz0Zt5/r3piWkFDouMSnfKRsjfCUiLU4FeYgqQkoGpITecpjsYqBw5n6WJh 4qZpIhqEce5RRaagOsBk2h7zKH8sWNGubJemHq8T8wsOxSo4jAgybq1zAtPPswAQ a6q4/dSwPtwrdTfZ1dKTyeIQlcV7E+s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:13 2025 by rpki-client