$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa File: 1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa (raw, json) Hash identifier: z+B3LywhQTbfrVZiNH+yv9JlwthwO06ZRk8FPbub+Jo= Subject key identifier: 29:D5:4B:78:2C:7B:66:DF:09:11:2F:35:89:D6:E3:EC:1C:DE:99:39 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EFDC71B8D3B8358AC390 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 72.4.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ef:dc:71:b8:d3:b8:35:8a:c3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2ed5cde6-b45e-42cb-938e-5ec972cccc16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:00:5c:c9:ad:90:e0:0b:9c:b4:11:bc:f1: 91:fe:e4:2a:df:79:b9:27:a7:59:3a:94:a3:0c:d8: 14:64:77:e1:fe:68:03:20:3a:e0:5e:7f:98:6c:61: 52:6e:0d:3c:95:f0:c2:f7:2e:a7:0c:3c:bc:36:fd: a6:44:35:5f:ab:1d:89:4d:07:0c:b1:23:38:75:4e: ee:94:50:4a:e0:4a:71:8f:bb:1e:46:76:2e:85:a2: 81:44:83:fe:df:b2:4f:9e:ce:89:2e:0e:9d:4f:0b: 07:c9:b0:60:62:6b:52:eb:66:95:42:31:aa:91:e9: ed:b6:44:f3:14:ac:8a:df:6e:6f:e5:25:de:8f:14: 65:cc:20:a6:a4:43:dd:f8:25:a5:b4:20:e5:f0:8f: 3f:06:fc:fe:7a:b0:a7:81:1b:68:f7:52:ef:ff:26: 9a:5e:0e:78:e8:14:77:7f:d2:cb:1a:33:98:31:22: 1b:0b:38:94:92:fa:2b:87:4d:60:26:ea:67:3f:c6: b6:23:e9:83:d7:08:7c:2f:a6:bf:a8:37:e2:8c:d2: ab:4e:05:3c:12:9c:9f:b3:37:19:61:3f:fb:65:2b: a2:9d:48:b3:cd:df:77:a2:0c:81:a6:ff:57:f1:d0: ac:9d:6a:62:6e:72:c2:60:d8:51:44:74:cc:c0:f5: 7a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D5:4B:78:2C:7B:66:DF:09:11:2F:35:89:D6:E3:EC:1C:DE:99:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1a9cfe-62ae-33c5-9512-caf264f0a3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.4.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:63:b6:31:58:cc:b8:84:e3:0d:48:24:ea:1b:69:fd:27:53: a5:69:da:e1:2b:4b:5d:aa:cb:95:1e:b5:8d:7a:a8:e6:32:2f: 56:b2:8d:3d:24:12:c8:f0:0d:e8:55:dc:82:eb:38:39:ee:26: 31:91:f7:be:e0:c5:1e:31:d2:41:b2:3b:81:57:42:32:b0:cd: 94:a1:31:b9:24:1d:31:1b:7f:6d:7e:28:5d:ce:ed:09:a4:24: 77:6e:fc:30:8e:3e:af:74:64:21:fe:00:6b:68:2e:f3:82:1e: c7:09:26:13:50:18:5f:05:73:07:2b:59:57:6b:fa:7c:30:c5: b9:08:1f:4e:f3:33:96:c7:c5:d8:dd:8b:ab:f7:c3:24:30:f4: 06:40:35:02:ca:ad:a9:9c:95:8d:db:69:fb:55:5b:e4:4a:a8: 7d:fa:2f:da:d0:cc:e7:8e:00:e1:cf:1c:c7:e8:8f:dc:ab:c4: 57:53:ec:1d:4b:e6:ac:f5:1b:95:0d:be:9a:82:a4:fe:c9:5d: cf:15:03:11:23:1a:66:8d:95:c9:fb:c6:f9:d7:ef:ca:3c:43: d0:51:e3:3b:e5:94:d1:06:1d:fd:56:ab:14:43:d7:6d:65:a9: 70:e0:15:1f:e2:c2:0e:36:f4:2c:b2:1d:e1:40:e7:2b:16:14: b3:2f:dd:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO/ccbjTuDWKw5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MmVkNWNkZTYtYjQ1ZS00MmNiLTkzOGUtNWVjOTcyY2NjYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxokAXMmtkOALnLQRvPGR/uQq33m5J6dZOpSj DNgUZHfh/mgDIDrgXn+YbGFSbg08lfDC9y6nDDy8Nv2mRDVfqx2JTQcMsSM4dU7u lFBK4Epxj7seRnYuhaKBRIP+37JPns6JLg6dTwsHybBgYmtS62aVQjGqkenttkTz FKyK325v5SXejxRlzCCmpEPd+CWltCDl8I8/Bvz+erCngRto91Lv/yaaXg546BR3 f9LLGjOYMSIbCziUkvorh01gJupnP8a2I+mD1wh8L6a/qDfijNKrTgU8EpyfszcZ YT/7ZSuinUizzd93ogyBpv9X8dCsnWpibnLCYNhRRHTMwPV6HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCnVS3gse2bfCREvNYnW4+wc3pk5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxYTljZmUtNjJhZS0z M2M1LTk1MTItY2FmMjY0ZjBhM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSATAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJjtjFYzLiE4w1IJOobaf0nU6Vp2uErS12qy5UetY16qOYyL1ayjT0k EsjwDehV3ILrODnuJjGR977gxR4x0kGyO4FXQjKwzZShMbkkHTEbf21+KF3O7Qmk JHdu/DCOPq90ZCH+AGtoLvOCHscJJhNQGF8FcwcrWVdr+nwwxbkIH07zM5bHxdjd i6v3wyQw9AZANQLKramclY3baftVW+RKqH36L9rQzOeOAOHPHMfoj9yrxFdT7B1L 5qz1G5UNvpqCpP7JXc8VAxEjGmaNlcn7xvnX78o8Q9BR4zvllNEGHf1WqxRD121l qXDgFR/iwg429CyyHeFA5ysWFLMv3Rg= -----END CERTIFICATE-----Generated at Fri Mar 14 08:41:20 2025 by rpki-client