$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa File: 22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa (raw, json) Hash identifier: ZQa4oppvmF2c4p7lXU1LJ7vtf+LVFIwAv7qD+uxad8o= Subject key identifier: 93:18:0E:45:31:28:8F:3A:B4:92:DF:89:FF:FD:FC:76:74:D3:92:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EE52593895803AAB4FC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 70.43.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ee:52:59:38:95:80:3a:ab:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8831e55d-9b4e-4035-bfd9-1397af21ae18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:41:2f:db:81:7f:af:2e:e2:05:bf:e8:16:e6: 54:c1:cb:c6:da:8c:ce:47:94:62:34:ac:46:0e:4a: 2f:a3:41:d3:e2:25:ed:49:e6:eb:a1:43:ad:c4:70: 3f:df:82:36:da:c2:35:1d:13:90:23:17:48:da:1a: 77:bc:fc:71:49:aa:b6:50:eb:1a:38:35:ab:b6:19: c3:01:5e:19:60:7d:95:42:fc:75:15:e0:a7:33:ff: 05:57:86:37:49:3d:de:53:dd:cc:6d:33:f7:c0:9b: dd:e9:b3:61:25:bb:29:e9:0f:7c:46:b1:3d:e1:33: 26:6b:96:f0:de:a1:1e:73:98:63:4c:5a:c5:02:be: 9f:24:fd:6f:00:65:ba:84:e3:07:9d:fc:41:ed:a2: b6:82:50:dd:23:7d:22:6d:64:84:35:2c:12:e8:22: 18:8e:43:7b:7c:71:83:48:f9:8e:b4:1d:49:45:c0: 7f:95:b5:40:c4:05:df:0e:08:e7:d4:97:c1:0e:00: e1:fe:54:7a:6b:5f:56:76:81:d4:b7:35:6d:0e:db: 94:ea:fb:cf:6c:39:d0:e2:21:79:f7:60:f2:b9:1c: 22:6f:4e:bf:98:a1:3b:41:28:92:95:d3:fb:9d:82: 82:56:d1:8e:6a:9e:c6:61:1b:fc:03:ab:ed:64:fe: ee:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:18:0E:45:31:28:8F:3A:B4:92:DF:89:FF:FD:FC:76:74:D3:92:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22fb23d9-7d79-3a51-86cd-5d03e7e6a151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 70.43.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:da:1e:da:90:e8:73:d0:d0:e1:80:6a:17:0f:bd:6e:6d:66: 3c:0c:d9:41:08:84:16:f9:42:1c:2f:1c:41:16:b8:36:33:19: ec:d8:33:db:78:8e:c2:88:29:e3:24:07:58:f0:a6:94:59:54: 54:ba:7f:eb:fd:11:5d:29:ee:a8:fb:b5:a1:9e:57:f5:a9:33: 30:0a:d5:f0:b2:78:c5:4f:06:5c:b3:46:17:96:71:83:1e:c2: 68:83:59:87:c1:10:f7:54:58:da:c3:c1:2b:99:b4:50:bc:44: b1:b7:5a:fb:7b:69:8b:d2:72:4f:4a:03:71:26:10:bc:30:eb: f8:56:6c:0b:99:9d:ef:94:7b:ce:a8:8a:be:ce:b9:66:57:0f: 37:f8:b1:27:8e:02:0f:be:f1:18:a7:41:24:4c:9d:2d:57:3d: 77:c8:7a:c2:ea:6b:fc:79:71:7c:f4:cf:5c:52:ac:59:24:d7: ca:b9:4f:12:da:fb:5a:50:b7:c0:20:c8:36:9b:c9:a0:a6:cf: 85:ad:ff:f6:91:99:48:77:2a:ed:e2:02:e0:3f:61:d3:13:b4: a0:ce:50:12:5a:77:61:20:1a:90:18:18:3a:33:24:b1:45:6f: 6b:91:dc:d3:be:07:cb:80:4a:5f:f4:07:4a:e3:c7:70:2c:83: ed:30:19:ac -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEO5SWTiVgDqrT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ODgzMWU1NWQtOWI0ZS00MDM1LWJmZDktMTM5N2FmMjFhZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Ev24F/ry7iBb/oFuZUwcvG2ozOR5RiNKxG Dkovo0HT4iXtSebroUOtxHA/34I22sI1HROQIxdI2hp3vPxxSaq2UOsaODWrthnD AV4ZYH2VQvx1FeCnM/8FV4Y3ST3eU93MbTP3wJvd6bNhJbsp6Q98RrE94TMma5bw 3qEec5hjTFrFAr6fJP1vAGW6hOMHnfxB7aK2glDdI30ibWSENSwS6CIYjkN7fHGD SPmOtB1JRcB/lbVAxAXfDgjn1JfBDgDh/lR6a19WdoHUtzVtDtuU6vvPbDnQ4iF5 92DyuRwib06/mKE7QSiSldP7nYKCVtGOap7GYRv8A6vtZP7u7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJMYDkUxKI86tJLfif/9/HZ005KWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjJmYjIzZDktN2Q3OS0z YTUxLTg2Y2QtNWQwM2U3ZTZhMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARiswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAL9oe2pDoc9DQ4YBqFw+9bm1mPAzZQQiEFvlCHC8cQRa4NjMZ7Ngz23iO wogp4yQHWPCmlFlUVLp/6/0RXSnuqPu1oZ5X9akzMArV8LJ4xU8GXLNGF5Zxgx7C aINZh8EQ91RY2sPBK5m0ULxEsbda+3tpi9JyT0oDcSYQvDDr+FZsC5md75R7zqiK vs65ZlcPN/ixJ44CD77xGKdBJEydLVc9d8h6wupr/HlxfPTPXFKsWSTXyrlPEtr7 WlC3wCDINpvJoKbPha3/9pGZSHcq7eIC4D9h0xO0oM5QElp3YSAakBgYOjMksUVv a5Hc074Hy4BKX/QHSuPHcCyD7TAZrA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:47 2025 by rpki-client