$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a05be-9f80-37ee-b112-7421c9a338ef.roa File: 241a05be-9f80-37ee-b112-7421c9a338ef.roa (raw, json) Hash identifier: cU2/Thjj+9WrZ6vJhoanoQr8zg1p1igNvI8bND7+Z/I= Subject key identifier: E4:76:6B:48:F7:45:FD:1D:77:9D:20:F5:D2:EE:27:96:8C:D5:03:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA7100A3B356D6E10E5A0080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a05be-9f80-37ee-b112-7421c9a338ef.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 72.16.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:00:a3:b3:56:d6:e1:0e:5a:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=1ecc63c2-efc5-4fc3-8a77-86564c8482a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c1:6c:73:e9:c0:28:28:8e:ce:81:0b:18:4e: c5:ef:33:93:1b:5b:60:36:fd:9c:ed:a0:80:b2:9e: 19:06:9f:c0:11:76:23:4d:6e:a7:9f:eb:12:3c:81: cc:48:49:b5:61:2f:e3:96:96:ce:26:d5:4e:f1:34: 3b:3b:fd:e3:0f:1f:82:7b:31:b1:d1:84:0f:bc:f7: b8:75:0f:d9:2e:91:9e:4a:ac:0b:3f:35:5d:06:70: c2:ff:83:1b:50:a1:5a:c7:a7:7b:ee:c7:e5:45:24: 44:b4:9b:ac:03:47:f4:81:cd:d7:7d:d6:20:ef:aa: 21:40:0b:c7:4d:bf:5f:58:9c:b8:fd:eb:03:23:0f: b5:79:6e:6f:e1:e7:69:f4:e8:cb:48:16:65:11:95: 09:94:7c:6d:99:ca:a0:98:92:d3:bb:fd:57:8e:b2: e7:45:81:00:0c:32:b3:92:71:d2:6f:de:fd:b1:49: 17:4b:ee:26:a6:85:f2:dc:27:1c:e6:73:d8:ac:98: 86:ee:39:e4:39:ee:59:b9:85:7a:4d:bc:66:c6:14: 86:67:a2:bd:df:27:a8:91:8c:13:d3:1f:51:3e:b9: a1:64:23:b5:7e:37:f9:bd:19:e7:20:eb:0f:0f:ee: e1:1f:2d:66:45:42:4b:d1:e4:b7:ae:4c:dc:fb:9e: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:76:6B:48:F7:45:FD:1D:77:9D:20:F5:D2:EE:27:96:8C:D5:03:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a05be-9f80-37ee-b112-7421c9a338ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2f:47:2f:e8:58:57:cd:e1:5a:a6:90:07:f0:79:8f:ee:46: 52:a7:1e:50:fb:4a:c0:d3:8c:fb:03:86:13:14:17:8b:b8:26: 2d:b4:e2:84:58:cf:9a:26:24:7a:35:e2:6f:f7:80:b8:41:19: c0:68:3e:41:c6:e8:0c:1f:03:de:04:b4:e9:20:c5:4b:2b:ba: 8c:b3:7b:fa:b7:94:48:37:e4:ff:95:39:67:c3:ad:51:2c:65: 50:de:00:a6:23:88:c7:e0:5a:f0:bf:35:fe:1f:25:5c:fe:8f: 60:fe:ea:d0:01:30:7c:a9:c3:9d:c6:2a:97:15:66:9e:1f:09: 93:15:89:ef:32:44:ab:4f:2e:9e:3a:2a:7b:c9:3e:d2:b9:e2: b2:1f:4e:dd:1e:b7:70:62:50:23:9c:4b:9f:61:d3:eb:4e:59: df:af:21:62:66:a5:54:86:58:5b:a3:ee:ec:49:1a:1d:e8:b3: 98:99:72:2e:8d:01:37:c5:1c:20:a8:f5:6b:4f:7b:80:32:0d: b2:eb:80:ea:27:31:b0:f7:ca:e5:10:86:3a:4f:db:e3:04:94: 23:b0:57:96:c0:40:a9:49:47:e7:6a:e1:a9:04:a6:2c:b2:9e: 40:20:40:f0:e4:07:e1:de:eb:6b:c8:ce:3c:15:fd:28:1f:2d: a3:16:48:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQCjs1bW4Q5aAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MWVjYzYzYzItZWZjNS00ZmMzLThhNzctODY1NjRjODQ4MmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8Fsc+nAKCiOzoELGE7F7zOTG1tgNv2c7aCA sp4ZBp/AEXYjTW6nn+sSPIHMSEm1YS/jlpbOJtVO8TQ7O/3jDx+CezGx0YQPvPe4 dQ/ZLpGeSqwLPzVdBnDC/4MbUKFax6d77sflRSREtJusA0f0gc3XfdYg76ohQAvH Tb9fWJy4/esDIw+1eW5v4edp9OjLSBZlEZUJlHxtmcqgmJLTu/1XjrLnRYEADDKz knHSb979sUkXS+4mpoXy3Ccc5nPYrJiG7jnkOe5ZuYV6TbxmxhSGZ6K93yeokYwT 0x9RPrmhZCO1fjf5vRnnIOsPD+7hHy1mRUJL0eS3rkzc+574cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOR2a0j3Rf0dd50g9dLuJ5aM1QPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQxYTA1YmUtOWY4MC0z N2VlLWIxMTItNzQyMWM5YTMzOGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQvRy/oWFfN4VqmkAfweY/uRlKnHlD7SsDTjPsDhhMUF4u4Ji204oRY z5omJHo14m/3gLhBGcBoPkHG6AwfA94EtOkgxUsruoyze/q3lEg35P+VOWfDrVEs ZVDeAKYjiMfgWvC/Nf4fJVz+j2D+6tABMHypw53GKpcVZp4fCZMVie8yRKtPLp46 KnvJPtK54rIfTt0et3BiUCOcS59h0+tOWd+vIWJmpVSGWFuj7uxJGh3os5iZci6N ATfFHCCo9WtPe4AyDbLrgOonMbD3yuUQhjpP2+MElCOwV5bAQKlJR+dq4akEpiyy nkAgQPDkB+He62vIzjwV/SgfLaMWSKE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:17:40 2025 by rpki-client