$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa File: 247e7628-8aa1-3d54-9913-d48b0ed908ec.roa (raw, json) Hash identifier: aOgbUkVb/qHhlW+V0GX8N2TAEf5ruc0+rSRLikMQRw8= Subject key identifier: A3:8E:C1:C2:88:BB:61:3A:64:AA:65:D8:1A:BD:F4:10:39:DA:46:DA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FA1279D7C27E83C74180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.252.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fa:12:79:d7:c2:7e:83:c7:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4a1af3d5-9215-4dac-b5b5-2c1150591cbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a4:3f:7f:db:3f:17:02:bb:da:15:d1:8e:7a: b9:79:aa:a7:41:d4:53:d2:83:35:a0:3d:4f:9b:e6: 20:11:9a:43:a3:c4:df:ad:80:fe:af:cc:6b:18:b9: ff:28:23:88:ea:e0:43:8d:65:59:e0:ba:f4:3d:2a: 5e:7d:20:7d:05:08:20:2a:59:6f:8a:73:56:19:49: 43:7b:79:da:70:2b:dd:dd:02:84:06:d8:b5:22:f3: 34:4c:24:bc:7e:06:62:e4:8d:13:2d:cb:2f:e8:e0: 56:4f:1c:a7:34:55:6f:b7:be:bc:bd:18:a8:8c:21: 5e:47:27:c0:b7:95:f0:3b:77:f4:c4:77:48:86:a2: 52:50:77:d6:ae:5e:ac:07:62:c0:46:ed:75:67:f0: 62:37:59:c5:b0:2b:4a:6d:60:a8:e2:fd:6e:7e:9e: cc:d7:cf:b3:6e:76:a7:8d:53:25:8f:8d:ee:5d:98: 05:9b:86:69:d8:8e:1a:71:e4:76:18:3f:55:6b:e0: 6a:cc:b0:f6:8b:78:d0:a4:85:49:18:8b:46:98:e6: f1:5c:79:8c:36:80:69:82:ce:cb:19:55:0e:4d:ab: 7e:36:a8:41:bd:8e:22:a5:46:5c:2f:8c:7d:cf:b2: 2a:c5:fa:23:31:1b:bd:48:1f:f1:aa:bf:1a:62:c0: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8E:C1:C2:88:BB:61:3A:64:AA:65:D8:1A:BD:F4:10:39:DA:46:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/247e7628-8aa1-3d54-9913-d48b0ed908ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:57:b5:bd:10:b0:1f:00:a6:d9:2d:4d:4b:67:05:52:dd:72: 4f:93:15:ee:bd:2b:7f:ff:7c:c8:08:8f:5e:4a:cc:2f:6d:cf: 32:b4:85:9c:35:ca:9c:88:d1:fc:c5:9b:f3:45:56:48:2c:78: 34:d4:b0:cc:50:3b:25:f9:74:14:00:a8:d2:4d:13:09:4b:b0: cc:7a:a3:8f:69:47:32:3d:44:47:4f:1b:5d:95:17:57:e0:fd: 72:6f:1f:ce:b1:43:9e:d1:3a:82:8b:1b:6b:c8:93:04:53:ad: fa:93:75:84:1f:0c:55:fa:dd:ed:ba:57:08:7d:1f:e1:17:ff: 3a:ad:ce:e7:73:83:95:b7:39:55:68:81:8f:71:bc:a9:50:9b: 48:59:18:19:2b:22:d9:ed:89:43:58:43:b5:a4:e8:ac:07:cf: 26:02:38:38:6b:3a:6b:e4:73:86:c5:86:7a:31:6c:ff:47:c2: 11:45:f3:9c:b9:68:79:c6:c8:6a:e1:23:11:37:a9:ac:e2:29: ad:4a:88:55:02:c0:a0:4a:79:79:ff:00:d1:de:f5:70:89:e0: 33:2d:3e:7e:f7:3f:3e:ba:6a:f9:a8:c6:83:0e:ee:5f:d1:b3: 7f:87:60:b7:7a:40:55:0b:5a:38:02:7a:6a:be:34:c1:0b:cf: 38:97:52:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPoSedfCfoPHQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGExYWYzZDUtOTIxNS00ZGFjLWI1YjUtMmMxMTUwNTkxY2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Q/f9s/FwK72hXRjnq5eaqnQdRT0oM1oD1P m+YgEZpDo8TfrYD+r8xrGLn/KCOI6uBDjWVZ4Lr0PSpefSB9BQggKllvinNWGUlD e3nacCvd3QKEBti1IvM0TCS8fgZi5I0TLcsv6OBWTxynNFVvt768vRiojCFeRyfA t5XwO3f0xHdIhqJSUHfWrl6sB2LARu11Z/BiN1nFsCtKbWCo4v1ufp7M18+zbnan jVMlj43uXZgFm4Zp2I4aceR2GD9Va+BqzLD2i3jQpIVJGItGmObxXHmMNoBpgs7L GVUOTat+NqhBvY4ipUZcL4x9z7IqxfojMRu9SB/xqr8aYsBAmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOOwcKIu2E6ZKpl2Bq99BA52kbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQ3ZTc2MjgtOGFhMS0z ZDU0LTk5MTMtZDQ4YjBlZDkwOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxXtb0QsB8AptktTUtnBVLdck+TFe69K3//fMgIj15KzC9tzzK0hZw1 ypyI0fzFm/NFVkgseDTUsMxQOyX5dBQAqNJNEwlLsMx6o49pRzI9REdPG12VF1fg /XJvH86xQ57ROoKLG2vIkwRTrfqTdYQfDFX63e26Vwh9H+EX/zqtzudzg5W3OVVo gY9xvKlQm0hZGBkrItntiUNYQ7Wk6KwHzyYCODhrOmvkc4bFhnoxbP9HwhFF85y5 aHnGyGrhIxE3qaziKa1KiFUCwKBKeXn/ANHe9XCJ4DMtPn73Pz66avmoxoMO7l/R s3+HYLd6QFULWjgCemq+NMELzziXUmU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:22:53 2025 by rpki-client