$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa File: 28f32791-93af-395d-a89b-6915c7444645.roa (raw, json) Hash identifier: CvjrZnWFjYcvLcpsRkQcsZtY5/7JQ7Kw5DwidxWR2TY= Subject key identifier: 96:01:70:C4:27:69:C4:37:B4:E9:75:70:EE:D6:65:8E:94:7B:69:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F8B66C7B3065412EF474 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.92.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f8:b6:6c:7b:30:65:41:2e:f4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=15970e37-2aa3-4df6-bb62-330964ee02ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:e8:49:99:aa:f4:e4:17:78:d9:85:98:1f: 0d:a7:45:09:12:66:9e:31:a9:58:dd:fd:85:f4:24: 99:cc:8f:42:0a:42:a5:c1:a0:7a:2d:2b:ab:25:1a: 64:d5:ff:1a:68:ba:5f:4f:70:1b:d6:f8:d5:a7:ef: 13:f3:cb:07:04:66:b0:a3:f1:41:38:d6:9e:74:e5: bb:e4:fe:b6:2d:27:f6:93:d9:3c:6f:68:41:de:f5: e0:07:76:cd:30:a7:4c:99:ef:62:84:c0:cd:7f:c5: 80:6c:56:1a:6a:65:70:81:c0:c5:9a:23:eb:3b:f7: 6b:55:a5:ac:eb:78:03:97:56:98:f6:de:0c:2b:18: 47:cd:81:7b:2f:90:50:d8:37:29:05:ee:9e:dd:86: ba:ec:33:9b:7e:e1:a0:2b:64:fc:77:b9:f9:cb:fa: 58:01:d1:72:d1:04:c7:91:91:6f:1b:8e:44:55:d9: fc:db:52:03:b5:f0:c8:86:db:f2:50:71:9b:45:94: 6a:07:ea:55:53:5f:ac:6a:9c:3e:a9:5d:6b:dc:7a: 5f:72:15:3f:9a:1e:59:3a:7f:ef:bf:cf:7b:44:f0: 24:95:ac:01:43:40:be:83:13:1c:ae:82:cd:2e:87: 44:b1:1b:b2:18:35:94:b8:00:31:f7:1e:47:3f:ad: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:01:70:C4:27:69:C4:37:B4:E9:75:70:EE:D6:65:8E:94:7B:69:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:48:a4:0f:08:c4:97:83:75:14:3b:05:27:d5:0d:65:be:82: 21:13:7c:75:dd:6e:aa:a0:62:4f:b4:1b:4c:11:43:ad:07:13: 8f:f0:5a:34:51:1c:be:dd:63:ef:b9:d4:b7:a4:f6:32:00:47: 64:98:5e:50:e3:39:44:5e:f9:68:3e:4f:ed:06:80:4a:71:21: 76:da:c6:22:e7:a4:75:03:95:c8:c7:47:4f:02:8f:f5:28:92: 04:c8:f3:1e:65:24:29:ba:7d:77:8c:a1:33:39:ff:d2:ca:61: 04:e9:61:e4:d5:a9:19:95:2c:4d:5a:9b:06:96:e9:27:cd:97: 85:81:85:36:5e:39:6c:0d:e9:4a:06:fc:96:cc:31:a5:f7:53: ab:c1:e9:21:ae:32:ed:93:5a:c1:da:5f:b9:a5:26:0b:0b:da: d4:3d:bc:02:6a:7d:34:7b:1f:b5:d4:58:6f:2b:af:f0:66:d7: fe:2e:db:04:89:fe:4e:ba:9c:19:f6:92:a6:ba:b4:97:e0:b2: 1e:8b:04:9b:18:ce:dc:e0:aa:9d:ae:3f:59:40:1f:b1:f1:6b: cb:af:3f:8f:e3:6c:d9:d7:7d:eb:96:df:3f:a7:08:59:e4:50: 9d:4a:13:81:ff:ef:93:8c:66:32:0b:5a:b5:23:ec:bb:fe:65: a7:e9:4d:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPi2bHswZUEu9HQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MTU5NzBlMzctMmFhMy00ZGY2LWJiNjItMzMwOTY0ZWUwMmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBnoSZmq9OQXeNmFmB8Np0UJEmaeMalY3f2F 9CSZzI9CCkKlwaB6LSurJRpk1f8aaLpfT3Ab1vjVp+8T88sHBGawo/FBONaedOW7 5P62LSf2k9k8b2hB3vXgB3bNMKdMme9ihMDNf8WAbFYaamVwgcDFmiPrO/drVaWs 63gDl1aY9t4MKxhHzYF7L5BQ2DcpBe6e3Ya67DObfuGgK2T8d7n5y/pYAdFy0QTH kZFvG45EVdn821IDtfDIhtvyUHGbRZRqB+pVU1+sapw+qV1r3HpfchU/mh5ZOn/v v897RPAklawBQ0C+gxMcroLNLodEsRuyGDWUuAAx9x5HP60+YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYBcMQnacQ3tOl1cO7WZY6Ue2kTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjhmMzI3OTEtOTNhZi0z OTVkLWE4OWItNjkxNWM3NDQ0NjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0VwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJIpA8IxJeDdRQ7BSfVDWW+giETfHXdbqqgYk+0G0wRQ60HE4/wWjRR HL7dY++51Lek9jIAR2SYXlDjOURe+Wg+T+0GgEpxIXbaxiLnpHUDlcjHR08Cj/Uo kgTI8x5lJCm6fXeMoTM5/9LKYQTpYeTVqRmVLE1amwaW6SfNl4WBhTZeOWwN6UoG /JbMMaX3U6vB6SGuMu2TWsHaX7mlJgsL2tQ9vAJqfTR7H7XUWG8rr/Bm1/4u2wSJ /k66nBn2kqa6tJfgsh6LBJsYztzgqp2uP1lAH7Hxa8uvP4/jbNnXfeuW3z+nCFnk UJ1KE4H/75OMZjILWrUj7Lv+ZafpTZk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:26 2025 by rpki-client