$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31e16c7e-b1e4-3b25-a014-7d1eea2e0a05.roa File: 31e16c7e-b1e4-3b25-a014-7d1eea2e0a05.roa (raw, json) Hash identifier: rzna+MlXjRJZjE92ENooCxuJerb403xOzRBShABZl1Q= Subject key identifier: ED:2A:46:4A:C3:89:DE:83:FE:3B:1D:AC:34:C1:A9:6E:22:FB:03:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F79FD1045307440FA180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31e16c7e-b1e4-3b25-a014-7d1eea2e0a05.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 206.245.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f7:9f:d1:04:53:07:44:0f:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f82fb829-4fb9-48cc-987d-3568040c11b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c6:ee:97:ef:86:8a:54:e9:c1:84:4f:e5:c5: ce:bc:d6:07:a2:da:60:84:06:19:a2:99:30:a3:e8: f3:e2:2c:a4:65:0f:45:73:75:5a:f1:1a:4b:4c:a7: 0e:2d:34:8a:6f:61:56:28:5f:cd:ee:e1:73:4e:99: 3b:24:4e:6c:69:4b:94:98:f3:63:2f:97:37:f9:41: f4:25:c3:6b:da:71:03:31:96:7c:e2:be:6f:de:b4: 77:38:d6:ce:5a:8c:e4:47:c5:21:c2:de:29:b7:64: c8:bc:fa:09:de:53:f7:97:39:e1:91:d3:1b:8c:b4: b0:b3:bf:a2:d6:71:76:d0:5d:2f:53:0b:5a:53:4d: 76:b8:b0:c3:8c:08:70:e8:38:0b:6d:cc:1f:d5:70: b4:e9:37:48:0c:93:ed:98:0e:f0:96:cb:ce:38:f2: fe:57:bd:29:1f:10:5b:67:71:d3:67:85:08:51:01: e3:ae:60:56:30:7e:6f:5f:57:6c:ee:bc:18:7f:a9: 43:b6:8b:05:03:06:3a:2b:7d:0e:6a:4f:64:73:3d: 10:d1:29:06:23:9a:99:df:f0:f9:f4:5b:98:61:3c: ed:0a:5c:0e:3e:57:b0:1a:b2:40:cc:74:1a:82:d6: c7:87:85:07:6a:c6:02:e4:e3:50:cd:8a:7a:87:a6: c6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2A:46:4A:C3:89:DE:83:FE:3B:1D:AC:34:C1:A9:6E:22:FB:03:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/31e16c7e-b1e4-3b25-a014-7d1eea2e0a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 206.245.160.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:6d:da:77:8d:e7:14:39:c9:d3:a3:d0:90:b2:71:cc:86:f0: 95:e5:2c:40:83:2b:1b:33:77:d9:dd:8e:f6:1a:c4:8b:d9:14: f6:77:66:59:5f:2a:2f:c2:f8:14:a1:b8:3f:53:f1:8e:32:46: 63:71:a3:9d:35:13:40:f3:2a:b8:ec:c9:87:75:69:04:b1:56: 18:07:00:f1:83:52:4e:80:4e:0f:ca:1c:a2:06:b6:6d:43:a5: d4:59:95:2e:9c:59:ba:be:a8:ed:a5:f5:89:27:b9:4f:6b:25: 83:7c:a5:39:9d:0e:61:a8:a0:a0:b2:46:46:93:42:c3:34:ef: 40:1f:3c:81:06:04:44:3b:d4:f9:67:4b:2a:4a:a2:7c:2a:c4: fd:36:eb:fa:c1:13:0b:93:fe:6c:d0:50:d7:d8:be:03:68:08: 05:08:03:33:83:f9:16:bc:03:c7:82:61:75:f6:8a:02:f2:8e: b5:1f:71:5f:a8:ae:68:68:01:75:3a:11:e8:10:ed:73:fa:d5: 7e:5d:07:42:2b:37:ae:33:91:dc:64:84:81:3f:f3:96:01:2d: f7:41:cb:aa:9a:4b:c4:64:de:0a:d2:da:3d:b5:2b:8c:bd:cf: 78:b3:78:8d:16:2b:84:eb:5f:35:78:8f:48:0c:59:65:f4:98: 6b:40:58:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPef0QRTB0QPoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjgyZmI4MjktNGZiOS00OGNjLTk4N2QtMzU2ODA0MGMxMWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssbul++GilTpwYRP5cXOvNYHotpghAYZopkw o+jz4iykZQ9Fc3Va8RpLTKcOLTSKb2FWKF/N7uFzTpk7JE5saUuUmPNjL5c3+UH0 JcNr2nEDMZZ84r5v3rR3ONbOWozkR8Uhwt4pt2TIvPoJ3lP3lznhkdMbjLSws7+i 1nF20F0vUwtaU012uLDDjAhw6DgLbcwf1XC06TdIDJPtmA7wlsvOOPL+V70pHxBb Z3HTZ4UIUQHjrmBWMH5vX1ds7rwYf6lDtosFAwY6K30Oak9kcz0Q0SkGI5qZ3/D5 9FuYYTztClwOPlewGrJAzHQagtbHh4UHasYC5ONQzYp6h6bGcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0qRkrDid6D/jsdrDTBqW4i+wOXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzFlMTZjN2UtYjFlNC0z YjI1LWEwMTQtN2QxZWVhMmUwYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzvWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpt2neN5xQ5ydOj0JCyccyG8JXlLECDKxszd9ndjvYaxIvZFPZ3Zllf Ki/C+BShuD9T8Y4yRmNxo501E0DzKrjsyYd1aQSxVhgHAPGDUk6ATg/KHKIGtm1D pdRZlS6cWbq+qO2l9YknuU9rJYN8pTmdDmGooKCyRkaTQsM070AfPIEGBEQ71Pln SypKonwqxP026/rBEwuT/mzQUNfYvgNoCAUIAzOD+Ra8A8eCYXX2igLyjrUfcV+o rmhoAXU6EegQ7XP61X5dB0IrN64zkdxkhIE/85YBLfdBy6qaS8Rk3grS2j21K4y9 z3izeI0WK4TrXzV4j0gMWWX0mGtAWOE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:58 2025 by rpki-client