$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34f51c30-514b-30c8-9570-3e18823fc151.roa File: 34f51c30-514b-30c8-9570-3e18823fc151.roa (raw, json) Hash identifier: KLpzVpPdT8HsnC9SpH5h8xcRqGcvWLOzzyG75gH7kIs= Subject key identifier: C0:B5:17:FB:5F:F1:C4:D7:3D:8D:6B:CF:CE:B3:EF:D2:2D:B6:78:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F821E5E3673E00FEB6A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34f51c30-514b-30c8-9570-3e18823fc151.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 207.222.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f8:21:e5:e3:67:3e:00:fe:b6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8b5d7feb-5699-455f-81bf-46dcb44031f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8c:17:ab:79:d2:1e:90:f3:69:bf:0d:b8:51: b5:bb:86:ee:a5:af:67:0b:6b:9b:79:49:a6:e2:2d: ed:76:2c:bf:ec:62:c7:17:9f:29:a1:3d:79:d0:37: 3b:60:e6:45:b7:b3:b5:2d:8a:66:76:2a:55:65:dd: f9:9c:90:63:f4:6e:53:dc:1d:ca:a0:72:f8:fa:8f: ec:3f:d2:e9:b8:75:10:7c:a1:2d:b6:bd:9e:61:67: 63:1c:db:df:f7:a2:80:c1:37:17:0f:a8:38:bc:c5: bf:07:90:16:b7:3f:fd:f0:5d:54:07:6e:9d:46:5a: 1d:7a:33:ae:34:2c:5b:5b:7e:30:ab:24:ef:10:90: 9b:39:f2:76:8e:9e:39:fe:5d:0c:5b:48:6f:35:7d: c8:5e:0f:a8:a5:26:dc:81:8a:1f:68:08:2f:2a:0f: 8a:e1:3e:19:91:d7:4e:3d:88:23:b9:1b:f7:21:9f: 42:25:6d:1c:f5:b0:22:00:00:47:74:41:c6:0e:fc: bd:39:5d:77:03:d8:33:4f:e6:fc:a4:16:fd:cd:2b: be:93:24:2e:28:bd:41:27:9d:32:bc:c8:83:f0:d9: 89:3a:5b:66:1b:7f:9b:51:88:dd:00:a7:81:a8:d3: 2b:2d:48:57:88:43:c1:88:e2:10:de:c8:b7:d7:c4: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B5:17:FB:5F:F1:C4:D7:3D:8D:6B:CF:CE:B3:EF:D2:2D:B6:78:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/34f51c30-514b-30c8-9570-3e18823fc151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:fd:94:47:bf:22:3e:4a:e1:d8:94:65:06:74:3b:8b:31:ab: 4e:9e:8f:65:78:3d:2f:d6:88:e0:2f:7c:c8:a9:8b:6a:df:38: e3:58:d6:bd:7e:2a:95:98:a9:46:a2:1c:02:10:33:a3:9e:1f: 6c:b6:38:3b:a8:11:24:08:4f:be:8d:28:21:49:42:31:a4:ea: f3:78:ad:98:f8:f0:41:97:ea:b7:56:32:ec:8b:fa:8c:a5:bc: bd:85:46:20:7a:c3:df:2f:fc:62:29:93:c3:a1:7b:e4:f3:13: af:6a:32:1b:4b:be:87:fa:e8:a4:40:5e:af:37:6f:5a:c8:60: 6d:e6:ab:4b:4b:51:0e:c3:40:55:d0:89:ee:27:e3:e0:71:ce: 65:86:43:2a:80:25:70:b1:ea:ca:77:19:2b:c8:0b:91:3b:00: fd:5a:67:7e:fe:f9:a9:8d:e2:41:ea:dc:b8:2f:75:6e:67:bf: f1:85:5a:b1:df:69:e6:d5:c1:48:7a:59:c8:70:bf:eb:89:eb: 42:58:30:81:fe:59:5e:38:35:16:20:76:d9:ec:e3:0f:60:eb: 24:72:aa:cc:dc:f1:06:fc:4d:ec:dc:64:c5:38:23:3c:88:57: b3:37:c8:81:4f:d9:fb:ec:3a:47:c8:4d:09:b9:9b:a3:43:09: ed:1b:73:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPgh5eNnPgD+tqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OGI1ZDdmZWItNTY5OS00NTVmLTgxYmYtNDZkY2I0NDAzMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIwXq3nSHpDzab8NuFG1u4bupa9nC2ubeUmm 4i3tdiy/7GLHF58poT150Dc7YOZFt7O1LYpmdipVZd35nJBj9G5T3B3KoHL4+o/s P9LpuHUQfKEttr2eYWdjHNvf96KAwTcXD6g4vMW/B5AWtz/98F1UB26dRlodejOu NCxbW34wqyTvEJCbOfJ2jp45/l0MW0hvNX3IXg+opSbcgYofaAgvKg+K4T4ZkddO PYgjuRv3IZ9CJW0c9bAiAABHdEHGDvy9OV13A9gzT+b8pBb9zSu+kyQuKL1BJ50y vMiD8NmJOltmG3+bUYjdAKeBqNMrLUhXiEPBiOIQ3si318S2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMC1F/tf8cTXPY1rz86z79IttnjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzRmNTFjMzAtNTE0Yi0z MGM4LTk1NzAtM2UxODgyM2ZjMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz94AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGv9lEe/Ij5K4diUZQZ0O4sxq06ej2V4PS/WiOAvfMipi2rfOONY1r1+ KpWYqUaiHAIQM6OeH2y2ODuoESQIT76NKCFJQjGk6vN4rZj48EGX6rdWMuyL+oyl vL2FRiB6w98v/GIpk8Ohe+TzE69qMhtLvof66KRAXq83b1rIYG3mq0tLUQ7DQFXQ ie4n4+BxzmWGQyqAJXCx6sp3GSvIC5E7AP1aZ37++amN4kHq3LgvdW5nv/GFWrHf aebVwUh6Wchwv+uJ60JYMIH+WV44NRYgdtns4w9g6yRyqszc8Qb8TezcZMU4IzyI V7M3yIFP2fvsOkfITQm5m6NDCe0bc/A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:52 2025 by rpki-client