$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa File: 38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa (raw, json) Hash identifier: dEyLDoSC6moShRV67chaCv/lbwkoOZL/7Hxq4GLD0gk= Subject key identifier: 7B:B1:58:30:E5:92:44:5C:92:BF:C6:4B:B5:E5:1F:29:35:B2:B1:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FAE788DA2E013A894780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.119.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fa:e7:88:da:2e:01:3a:89:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=e483bcdf-1549-4e6f-a885-b1a1040d8457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:df:69:75:ed:b1:9c:bb:a0:57:75:f6:86:93: ae:af:14:bb:9f:66:94:ab:45:8b:4a:62:38:bc:99: 2b:ac:a4:9d:9a:e8:b8:24:14:d1:cd:8a:30:bd:c2: 36:73:86:34:fa:d9:64:6e:56:37:c7:cc:82:f9:df: e6:73:a0:35:07:47:39:01:c6:84:d2:b2:b4:e4:e5: 93:56:7d:83:84:3c:60:9b:68:af:bc:c8:ef:d0:ce: 17:e4:1f:8f:ae:4a:ff:15:4a:0a:02:a7:b3:e0:2a: 03:6a:cb:52:0f:81:3d:e6:49:b0:aa:db:44:5f:5d: 1d:02:0c:b1:08:a8:73:74:ab:85:8d:e8:75:c3:19: 21:16:1e:d0:76:ae:48:81:fb:44:eb:91:46:28:4d: 2f:ed:85:45:7e:96:bb:47:8a:6d:8e:27:58:bf:09: 42:df:51:f0:8c:82:8f:7f:91:00:56:61:43:57:d4: 7b:17:d9:42:7d:28:30:0e:40:67:08:c4:f5:c5:97: 16:c0:34:4e:1d:f6:17:58:8f:d5:54:06:68:fa:4c: e4:32:33:53:df:4f:56:c8:96:d4:ef:42:d7:a3:23: ba:18:a1:51:ce:5f:97:6b:9e:03:23:8e:ef:a0:89: 38:2e:0d:03:0e:c4:3a:71:8b:ab:a2:d5:4d:8c:fb: 9c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B1:58:30:E5:92:44:5C:92:BF:C6:4B:B5:E5:1F:29:35:B2:B1:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/38c3de3d-97f4-3ca7-9284-c7a2e3a9bf22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.119.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d4:1d:bd:a2:bb:5e:c7:43:82:f3:c0:3f:d5:09:db:cf:c9: c3:96:88:f7:f6:2b:4e:8d:7e:02:17:10:7b:e0:bb:c3:44:e4: 5b:4a:37:a7:8f:8e:dd:15:3d:65:4a:90:7a:76:ff:d8:4d:51: fe:b9:63:0d:5b:45:0f:eb:6c:ba:36:8a:ec:3b:ba:ee:d8:76: a6:cc:aa:88:a8:d2:11:d6:fd:81:80:54:55:6f:55:e1:e1:1d: 56:1b:2e:9d:64:1a:99:c7:7b:18:2b:8b:6e:ca:73:76:bc:44: e9:73:88:5c:a7:49:dd:f4:15:c9:3f:78:7b:f3:3c:3d:0a:d9: 6d:21:00:fc:90:a8:97:72:ce:1b:3e:0f:17:f8:f4:bf:5d:1b: 45:19:db:7f:49:7e:02:8b:cf:e1:80:cf:ec:c2:b8:99:1d:fd: 84:6e:d4:24:d4:71:36:f4:18:ea:5a:fb:13:ce:94:02:73:a8: 17:7f:c5:db:46:c3:4f:9e:9e:a3:5b:69:3a:94:48:64:c7:04: db:86:50:97:c8:a7:53:a0:c3:ab:4d:40:20:05:a9:40:34:6f: c8:ab:78:4f:95:44:58:52:ff:36:48:ac:74:22:5e:a1:9b:7f: 89:91:b9:00:ff:00:ab:09:c4:dc:eb:13:c9:e1:4f:02:1a:7d: c3:d6:4f:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPrniNouATqJR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTQ4M2JjZGYtMTU0OS00ZTZmLWE4ODUtYjFhMTA0MGQ4NDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt9pde2xnLugV3X2hpOurxS7n2aUq0WLSmI4 vJkrrKSdmui4JBTRzYowvcI2c4Y0+tlkblY3x8yC+d/mc6A1B0c5AcaE0rK05OWT Vn2DhDxgm2ivvMjv0M4X5B+Prkr/FUoKAqez4CoDastSD4E95kmwqttEX10dAgyx CKhzdKuFjeh1wxkhFh7Qdq5IgftE65FGKE0v7YVFfpa7R4ptjidYvwlC31HwjIKP f5EAVmFDV9R7F9lCfSgwDkBnCMT1xZcWwDROHfYXWI/VVAZo+kzkMjNT309WyJbU 70LXoyO6GKFRzl+Xa54DI47voIk4Lg0DDsQ6cYurotVNjPuceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHuxWDDlkkRckr/GS7XlHyk1srEvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzhjM2RlM2QtOTdmNC0z Y2E3LTkyODQtYzdhMmUzYTliZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvUHb2iu17HQ4LzwD/VCdvPycOWiPf2K06NfgIXEHvgu8NE5FtKN6eP jt0VPWVKkHp2/9hNUf65Yw1bRQ/rbLo2iuw7uu7YdqbMqoio0hHW/YGAVFVvVeHh HVYbLp1kGpnHexgri27Kc3a8ROlziFynSd30Fck/eHvzPD0K2W0hAPyQqJdyzhs+ Dxf49L9dG0UZ239JfgKLz+GAz+zCuJkd/YRu1CTUcTb0GOpa+xPOlAJzqBd/xdtG w0+enqNbaTqUSGTHBNuGUJfIp1Ogw6tNQCAFqUA0b8ireE+VRFhS/zZIrHQiXqGb f4mRuQD/AKsJxNzrE8nhTwIafcPWT8A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:07 2025 by rpki-client