$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c2580cc-d72b-3976-9a80-a8711e29ab96.roa File: 3c2580cc-d72b-3976-9a80-a8711e29ab96.roa (raw, json) Hash identifier: RThg4yhe8Vrut0/JWF+zfjFRSeGnbhIsLthwV5l+878= Subject key identifier: E3:27:C6:D9:B6:83:FE:C5:EA:00:62:00:20:8E:1C:72:35:BE:38:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211272B0CDB1FF1EE8B28E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c2580cc-d72b-3976-9a80-a8711e29ab96.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.92.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:27:2b:0c:db:1f:f1:ee:8b:28:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2337fb6f-0ede-4b1c-81e1-45eb08f57dac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3b:cd:c9:86:8a:7f:ab:3c:da:4d:e7:66:73: 2a:2d:1f:3b:f9:c3:45:d3:54:1f:ea:36:1b:a8:4d: 53:70:b2:7e:f5:1f:8d:56:92:b4:2e:a1:69:f0:f6: ab:bd:a8:1f:c8:5f:95:f6:59:69:c2:4e:34:46:29: f2:0e:3f:97:94:a1:1b:03:9d:e4:1e:6b:71:71:a8: d8:ab:56:66:d2:57:9e:6a:54:4e:d0:e5:d6:4b:24: 54:12:42:46:c3:03:aa:58:f6:b8:15:97:3b:31:33: 54:a9:43:d6:47:4b:20:ca:cf:66:1b:56:d4:91:9f: 12:2e:e5:05:27:bb:0c:aa:a6:4b:53:30:59:96:b6: 00:a8:9b:61:3d:53:28:b1:69:ac:1d:e2:42:c9:f9: 48:60:e9:95:0b:40:79:44:4d:9a:88:41:e0:76:2d: 73:d0:44:65:92:f4:e6:76:99:a4:56:53:27:2a:81: f0:51:b0:9f:66:87:37:0c:49:c1:5b:52:9f:c6:ba: 8f:75:36:54:b2:b7:c1:92:34:c0:f1:0f:e1:af:66: 3d:b0:82:27:ef:00:da:23:77:0d:43:9d:6d:5e:07: 56:6b:7b:37:f6:56:00:32:e4:0b:6c:c4:42:a4:36: 17:93:d8:b6:41:f9:6a:42:43:d4:68:8a:ea:a9:10: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:C6:D9:B6:83:FE:C5:EA:00:62:00:20:8E:1C:72:35:BE:38:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3c2580cc-d72b-3976-9a80-a8711e29ab96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a5:f6:d4:ea:ef:a2:ad:c2:3a:55:7d:a6:14:d0:70:58:00: 7b:12:1d:a3:35:ef:77:a5:50:66:26:ec:3c:d0:3d:3c:21:52: 79:15:c0:54:33:8d:f6:45:4d:77:00:a1:b0:c7:d7:b3:bd:ba: 06:33:df:c9:5c:c9:b8:61:74:3c:01:f7:a4:17:70:6f:bb:45: dd:6c:0b:88:d8:da:b5:9c:7b:46:08:89:49:e6:be:e2:9f:10: 97:bf:ef:41:3d:85:4a:f2:fb:12:63:20:08:70:71:c6:1a:f7: e7:bc:51:dd:78:a0:9d:b3:6b:e1:62:01:4a:3e:3c:70:a3:f8: 55:19:f8:53:09:4a:7e:04:1d:4e:fe:20:e4:59:25:d9:cd:2c: b7:8f:95:19:07:8d:b3:e1:e5:d4:a5:d6:62:5a:df:1e:4a:a4: 14:ed:99:e3:29:a7:12:2e:af:12:85:7c:ca:7f:fb:98:dd:af: aa:80:18:63:df:69:f4:fe:37:45:f8:c7:fc:06:32:25:f3:b2: 15:f0:5f:f4:5e:0e:c0:f4:74:40:f1:43:cf:cd:9a:ad:4f:1c: 81:fd:19:8a:6b:11:6b:c7:76:b8:df:37:15:5b:84:d2:b2:4b: c4:01:22:b4:3f:df:97:f2:b5:2a:b3:42:38:53:f2:8f:d1:00: eb:ff:6c:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEScrDNsf8e6LKOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjMzN2ZiNmYtMGVkZS00YjFjLTgxZTEtNDVlYjA4ZjU3ZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDvNyYaKf6s82k3nZnMqLR87+cNF01Qf6jYb qE1TcLJ+9R+NVpK0LqFp8ParvagfyF+V9llpwk40RinyDj+XlKEbA53kHmtxcajY q1Zm0leealRO0OXWSyRUEkJGwwOqWPa4FZc7MTNUqUPWR0sgys9mG1bUkZ8SLuUF J7sMqqZLUzBZlrYAqJthPVMosWmsHeJCyflIYOmVC0B5RE2aiEHgdi1z0ERlkvTm dpmkVlMnKoHwUbCfZoc3DEnBW1KfxrqPdTZUsrfBkjTA8Q/hr2Y9sIIn7wDaI3cN Q51tXgdWa3s39lYAMuQLbMRCpDYXk9i2QflqQkPUaIrqqRCL/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMnxtm2g/7F6gBiACCOHHI1vjiAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2MyNTgwY2MtZDcyYi0z OTc2LTlhODAtYTg3MTFlMjlhYjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0VygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOl9tTq76KtwjpVfaYU0HBYAHsSHaM173elUGYm7DzQPTwhUnkVwFQz jfZFTXcAobDH17O9ugYz38lcybhhdDwB96QXcG+7Rd1sC4jY2rWce0YIiUnmvuKf EJe/70E9hUry+xJjIAhwccYa9+e8Ud14oJ2za+FiAUo+PHCj+FUZ+FMJSn4EHU7+ IORZJdnNLLePlRkHjbPh5dSl1mJa3x5KpBTtmeMppxIurxKFfMp/+5jdr6qAGGPf afT+N0X4x/wGMiXzshXwX/ReDsD0dEDxQ8/Nmq1PHIH9GYprEWvHdrjfNxVbhNKy S8QBIrQ/35fytSqzQjhT8o/RAOv/bIU= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:14 2025 by rpki-client