$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa File: 3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa (raw, json) Hash identifier: XwhHVCkfHKolxKdlvI98KtGEmBuMbcIHvtFSd1tHkko= Subject key identifier: C4:7B:62:B9:A7:14:A3:56:A2:6F:1F:1B:17:C3:6F:27:1A:53:5F:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FA4937538213698EEDE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.20.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fa:49:37:53:82:13:69:8e:ed:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ee13e167-e82d-436a-bba0-d2bc89c072f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:82:2f:fe:f6:6a:41:22:28:29:fb:bc:a5:73: ef:b6:fe:dd:af:9e:e4:63:48:84:2e:a8:fe:01:75: a7:7d:f6:1c:4d:01:3a:4d:73:14:36:61:22:90:74: 80:77:b3:ff:b9:55:71:58:cb:3d:67:7b:66:26:83: 46:c6:71:91:6a:9f:02:25:c9:4e:d7:d5:69:52:be: 40:f6:d1:74:84:e9:6e:50:4c:49:bd:e9:95:49:0e: 42:47:28:6d:c3:47:62:6d:48:d4:df:e2:5d:21:92: 56:3b:c5:d7:80:13:29:d5:2d:82:35:b9:e2:26:2f: bc:92:31:9a:36:3a:49:d9:3f:f4:73:2e:94:8f:99: 98:03:52:8f:06:91:8b:4a:1f:d6:7f:c4:2a:3e:05: ed:e8:72:dc:ec:df:15:e1:9d:07:f9:fd:d1:95:70: 48:d1:d6:92:38:1d:a4:eb:8f:27:ac:96:a7:85:a4: 6b:bf:28:08:ed:af:ba:bd:7d:d5:b6:f4:6c:82:fd: 5b:6e:33:22:53:c6:8f:4f:78:6d:62:3f:c6:c0:da: 72:46:01:38:67:e3:28:8f:52:36:d3:25:c2:10:18: 03:5a:04:c8:34:d5:72:f3:a0:6a:c9:aa:d1:e8:e9: fa:6b:ce:ce:16:21:57:85:a8:6d:07:ad:5a:15:2b: cf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7B:62:B9:A7:14:A3:56:A2:6F:1F:1B:17:C3:6F:27:1A:53:5F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3f64a2b0-41b3-34ca-a2aa-20e2f2f040ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.20.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:65:0c:bd:b1:0a:b2:2a:ac:60:a2:b9:52:ed:31:1c:a8:59: 40:c1:14:e7:55:cb:4b:09:8f:24:82:3c:ce:d6:f7:7a:3d:96: 43:8e:b0:38:ed:22:b8:a5:ba:dd:3c:5a:4a:5b:3f:65:1c:68: a9:f7:83:3e:ad:7f:b4:51:ef:bc:57:8a:98:3e:76:ec:bf:72: d7:24:4c:35:01:4e:b0:e1:20:29:c9:e0:6f:e5:da:74:74:1d: d5:1e:68:37:80:43:81:43:8e:0a:7c:32:b5:d8:7a:43:fc:92: 98:bd:6c:d5:2a:da:b4:71:3d:8b:cf:68:ec:a0:16:b8:ac:2f: ea:15:31:bc:94:1c:7b:09:90:c6:4f:64:c0:3a:6d:a9:dd:83: 14:da:ad:d0:ff:5d:1b:39:e5:a7:e3:00:50:35:7e:c8:64:0c: bf:75:ab:aa:0f:f9:ba:62:a3:68:fb:1b:4c:f4:1a:b9:6a:bc: dc:28:49:44:af:bd:c6:fa:27:e0:3a:79:1a:bb:83:a2:c7:c5: e7:81:19:bb:a6:0d:80:36:50:b0:ae:e5:50:20:93:f1:15:a9: 95:22:42:5d:fa:e1:24:f1:5c:90:0a:c1:03:df:6e:2e:ac:6b: df:0e:9a:b5:d5:11:99:99:ff:1a:0f:68:e6:14:5f:ba:b3:91: 04:05:a9:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPpJN1OCE2mO7eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWUxM2UxNjctZTgyZC00MzZhLWJiYTAtZDJiYzg5YzA3MmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYIv/vZqQSIoKfu8pXPvtv7dr57kY0iELqj+ AXWnffYcTQE6TXMUNmEikHSAd7P/uVVxWMs9Z3tmJoNGxnGRap8CJclO19VpUr5A 9tF0hOluUExJvemVSQ5CRyhtw0dibUjU3+JdIZJWO8XXgBMp1S2CNbniJi+8kjGa NjpJ2T/0cy6Uj5mYA1KPBpGLSh/Wf8QqPgXt6HLc7N8V4Z0H+f3RlXBI0daSOB2k 648nrJanhaRrvygI7a+6vX3VtvRsgv1bbjMiU8aPT3htYj/GwNpyRgE4Z+Moj1I2 0yXCEBgDWgTINNVy86BqyarR6On6a87OFiFXhahtB61aFSvP5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMR7YrmnFKNWom8fGxfDbycaU1+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Y2NGEyYjAtNDFiMy0z NGNhLWEyYWEtMjBlMmYyZjA0MGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxlDL2xCrIqrGCiuVLtMRyoWUDBFOdVy0sJjySCPM7W93o9lkOOsDjt Irilut08WkpbP2UcaKn3gz6tf7RR77xXipg+duy/ctckTDUBTrDhICnJ4G/l2nR0 HdUeaDeAQ4FDjgp8MrXYekP8kpi9bNUq2rRxPYvPaOygFrisL+oVMbyUHHsJkMZP ZMA6bandgxTardD/XRs55afjAFA1fshkDL91q6oP+bpio2j7G0z0GrlqvNwoSUSv vcb6J+A6eRq7g6LHxeeBGbumDYA2ULCu5VAgk/EVqZUiQl364STxXJAKwQPfbi6s a98OmrXVEZmZ/xoPaOYUX7qzkQQFqYA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:43 2025 by rpki-client