$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa File: 48e35af3-3f19-327b-a342-5b5e29f9df5f.roa (raw, json) Hash identifier: d94kRxjZ+iXXva5xJiaqdw5AVYehI8VAj1nCr/IJ3ZQ= Subject key identifier: 69:0B:DB:9D:90:A1:6A:2D:74:D8:0A:5D:E3:B4:03:98:F6:98:9A:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F75D82DF1B6ADBD8183F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 207.91.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:5d:82:df:1b:6a:db:d8:18:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=65155dba-f666-4fa9-8332-a7eabb98ebe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:cc:2e:3e:f0:0f:b7:63:25:39:9d:76:a9:67: 40:1d:f7:8e:b6:95:c7:10:fa:6d:11:6f:d6:d5:0e: a2:2c:ef:a0:b3:d3:e7:b3:6d:f8:74:35:92:a7:ae: 9c:3e:0f:d8:d9:fd:9c:32:df:ea:2b:f2:9e:2f:20: bf:af:ab:95:fd:f9:e2:5d:98:c3:42:05:c9:ee:0a: 02:a5:40:a4:50:6e:e9:df:a8:91:ab:9a:97:ad:eb: 12:c3:fd:84:12:e7:85:8c:ed:fb:ac:d6:d4:23:08: 46:91:f2:6c:b7:69:98:2b:a8:90:e6:f6:1f:18:85: d7:89:1e:aa:ce:6b:06:ac:02:8a:45:d6:21:6e:86: 58:24:b1:5f:41:d4:d2:f0:ac:d9:0c:04:3d:50:90: 07:c5:f5:df:2a:30:ce:98:1e:b2:1d:70:53:c3:45: 94:86:94:53:bd:1e:ee:78:13:b2:f9:fb:b2:6d:03: 77:78:b6:18:a6:2f:ef:38:4e:ed:4f:b7:fa:75:52: 7e:5c:6f:db:25:a2:c4:f5:df:65:0f:08:0c:5c:87: b9:17:04:05:5e:83:4a:71:3e:9b:74:ef:69:04:33: 69:2e:7d:4a:d7:e8:84:17:5e:6e:38:60:bd:80:1f: 70:39:cb:21:29:bf:e9:c3:e6:d4:f3:8f:19:44:87: fb:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0B:DB:9D:90:A1:6A:2D:74:D8:0A:5D:E3:B4:03:98:F6:98:9A:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:58:4f:22:97:47:5a:05:f5:1a:b5:a5:b3:e9:07:2e:bc:94: c4:83:93:67:42:5d:2a:cf:5f:2c:16:36:b7:b2:dc:86:4f:4d: fb:8c:1a:1b:d7:4b:5a:c6:07:fb:4c:76:83:c4:68:20:e2:9c: 2f:db:3d:49:e7:2c:75:1a:4f:bc:ce:bd:24:7a:0b:09:b5:50: ae:93:2d:3f:4a:db:3b:da:ad:e6:42:97:fe:df:2b:38:7f:47: df:b0:a2:6b:8b:5d:ba:b7:5e:be:3d:6c:27:b3:0b:20:1a:5e: a3:44:e5:4c:f3:48:e8:12:48:58:1f:a6:dd:d0:c5:78:0b:1a: 3b:80:48:e1:82:b7:68:8b:dd:eb:f5:64:53:86:6c:37:50:aa: c3:6a:9b:0f:99:2d:43:3e:1f:22:70:cc:40:cd:bd:32:f9:12: ed:34:19:6d:a8:30:18:16:db:7b:ed:e1:fb:4f:c4:15:07:fe: ed:91:51:48:3d:62:cc:5f:1b:7e:54:4d:1b:69:e8:95:6f:7e: f6:16:06:a3:70:5f:c0:f3:8d:08:b7:40:e6:7d:fd:de:00:73: 10:87:e0:0a:d6:ad:5e:60:f6:8f:15:be:1f:b9:b9:4d:c3:d7: 19:04:b6:3e:68:5a:37:06:4a:c6:4f:9c:3f:15:db:8f:9e:b2: 15:d4:8b:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0912C3xtq29gYP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NjUxNTVkYmEtZjY2Ni00ZmE5LTgzMzItYTdlYWJiOThlYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMwuPvAPt2MlOZ12qWdAHfeOtpXHEPptEW/W 1Q6iLO+gs9Pns234dDWSp66cPg/Y2f2cMt/qK/KeLyC/r6uV/fniXZjDQgXJ7goC pUCkUG7p36iRq5qXresSw/2EEueFjO37rNbUIwhGkfJst2mYK6iQ5vYfGIXXiR6q zmsGrAKKRdYhboZYJLFfQdTS8KzZDAQ9UJAHxfXfKjDOmB6yHXBTw0WUhpRTvR7u eBOy+fuybQN3eLYYpi/vOE7tT7f6dVJ+XG/bJaLE9d9lDwgMXIe5FwQFXoNKcT6b dO9pBDNpLn1K1+iEF15uOGC9gB9wOcshKb/pw+bU848ZRIf7MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkL252QoWotdNgKXeO0A5j2mJqOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhlMzVhZjMtM2YxOS0z MjdiLWEzNDItNWI1ZTI5ZjlkZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz1sQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNYTyKXR1oF9Rq1pbPpBy68lMSDk2dCXSrPXywWNrey3IZPTfuMGhvX S1rGB/tMdoPEaCDinC/bPUnnLHUaT7zOvSR6Cwm1UK6TLT9K2zvareZCl/7fKzh/ R9+womuLXbq3Xr49bCezCyAaXqNE5UzzSOgSSFgfpt3QxXgLGjuASOGCt2iL3ev1 ZFOGbDdQqsNqmw+ZLUM+HyJwzEDNvTL5Eu00GW2oMBgW23vt4ftPxBUH/u2RUUg9 YsxfG35UTRtp6JVvfvYWBqNwX8DzjQi3QOZ9/d4AcxCH4ArWrV5g9o8Vvh+5uU3D 1xkEtj5oWjcGSsZPnD8V24+eshXUixk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:25 2025 by rpki-client