$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa File: 5012a183-6945-305b-9c9c-de9ba51406f9.roa (raw, json) Hash identifier: IDyELHhifY3w6pj4eWlnMBuEOofJoptIErDMwMCDDzM= Subject key identifier: F7:C7:33:41:2B:5E:E6:96:B7:5D:3F:04:9F:39:A3:BC:B6:A9:2A:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858487325BBB2604CFE0190308400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa Signing time: Mon 06 Jan 2025 02:00:40 +0000 ROA not before: Mon 06 Jan 2025 02:00:40 +0000 ROA not after: Sun 06 Apr 2025 01:00:40 +0000 asID: 7029 IP address blocks: 209.253.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:73:25:bb:b2:60:4c:fe:01:90:30:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 6 02:00:40 2025 GMT Not After : Apr 6 01:00:40 2025 GMT Subject: CN=6112bab8-78c2-4f9c-882f-33cb92a34b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f5:d7:e5:4a:eb:1a:fe:d4:b4:48:a5:a1:5e: 65:da:67:d8:1e:41:7e:60:39:2f:c4:c4:18:4b:fd: 75:ad:c3:de:ce:ff:1a:21:df:cb:07:bc:1e:74:b5: 62:b1:07:63:43:77:4a:f2:7a:08:e2:bb:5b:72:41: 05:ad:9e:03:b5:7f:99:57:5c:66:c5:11:58:0f:4d: 60:d5:21:8f:6b:e8:7d:b5:4a:bd:57:26:8c:47:b3: cb:ca:05:11:86:5a:f3:18:85:08:2e:01:18:59:72: 5d:9b:9b:d3:74:d8:98:4d:d8:26:ff:36:d0:7e:1b: db:b4:02:6f:e6:27:99:02:d1:05:a6:f4:f6:ca:4b: d6:16:28:f4:6b:2d:65:34:d8:14:9b:71:4f:af:5e: 4c:db:52:ac:c7:21:67:5e:ef:61:5a:9c:bd:e7:46: f5:35:2f:4c:87:36:63:5e:f1:c2:0e:d8:1d:9f:72: c4:87:8a:e1:48:84:52:55:81:a8:ed:ca:3d:ab:9d: 9a:9b:69:8b:9e:e2:4d:19:62:26:fd:4a:5b:8c:fc: 0f:d0:79:c7:3a:f3:c2:74:c1:57:c2:7d:42:42:4d: 71:90:47:01:73:d7:3f:7e:5e:0f:38:0a:01:ef:6c: 05:41:73:13:1b:c8:c4:82:16:5e:74:76:ca:f8:95: c3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:33:41:2B:5E:E6:96:B7:5D:3F:04:9F:39:A3:BC:B6:A9:2A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:01:ff:96:56:66:2f:9d:f4:7f:9c:24:99:da:83:e2:e6:9b: 95:c7:40:c2:d9:75:ff:86:40:87:41:3b:26:2d:f8:1b:ce:ec: e2:c3:1a:30:d8:f0:8a:64:3a:ac:ef:6f:84:fe:67:1a:ef:a4: 78:67:7d:24:a0:1f:46:6a:3e:5b:43:47:c1:47:25:5f:1b:f4: 1b:9f:a5:6c:e5:94:c0:0f:e4:24:2c:0d:c3:3d:b3:92:c5:d3: 2e:ee:c7:b0:26:a2:a7:10:1d:ec:b9:f6:1c:0d:12:ed:0c:1f: 5b:b0:d0:17:28:3f:c0:0f:23:7a:2c:8d:d0:cb:3a:d9:fd:68: 51:d5:df:c8:ad:44:63:9f:3f:06:ed:5a:86:71:ee:f9:66:ed: 33:28:00:0b:2f:b4:ea:16:2c:7d:9b:d6:01:85:34:72:cc:ad: 28:b6:ff:b4:fc:f8:3a:0f:c1:2b:60:90:b6:e8:f7:49:ad:90: 00:1d:bd:d2:78:f7:3f:4d:1a:dc:6f:65:77:5d:5f:f6:6b:a4: 53:ae:02:d7:d5:cb:ee:5b:46:a5:bf:75:4e:2e:cc:87:50:9f: b0:9a:c8:cf:4e:f6:5f:57:ce:28:42:95:96:18:a1:3e:aa:dd: e4:ed:d1:23:57:f7:3f:88:72:2a:61:92:8c:86:65:65:21:1e: 99:27:a1:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJbuyYEz+AZAwhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk NjExMmJhYjgtNzhjMi00ZjljLTg4MmYtMzNjYjkyYTM0YjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/XX5UrrGv7UtEiloV5l2mfYHkF+YDkvxMQY S/11rcPezv8aId/LB7wedLVisQdjQ3dK8noI4rtbckEFrZ4DtX+ZV1xmxRFYD01g 1SGPa+h9tUq9VyaMR7PLygURhlrzGIUILgEYWXJdm5vTdNiYTdgm/zbQfhvbtAJv 5ieZAtEFpvT2ykvWFij0ay1lNNgUm3FPr15M21KsxyFnXu9hWpy950b1NS9MhzZj XvHCDtgdn3LEh4rhSIRSVYGo7co9q52am2mLnuJNGWIm/UpbjPwP0HnHOvPCdMFX wn1CQk1xkEcBc9c/fl4POAoB72wFQXMTG8jEghZedHbK+JXDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfHM0ErXuaWt10/BJ85o7y2qSrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTAxMmExODMtNjk0NS0z MDViLTljOWMtZGU5YmE1MTQwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoB/5ZWZi+d9H+cJJnag+Lmm5XHQMLZdf+GQIdBOyYt+BvO7OLDGjDY 8IpkOqzvb4T+ZxrvpHhnfSSgH0ZqPltDR8FHJV8b9BufpWzllMAP5CQsDcM9s5LF 0y7ux7AmoqcQHey59hwNEu0MH1uw0BcoP8API3osjdDLOtn9aFHV38itRGOfPwbt WoZx7vlm7TMoAAsvtOoWLH2b1gGFNHLMrSi2/7T8+DoPwStgkLbo90mtkAAdvdJ4 9z9NGtxvZXddX/ZrpFOuAtfVy+5bRqW/dU4uzIdQn7CayM9O9l9XzihClZYYoT6q 3eTt0SNX9z+IciphkoyGZWUhHpknock= -----END CERTIFICATE-----Generated at Fri Mar 14 10:59:00 2025 by rpki-client