$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73d58ea1-12f4-3a93-ad27-e363d42cd3c3.roa File: 73d58ea1-12f4-3a93-ad27-e363d42cd3c3.roa (raw, json) Hash identifier: rvGqxr+uWTWhIl7GEumUbryjJYpMSplSnCu3KU1xb4w= Subject key identifier: B9:28:03:BC:89:15:FC:16:D7:5B:DE:D9:7E:E9:F9:24:8F:51:3A:7B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21125B02388A17B42BC8700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73d58ea1-12f4-3a93-ad27-e363d42cd3c3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 207.59.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:25:b0:23:88:a1:7b:42:bc:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0a6e625e-11c1-4372-a8c6-e5289a314f3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:2e:a8:ff:45:88:e6:21:23:d9:0e:f5:0c: 1a:d5:49:f2:70:8f:51:91:d8:11:0f:2f:97:25:73: f1:65:60:e8:dc:a9:ea:e8:60:b0:c3:8e:95:97:08: 90:02:81:bd:99:b7:b5:cd:8e:42:74:10:e0:66:ca: 26:7a:6a:3d:7a:6a:eb:04:8c:f2:70:29:0e:3e:c4: 43:97:bc:47:03:15:95:4e:aa:8f:a7:d8:bf:eb:8d: d9:d6:06:90:7f:e0:22:87:91:2d:98:e9:80:fc:38: 78:ad:8e:11:5a:33:cb:80:16:19:9d:4f:c2:3d:ca: 21:72:3a:e7:e8:c5:d1:26:f5:0d:2a:34:61:5f:8e: 36:70:ad:a6:52:eb:15:56:a1:f8:22:dd:30:d6:81: c0:0a:74:e3:87:57:16:91:87:9c:29:23:b0:fc:69: 6b:f3:bf:1f:af:eb:63:53:d8:0f:f2:eb:e5:2e:64: 15:91:e0:a2:41:a0:b8:40:d3:d9:fb:d5:09:37:cb: 6e:28:0c:f5:5f:1e:78:03:c5:d5:db:a3:03:ae:d6: 07:23:03:a6:86:47:36:fd:b6:ff:ac:39:b5:24:21: 3f:9f:8e:27:15:b8:01:57:6e:45:35:04:e8:05:cb: 10:8a:c1:5a:e9:1e:4b:14:6a:ab:01:a1:fd:96:3e: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:28:03:BC:89:15:FC:16:D7:5B:DE:D9:7E:E9:F9:24:8F:51:3A:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73d58ea1-12f4-3a93-ad27-e363d42cd3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:04:50:4f:c2:38:0d:f2:54:65:49:f6:98:a5:5b:4a:ef:9e: d8:1c:27:52:20:8d:51:33:99:e9:93:b9:c4:06:72:43:cd:4c: e3:28:8a:3f:62:81:f5:01:e0:a9:d6:26:c1:02:42:96:98:c4: 43:94:ea:db:44:6f:4b:6d:e7:6c:5f:d8:4d:51:07:94:cb:00: fb:85:8b:1d:34:c2:ce:02:3f:d3:9f:59:4c:ab:23:a3:48:bd: 44:70:03:ec:78:67:09:b6:01:3b:58:45:b9:0c:3d:a5:ea:30: 0b:49:9e:20:a8:f1:f8:db:91:8b:d0:ec:f2:8b:75:11:2c:62: cf:06:f0:6f:ef:20:fc:3c:cc:4a:9f:70:26:bf:e5:ec:14:d0: 73:a2:76:94:06:2b:58:b2:6a:ee:52:54:b5:f4:af:ce:09:78: f5:c5:63:dd:1d:9b:cc:da:1d:56:59:ec:37:f3:a5:94:c7:92: 98:3f:75:71:4a:73:f3:68:df:77:c1:7f:d1:17:1d:a6:38:5a: 25:b4:5d:86:fb:14:64:d6:68:be:4f:9d:e0:5c:f9:c8:56:e0: c3:0f:e4:3e:8c:b4:94:4d:09:5c:21:d7:2f:d3:70:b1:f9:81: ad:07:4c:e7:a5:5a:51:95:ae:da:4b:8f:30:0f:59:7a:47:22: db:1c:2e:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESWwI4ihe0K8hwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGE2ZTYyNWUtMTFjMS00MzcyLWE4YzYtZTUyODlhMzE0ZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsEuqP9FiOYhI9kO9Qwa1UnycI9RkdgRDy+X JXPxZWDo3Knq6GCww46VlwiQAoG9mbe1zY5CdBDgZsomemo9emrrBIzycCkOPsRD l7xHAxWVTqqPp9i/643Z1gaQf+Aih5EtmOmA/Dh4rY4RWjPLgBYZnU/CPcohcjrn 6MXRJvUNKjRhX442cK2mUusVVqH4It0w1oHACnTjh1cWkYecKSOw/Glr878fr+tj U9gP8uvlLmQVkeCiQaC4QNPZ+9UJN8tuKAz1Xx54A8XV26MDrtYHIwOmhkc2/bb/ rDm1JCE/n44nFbgBV25FNQToBcsQisFa6R5LFGqrAaH9lj7jwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkoA7yJFfwW11ve2X7p+SSPUTp7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzNkNThlYTEtMTJmNC0z YTkzLWFkMjctZTM2M2Q0MmNkM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzs2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUEUE/COA3yVGVJ9pilW0rvntgcJ1IgjVEzmemTucQGckPNTOMoij9i gfUB4KnWJsECQpaYxEOU6ttEb0tt52xf2E1RB5TLAPuFix00ws4CP9OfWUyrI6NI vURwA+x4Zwm2ATtYRbkMPaXqMAtJniCo8fjbkYvQ7PKLdREsYs8G8G/vIPw8zEqf cCa/5ewU0HOidpQGK1iyau5SVLX0r84JePXFY90dm8zaHVZZ7DfzpZTHkpg/dXFK c/No33fBf9EXHaY4WiW0XYb7FGTWaL5PneBc+chW4MMP5D6MtJRNCVwh1y/TcLH5 ga0HTOelWlGVrtpLjzAPWXpHItscLhw= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:04 2025 by rpki-client