$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa File: 746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa (raw, json) Hash identifier: G5+i3zmbeNOUv3xCBt/VqdyItCFAPTkb1Azuz9WBj4g= Subject key identifier: 91:C1:98:C7:DA:6C:09:EA:4C:78:7F:B7:BB:91:38:1C:DF:C9:7D:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F034D1E86CA0E8555D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 74.220.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f0:34:d1:e8:6c:a0:e8:55:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=3493ded8-8da8-42c0-a1dd-4ca30fab88cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:59:da:c2:d5:be:ee:fb:f0:79:ca:82:da:8d: e0:f2:d7:56:bf:32:cf:f8:99:8e:3b:a8:c2:9a:75: 74:27:4f:b7:d9:ba:4c:c6:d2:ac:3a:b2:2b:0a:0e: f7:11:24:54:5a:30:3b:de:7f:7b:d9:a5:62:7e:a8: c4:be:40:75:26:d3:95:be:04:db:36:86:1b:96:6f: 9e:76:bd:f8:32:1f:7d:ac:f6:8c:f8:f0:a7:95:91: 6f:9c:bf:6e:c6:89:1c:fe:d5:fd:ee:7e:67:c4:a8: 60:06:36:5e:f3:53:52:43:39:40:f7:d3:e5:b6:ca: 8a:b5:85:5a:47:7f:76:23:98:6b:b0:5e:00:d9:fd: 8c:3f:40:2b:a3:d1:e8:c5:a2:75:16:0d:da:f6:14: 2f:20:6a:88:07:98:ac:ec:4d:13:bb:69:f8:03:7f: c3:b9:65:01:75:ed:7c:a4:a8:1e:38:de:89:4b:1e: af:3a:5e:5d:7c:bf:f0:e7:98:4a:8e:63:59:b1:10: 23:71:d8:3f:e0:8e:91:4d:15:a3:fd:d1:39:23:cb: 64:92:d0:2b:80:49:e5:52:b8:cc:b0:ea:a0:93:c1: 4d:51:fe:c3:31:85:90:8c:23:d6:8b:33:bd:c1:71: 58:c0:0d:2f:1d:79:67:a0:e7:ce:33:28:df:9f:89: 94:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C1:98:C7:DA:6C:09:EA:4C:78:7F:B7:BB:91:38:1C:DF:C9:7D:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/746ca063-51b4-3ec4-8ceb-e1c0f66ccb3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.220.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c2:52:2c:99:8b:44:7a:48:15:6c:8e:06:45:8d:d2:fd:ad: 71:d9:a4:a2:1a:9a:36:c9:b3:35:a4:4a:7a:d9:0a:78:4e:c8: 7b:4a:5f:fb:8b:89:4e:bf:fd:51:e2:84:4c:d1:78:da:a0:cd: 72:bf:d4:de:c0:4d:d0:e1:77:c1:51:d1:8f:e5:1e:43:d3:28: de:44:df:5f:08:aa:aa:15:6c:97:76:52:30:54:37:3d:60:31: bc:af:f2:9d:b8:64:14:a5:93:10:16:ca:75:57:d3:fd:73:44: 0f:c8:0f:90:60:0d:d8:30:5a:bd:5e:8d:90:8f:8b:da:ad:e3: 5d:fa:01:12:1b:a3:40:1e:7b:b7:8f:8a:c4:27:86:5f:fc:c3: 3e:15:9b:2b:31:9d:ee:95:15:c0:06:3a:42:77:73:46:a8:8f: 73:a2:a0:27:e4:f0:c4:54:90:c2:e2:08:14:b4:5a:41:25:d5: 6a:0d:80:5b:37:83:6e:ce:4e:f4:a1:56:d0:41:ab:0f:9d:a8: 2c:23:60:bf:b1:17:49:3d:d0:29:84:cf:bf:43:79:f9:25:4c: 93:da:78:ff:6a:a1:4f:57:e2:6c:83:55:84:29:31:c6:e3:0a: 52:11:7e:7f:09:3c:c9:c9:cb:a3:86:b8:99:4c:09:5c:a0:ec: 8c:a0:07:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPA00ehsoOhVXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MzQ5M2RlZDgtOGRhOC00MmMwLWExZGQtNGNhMzBmYWI4OGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlnawtW+7vvwecqC2o3g8tdWvzLP+JmOO6jC mnV0J0+32bpMxtKsOrIrCg73ESRUWjA73n972aVifqjEvkB1JtOVvgTbNoYblm+e dr34Mh99rPaM+PCnlZFvnL9uxokc/tX97n5nxKhgBjZe81NSQzlA99PltsqKtYVa R392I5hrsF4A2f2MP0Aro9HoxaJ1Fg3a9hQvIGqIB5is7E0Tu2n4A3/DuWUBde18 pKgeON6JSx6vOl5dfL/w55hKjmNZsRAjcdg/4I6RTRWj/dE5I8tkktArgEnlUrjM sOqgk8FNUf7DMYWQjCPWizO9wXFYwA0vHXlnoOfOMyjfn4mU7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHBmMfabAnqTHh/t7uROBzfyX3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzQ2Y2EwNjMtNTFiNC0z ZWM0LThjZWItZTFjMGY2NmNjYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEStwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjCUiyZi0R6SBVsjgZFjdL9rXHZpKIamjbJszWkSnrZCnhOyHtKX/uL iU6//VHihEzReNqgzXK/1N7ATdDhd8FR0Y/lHkPTKN5E318IqqoVbJd2UjBUNz1g Mbyv8p24ZBSlkxAWynVX0/1zRA/ID5BgDdgwWr1ejZCPi9qt4136ARIbo0Aee7eP isQnhl/8wz4Vmysxne6VFcAGOkJ3c0aoj3OioCfk8MRUkMLiCBS0WkEl1WoNgFs3 g27OTvShVtBBqw+dqCwjYL+xF0k90CmEz79DefklTJPaeP9qoU9X4myDVYQpMcbj ClIRfn8JPMnJy6OGuJlMCVyg7IygB9A= -----END CERTIFICATE-----Generated at Fri Mar 14 08:36:06 2025 by rpki-client