$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8310a502-8aa9-3c3c-93e9-182e502d46d0.roa File: 8310a502-8aa9-3c3c-93e9-182e502d46d0.roa (raw, json) Hash identifier: R7H4dKedIoZQIjEg/A7x4O1j7EUMndKgAOUZiwX5WZ0= Subject key identifier: 11:D8:7C:E6:7F:45:A3:90:BA:C1:BC:47:55:D7:1E:39:37:96:1F:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2110572A58576D9E2F6C980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8310a502-8aa9-3c3c-93e9-182e502d46d0.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 39940 IP address blocks: 207.106.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:05:72:a5:85:76:d9:e2:f6:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=115742d6-e3cc-4e7b-ad7b-f209abdb09d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ab:21:7e:b1:da:b0:73:25:c5:fb:57:56:00: 88:6c:3b:45:58:b7:17:9c:e1:eb:5b:a0:8e:c5:0b: 9e:9a:2c:8b:ba:a2:0d:d7:17:46:37:f6:8b:ba:1a: bb:12:1f:96:fd:26:af:01:ab:c4:a4:af:5c:27:31: 61:7a:1e:21:da:f4:37:a6:91:b2:1d:20:5a:c0:7e: c8:de:92:86:1a:4d:8d:63:4e:92:17:c0:bf:60:48: b5:e3:7c:ed:2b:d6:25:35:35:c4:ed:e3:cb:7e:d9: aa:4f:05:7c:42:80:2f:89:0a:61:16:67:a2:23:12: 15:fc:6c:61:e1:2f:21:a3:07:8b:80:9a:a4:7c:b1: 0b:7d:9b:dd:5f:45:75:aa:5c:be:d5:cd:62:93:a7: b6:1b:22:0a:d6:01:05:e1:4d:4a:9b:98:00:dd:35: f7:37:22:69:aa:39:19:20:05:ae:91:9d:9b:ee:8a: 9c:1e:66:90:bf:ec:7f:f7:cb:04:1f:8d:41:60:9f: 4f:48:6a:dd:2c:2a:de:b8:5b:68:30:a3:f8:4c:d7: 07:8d:41:b5:99:54:b2:3a:28:f1:a4:ae:a3:0a:3b: e3:c9:e3:70:04:a2:49:ff:bd:61:49:7c:d0:55:d2: 36:ce:66:e8:b6:f0:0b:17:08:c4:01:53:5c:d1:b8: e7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D8:7C:E6:7F:45:A3:90:BA:C1:BC:47:55:D7:1E:39:37:96:1F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8310a502-8aa9-3c3c-93e9-182e502d46d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.106.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:3c:e4:a4:82:92:5b:c8:91:7e:59:c9:c5:76:6a:17:e0:c9: 33:0c:93:90:e4:33:e3:63:ac:05:f9:bb:f7:7c:c6:7e:55:fb: 13:fc:f8:4c:3e:dd:89:a1:8e:3c:ef:71:a7:3b:f9:63:1d:c1: b8:b9:d0:cf:15:66:00:94:63:89:48:a5:1d:09:1a:c0:40:d8: 04:69:ce:95:c6:a8:d0:47:94:bf:18:b5:9a:ad:4d:a1:7a:1d: 5f:d2:62:6b:c8:ad:6f:7d:9f:25:70:dd:6d:07:01:7a:2c:1d: af:ac:e5:8c:41:32:9d:a3:08:fa:f2:6f:26:f8:94:ce:84:e3: 23:fd:3b:0a:74:a3:5e:1c:a2:48:54:75:b0:70:38:39:2c:a3: f3:c4:79:a1:32:c4:58:bc:13:19:0d:57:a7:87:2d:dd:08:58: a8:66:f2:ec:49:e4:40:bf:a1:06:1e:60:84:89:6d:5b:3c:c0: 62:f4:e1:83:f6:38:cc:fd:66:57:62:e3:17:a6:36:2d:c0:bf: 06:77:a8:68:f8:10:c8:53:68:b5:94:cf:07:97:2a:8e:05:1b: 54:c9:33:e2:7a:59:5d:49:a5:c6:e4:0b:16:06:91:58:09:5e: 74:d4:ea:9c:b9:54:d3:78:31:9d:00:46:82:77:27:84:6a:f1: 6f:41:c8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQVypYV22eL2yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MTE1NzQyZDYtZTNjYy00ZTdiLWFkN2ItZjIwOWFiZGIwOWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqshfrHasHMlxftXVgCIbDtFWLcXnOHrW6CO xQuemiyLuqIN1xdGN/aLuhq7Eh+W/SavAavEpK9cJzFheh4h2vQ3ppGyHSBawH7I 3pKGGk2NY06SF8C/YEi143ztK9YlNTXE7ePLftmqTwV8QoAviQphFmeiIxIV/Gxh 4S8howeLgJqkfLELfZvdX0V1qly+1c1ik6e2GyIK1gEF4U1Km5gA3TX3NyJpqjkZ IAWukZ2b7oqcHmaQv+x/98sEH41BYJ9PSGrdLCreuFtoMKP4TNcHjUG1mVSyOijx pK6jCjvjyeNwBKJJ/71hSXzQVdI2zmbotvALFwjEAVNc0bjnpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHYfOZ/RaOQusG8R1XXHjk3lh8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODMxMGE1MDItOGFhOS0z YzNjLTkzZTktMTgyZTUwMmQ0NmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2pvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF885KSCklvIkX5ZycV2ahfgyTMMk5DkM+NjrAX5u/d8xn5V+xP8+Ew+ 3Ymhjjzvcac7+WMdwbi50M8VZgCUY4lIpR0JGsBA2ARpzpXGqNBHlL8YtZqtTaF6 HV/SYmvIrW99nyVw3W0HAXosHa+s5YxBMp2jCPrybyb4lM6E4yP9Owp0o14cokhU dbBwODkso/PEeaEyxFi8ExkNV6eHLd0IWKhm8uxJ5EC/oQYeYISJbVs8wGL04YP2 OMz9Zldi4xemNi3AvwZ3qGj4EMhTaLWUzweXKo4FG1TJM+J6WV1JpcbkCxYGkVgJ XnTU6py5VNN4MZ0ARoJ3J4Rq8W9ByII= -----END CERTIFICATE-----Generated at Mon Apr 7 11:50:08 2025 by rpki-client