$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa File: 8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa (raw, json) Hash identifier: aJRmlRxOa+wKIxO3WrP9k8VZfFfFTVERZADJHfsOvsA= Subject key identifier: 7F:F7:DC:02:21:1B:88:F9:04:66:EC:8D:40:8C:96:91:83:87:9D:D4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112889417474D476A35240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.205.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:28:89:41:74:74:d4:76:a3:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=a793a53d-94ef-4132-8104-327dd4adcdd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a7:da:d5:08:b5:1c:3d:f0:44:23:8e:6c:9b: 32:2f:69:0f:4a:d8:02:f2:f6:e5:34:95:97:43:3a: ed:85:16:8e:d6:c8:89:9b:af:b5:be:e5:a3:bd:f4: 3f:7e:7f:5c:94:71:6a:b6:e4:33:98:61:6e:ef:49: 92:ae:00:43:63:b5:58:20:cf:a7:6d:a6:60:1c:05: f8:96:2c:75:28:64:2c:cb:3e:48:18:6a:6a:0a:59: d0:4b:c9:7b:f2:40:c4:c0:b4:59:25:4d:91:0a:b6: 63:2b:33:07:68:ad:d2:02:b9:9b:44:c6:f1:2c:8e: 33:04:a7:7a:f1:95:43:a0:bf:c4:4d:29:af:aa:cb: e0:9c:4b:09:17:36:b0:65:9e:67:2e:e3:ec:f4:1f: 1e:40:7f:02:06:bf:0f:c2:af:96:fe:ba:bf:51:7d: 15:aa:89:8c:5d:06:e9:ac:f6:39:4d:b4:b0:ee:4f: 2b:61:21:60:ad:24:b7:82:4f:f4:f3:f3:6a:ce:4e: 6e:57:98:83:11:42:88:f1:ec:76:ff:b9:95:f8:87: a4:59:bd:99:4d:1d:f4:b5:0f:92:28:d8:18:9a:d3: 45:54:ce:c3:87:2d:b8:2b:af:a0:c0:42:32:0a:be: 32:b0:ca:b0:35:c5:b1:59:e9:48:9b:63:19:35:e7: 3b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:DC:02:21:1B:88:F9:04:66:EC:8D:40:8C:96:91:83:87:9D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ebdcccb-bc36-3b12-9fb9-dc02a2134594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.205.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:ec:8f:48:c0:a1:95:01:f5:f0:7d:ae:c6:93:85:90:13:0f: f8:8c:d9:73:48:49:de:69:96:07:67:08:92:4b:f2:bf:19:28: 34:77:66:aa:b2:97:db:34:c6:c3:0a:c3:92:d9:93:a3:d1:e2: 8d:d2:0e:81:8d:f3:c7:2b:dd:73:21:ec:7d:9c:3d:95:fd:32: 92:bc:9a:c0:fc:91:57:0f:e4:46:56:28:b5:8c:44:1d:1b:e9: 72:f7:a0:ce:8b:ab:65:db:10:0e:e4:44:8c:c5:d6:d9:7b:46: 23:c5:ef:5a:57:93:88:70:a8:34:45:cf:40:6a:cd:33:42:41: 34:cb:12:ea:c8:bc:76:7d:ed:b3:93:74:18:cc:8c:0d:cd:c1: 8b:99:19:15:96:39:e3:15:96:cc:52:d2:d6:eb:a8:30:92:9b: 41:8c:d4:7f:0e:8d:47:9a:c9:83:1e:04:9d:11:47:d7:b6:00: 04:71:a3:94:26:5e:05:93:7a:1e:44:11:30:2d:1e:3b:ef:22: ac:d6:ea:d2:b5:04:26:47:e7:89:27:1c:ce:7c:40:ab:be:37: 0b:5d:1c:52:4a:13:9f:3c:7e:77:5a:bb:bb:b9:88:37:1f:a7: 23:13:8c:10:6f:3b:c7:2d:2a:eb:5b:48:4a:b8:19:3f:4d:e9: 71:22:ab:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESiJQXR01HajUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YTc5M2E1M2QtOTRlZi00MTMyLTgxMDQtMzI3ZGQ0YWRjZGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoafa1Qi1HD3wRCOObJsyL2kPStgC8vblNJWX QzrthRaO1siJm6+1vuWjvfQ/fn9clHFqtuQzmGFu70mSrgBDY7VYIM+nbaZgHAX4 lix1KGQsyz5IGGpqClnQS8l78kDEwLRZJU2RCrZjKzMHaK3SArmbRMbxLI4zBKd6 8ZVDoL/ETSmvqsvgnEsJFzawZZ5nLuPs9B8eQH8CBr8Pwq+W/rq/UX0VqomMXQbp rPY5TbSw7k8rYSFgrSS3gk/08/Nqzk5uV5iDEUKI8ex2/7mV+IekWb2ZTR30tQ+S KNgYmtNFVM7Dhy24K6+gwEIyCr4ysMqwNcWxWelIm2MZNec7GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/33AIhG4j5BGbsjUCMlpGDh53UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGViZGNjY2ItYmMzNi0z YjEyLTlmYjktZGMwMmEyMTM0NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2M3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzsj0jAoZUB9fB9rsaThZATD/iM2XNISd5plgdnCJJL8r8ZKDR3Zqqy l9s0xsMKw5LZk6PR4o3SDoGN88cr3XMh7H2cPZX9MpK8msD8kVcP5EZWKLWMRB0b 6XL3oM6Lq2XbEA7kRIzF1tl7RiPF71pXk4hwqDRFz0BqzTNCQTTLEurIvHZ97bOT dBjMjA3NwYuZGRWWOeMVlsxS0tbrqDCSm0GM1H8OjUeayYMeBJ0RR9e2AARxo5Qm XgWTeh5EETAtHjvvIqzW6tK1BCZH54knHM58QKu+NwtdHFJKE588fndau7u5iDcf pyMTjBBvO8ctKutbSEq4GT9N6XEiqwc= -----END CERTIFICATE-----Generated at Sun Apr 6 03:44:10 2025 by rpki-client