$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9234d777-a6e0-3a43-8681-3527a1ed83fa.roa File: 9234d777-a6e0-3a43-8681-3527a1ed83fa.roa (raw, json) Hash identifier: Y++E4bBCraokGEaoxpG3OBhY9z8O3HL18P6LbiEuCmo= Subject key identifier: 73:99:48:FC:30:DA:75:F9:B5:0A:D8:ED:A1:5B:C7:A4:57:1C:D9:BB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111D217BE29DCCE4C41E60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9234d777-a6e0-3a43-8681-3527a1ed83fa.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 69.95.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1d:21:7b:e2:9d:cc:e4:c4:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0f3e8d2c-04f8-4767-a68d-7195ed398e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:81:08:f6:65:31:80:d8:fe:fb:ef:53:05:ce: 81:f7:f5:45:b6:2a:8e:c3:a1:fd:8e:44:9a:10:4a: b8:99:99:57:d1:d1:db:cd:99:75:02:73:6e:ad:00: 42:85:f1:5c:a1:16:f3:35:32:5a:13:d3:0c:ae:3f: 42:33:e7:1f:10:89:c8:ed:79:b1:db:65:17:f5:9c: 31:a2:c7:99:b9:f7:80:6a:3c:e1:e4:ad:97:c9:49: 13:68:51:1d:c1:46:13:07:92:78:bc:e4:a7:76:32: 58:66:97:76:e9:b8:e1:73:57:e0:16:83:99:67:2d: a6:7d:d2:1d:9b:1f:e1:aa:8c:0b:0a:28:3d:70:35: b4:bf:ef:17:23:8d:15:13:95:0a:5f:38:fa:e3:c6: 5f:5e:05:b8:8c:d3:02:36:f9:6c:42:36:ec:34:87: b2:23:68:c2:1c:e5:b2:61:3c:8d:45:75:1f:17:ef: 45:39:48:c4:f6:2a:a0:49:98:90:e7:92:ea:f5:56: 37:15:60:44:f4:9f:49:11:c0:e5:e4:a7:88:d5:13: 78:7c:47:c0:be:12:95:be:d5:f2:f8:97:44:6a:e3: 7b:52:2b:d5:30:82:33:48:8d:01:b8:c5:a7:2b:17: 8e:28:10:8c:39:24:e0:66:bb:d3:42:d8:64:af:93: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:99:48:FC:30:DA:75:F9:B5:0A:D8:ED:A1:5B:C7:A4:57:1C:D9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9234d777-a6e0-3a43-8681-3527a1ed83fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.95.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:e3:53:22:8b:af:f7:e9:96:f5:20:87:ed:c0:fc:fa:ba:9f: 22:0b:a9:93:16:b9:98:68:2c:20:c8:bb:df:ce:38:be:21:8e: 1c:af:f0:ab:40:dc:a5:38:27:e0:c6:1e:a3:d6:56:57:9d:5e: 92:a9:e2:de:b5:15:fe:1f:e4:f7:ae:81:cc:95:63:f2:00:28: 08:d4:bc:d4:fa:59:66:db:e7:67:34:0b:53:86:17:98:00:d9: 50:06:76:22:a2:fc:1b:1e:46:af:f8:45:5e:87:ed:1b:34:76: 8a:fb:35:23:fe:10:e5:0d:06:55:3f:05:97:36:0c:aa:e2:cb: 0c:47:54:1c:82:50:83:26:c3:37:9a:f9:a9:7d:54:54:b5:93: 19:55:72:29:75:fa:83:5b:63:76:36:eb:d6:22:b6:c2:27:08: 0a:1c:d0:e6:e1:b0:91:7b:30:ae:f4:6b:c2:b6:09:4b:54:37: ae:4e:3b:e2:e2:0d:8e:d6:aa:3e:a6:87:73:8f:ca:b0:fd:0f: c5:fb:93:61:ca:2a:28:33:9a:1b:7c:68:cd:76:72:ab:18:a4: 9a:d9:ac:5e:81:4d:e0:db:25:63:d0:d3:60:2b:52:8e:86:d2: e7:a4:ba:bc:21:d7:02:35:58:b9:34:d1:62:a5:33:9b:13:e0: e9:26:49:46 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSER0he+KdzOTEHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGYzZThkMmMtMDRmOC00NzY3LWE2OGQtNzE5NWVkMzk4ZTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYEI9mUxgNj+++9TBc6B9/VFtiqOw6H9jkSa EEq4mZlX0dHbzZl1AnNurQBChfFcoRbzNTJaE9MMrj9CM+cfEInI7Xmx22UX9Zwx oseZufeAajzh5K2XyUkTaFEdwUYTB5J4vOSndjJYZpd26bjhc1fgFoOZZy2mfdId mx/hqowLCig9cDW0v+8XI40VE5UKXzj648ZfXgW4jNMCNvlsQjbsNIeyI2jCHOWy YTyNRXUfF+9FOUjE9iqgSZiQ55Lq9VY3FWBE9J9JEcDl5KeI1RN4fEfAvhKVvtXy +JdEauN7UivVMIIzSI0BuMWnKxeOKBCMOSTgZrvTQthkr5PZUwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHOZSPww2nX5tQrY7aFbx6RXHNm7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTIzNGQ3NzctYTZlMC0z YTQzLTg2ODEtMzUyN2ExZWQ4M2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARV8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAuNTIouv9+mW9SCH7cD8+rqfIgupkxa5mGgsIMi73844viGOHK/wq0Dc pTgn4MYeo9ZWV51ekqni3rUV/h/k966BzJVj8gAoCNS81PpZZtvnZzQLU4YXmADZ UAZ2IqL8Gx5Gr/hFXoftGzR2ivs1I/4Q5Q0GVT8FlzYMquLLDEdUHIJQgybDN5r5 qX1UVLWTGVVyKXX6g1tjdjbr1iK2wicIChzQ5uGwkXswrvRrwrYJS1Q3rk474uIN jtaqPqaHc4/KsP0PxfuTYcoqKDOaG3xozXZyqxikmtmsXoFN4NslY9DTYCtSjobS 56S6vCHXAjVYuTTRYqUzmxPg6SZJRg== -----END CERTIFICATE-----Generated at Sun Apr 6 02:39:04 2025 by rpki-client