$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa File: 9318fe24-60e4-3b51-8fce-61b094e34012.roa (raw, json) Hash identifier: Vs7yLNMNmtwFZIJu9Aj9ZXL6zx9x8GqncCW6pb+ix/Y= Subject key identifier: 10:60:77:E0:6D:4E:AC:DB:87:1E:56:1C:B3:41:40:73:F3:60:22:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30CF6F00C42ED82C93CD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa Signing time: Tue 21 Jan 2025 20:38:46 +0000 ROA not before: Tue 21 Jan 2025 20:38:46 +0000 ROA not after: Mon 21 Apr 2025 19:38:46 +0000 asID: 7029 IP address blocks: 208.101.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:cf:6f:00:c4:2e:d8:2c:93:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:38:46 2025 GMT Not After : Apr 21 19:38:46 2025 GMT Subject: CN=133bd37a-47f9-4de9-8b68-b1a468ec7688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:88:b8:9a:f2:50:b4:87:1b:9a:04:35:58:68: 32:ca:a2:f2:df:18:1b:29:16:f2:32:53:33:4e:6a: 87:22:63:c1:f3:db:24:0c:40:74:c7:d9:98:19:fb: 3a:03:5e:7c:af:fc:fd:68:c1:f5:e0:d0:01:91:aa: 6e:7d:14:11:9e:48:8a:67:be:df:70:fe:b9:3a:aa: a0:b2:64:4c:77:e5:23:14:1c:e1:c2:5e:bf:4b:d5: 25:b4:cd:d9:3a:46:eb:2c:6d:8f:b1:96:e1:bf:eb: a4:02:31:ae:af:97:e0:48:5b:a2:bd:45:7d:f1:b0: a2:c9:ca:e8:c3:7a:a4:1c:71:19:e3:2b:da:72:c3: 6a:8b:d2:9a:09:fd:79:fa:bf:bb:5b:c5:d9:31:1e: ba:7b:4d:a5:45:03:3f:4a:33:cd:11:8d:97:92:79: da:2b:d1:92:76:e5:dc:c4:25:9e:98:53:62:0c:40: 22:e3:9a:af:ac:df:28:c4:c1:b2:e4:41:24:7d:84: 7b:d9:ed:c0:e5:ce:a6:d4:0d:ee:17:cd:19:d2:6a: 85:28:08:c5:df:cc:19:4d:11:66:00:58:b1:15:a0: 64:88:36:9d:57:79:4f:e2:df:0c:65:0d:7f:f5:38: 45:22:d1:77:5f:72:ed:17:bb:3e:0b:f6:80:7f:c0: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:60:77:E0:6D:4E:AC:DB:87:1E:56:1C:B3:41:40:73:F3:60:22:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:aa:3b:e1:f9:dd:18:8b:d3:3c:5c:6e:f7:77:aa:a7:cd:1d: 96:7d:10:3e:69:76:0f:b2:02:10:25:e6:e5:27:ec:01:be:9e: f4:3b:b3:dc:aa:d2:98:7a:c1:70:85:71:16:76:2a:5b:a3:6a: 6b:2d:5f:89:95:57:4f:a8:43:91:b2:29:8e:20:5d:bd:f1:7a: 3f:7a:5f:81:cf:3b:c5:60:de:20:c0:d8:f7:f6:cc:1f:b9:ed: 9b:b9:48:e5:5c:82:41:99:ed:4b:d1:19:00:4c:d3:56:24:b0: f6:48:73:8b:15:cc:4f:e6:d1:c2:da:7e:e6:57:c4:40:4e:46: 0d:dd:2e:7b:a6:ba:7a:7f:51:72:f8:82:38:1f:8a:1a:07:7e: 2c:f7:f5:53:ca:65:29:25:bf:39:b4:00:1f:e2:b1:08:c4:51: df:95:d0:b8:18:da:e3:e2:16:72:58:d5:26:65:6b:12:d5:7e: 3b:16:3f:9f:b3:70:71:96:c6:18:e5:91:a5:52:8d:2e:5e:f7: e1:1d:cb:25:51:a7:54:39:16:b0:e8:2f:21:2d:7c:ff:8a:69: ed:70:ff:2f:4c:84:4b:5d:a6:07:a2:fc:2b:8b:da:a1:64:07: 52:a0:2e:5a:14:cc:47:8d:94:84:0e:88:b9:e4:8c:31:85:ae: ba:3f:19:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMM9vAMQu2CyTzYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzg0NloXDTI1MDQyMTE5Mzg0NlowLzEtMCsGA1UEAxMk MTMzYmQzN2EtNDdmOS00ZGU5LThiNjgtYjFhNDY4ZWM3Njg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoi4mvJQtIcbmgQ1WGgyyqLy3xgbKRbyMlMz TmqHImPB89skDEB0x9mYGfs6A158r/z9aMH14NABkapufRQRnkiKZ77fcP65Oqqg smRMd+UjFBzhwl6/S9UltM3ZOkbrLG2PsZbhv+ukAjGur5fgSFuivUV98bCiycro w3qkHHEZ4yvacsNqi9KaCf15+r+7W8XZMR66e02lRQM/SjPNEY2XknnaK9GSduXc xCWemFNiDEAi45qvrN8oxMGy5EEkfYR72e3A5c6m1A3uF80Z0mqFKAjF38wZTRFm AFixFaBkiDadV3lP4t8MZQ1/9ThFItF3X3LtF7s+C/aAf8D1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBgd+BtTqzbhx5WHLNBQHPzYCKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxOGZlMjQtNjBlNC0z YjUxLThmY2UtNjFiMDk0ZTM0MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2qO+H53RiL0zxcbvd3qqfNHZZ9ED5pdg+yAhAl5uUn7AG+nvQ7s9yq 0ph6wXCFcRZ2KlujamstX4mVV0+oQ5GyKY4gXb3xej96X4HPO8Vg3iDA2Pf2zB+5 7Zu5SOVcgkGZ7UvRGQBM01YksPZIc4sVzE/m0cLafuZXxEBORg3dLnumunp/UXL4 gjgfihoHfiz39VPKZSklvzm0AB/isQjEUd+V0LgY2uPiFnJY1SZlaxLVfjsWP5+z cHGWxhjlkaVSjS5e9+EdyyVRp1Q5FrDoLyEtfP+Kae1w/y9MhEtdpgei/CuL2qFk B1KgLloUzEeNlIQOiLnkjDGFrro/GaU= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:46 2025 by rpki-client