$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a34effe-b255-311d-92f2-b84a447b6022.roa File: 9a34effe-b255-311d-92f2-b84a447b6022.roa (raw, json) Hash identifier: pUMHEnIFUUpXZyZYBJ84PMIiXptR3/ji4JQYw0Um8lE= Subject key identifier: 05:A8:B3:5B:9D:1D:B3:DD:62:94:52:B1:A6:5F:07:38:C6:CD:10:A5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F75D99A7CAA85F35108E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a34effe-b255-311d-92f2-b84a447b6022.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 207.155.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:5d:99:a7:ca:a8:5f:35:10:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=14209835-d687-4ef2-b656-ac3cdf03bd27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:41:f0:77:a2:0c:9a:4e:cf:35:86:cd:cf:8e: da:53:99:ac:68:6e:04:e4:34:b2:aa:ab:98:10:64: 22:a1:b6:e3:b9:db:b0:0e:b2:c0:f5:b5:b3:27:a3: 28:a7:3d:85:f0:d8:02:1d:96:1d:75:82:17:b5:1e: a9:56:d2:9c:b1:40:6c:6b:d0:75:93:f2:90:45:5e: fe:25:d7:2f:56:da:4c:28:16:34:ca:35:89:69:48: 24:a7:4b:ac:1d:16:83:ed:98:5b:5d:e9:e7:1c:a2: 61:1a:32:21:91:94:5e:f1:0f:e3:65:ca:19:99:3b: f5:5c:10:ad:e9:05:d8:67:7c:a2:80:b9:03:ab:dc: 50:c5:17:94:05:58:e7:56:1b:99:b6:60:5b:18:97: 59:ae:bd:29:ea:ec:a8:03:18:1a:fd:3e:eb:79:29: 29:15:54:a3:89:3d:8d:0e:e8:e5:39:09:ac:94:3a: 7d:96:56:21:d0:8d:86:b1:f6:a1:0b:27:12:0d:ae: 93:2d:91:93:68:1e:c5:8a:70:ec:2e:72:b9:4a:c0: b4:c6:5c:05:d1:be:eb:11:10:2a:c8:d9:e0:fb:9b: 50:42:ae:21:a9:82:99:2d:99:d1:b4:94:25:d7:4e: 0b:0a:bf:ef:cf:20:58:d4:49:3e:c8:6b:f5:c6:a8: 6c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A8:B3:5B:9D:1D:B3:DD:62:94:52:B1:A6:5F:07:38:C6:CD:10:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9a34effe-b255-311d-92f2-b84a447b6022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e3:16:9b:81:7a:b9:e0:05:a9:4c:5a:e9:b8:48:fc:91:ba: 55:10:6e:81:b4:4d:4f:ce:de:43:0d:ce:cc:31:83:61:d0:1e: ff:12:ad:0a:89:42:c9:2f:b6:b5:6c:81:d0:f5:21:c6:8a:48: 40:05:11:ef:ef:1c:ac:06:3c:62:76:9a:6c:c5:77:1d:f3:c3: 22:a4:c9:cd:b7:0d:b2:5f:eb:9f:5f:ff:c9:65:25:42:fe:96: 2a:c6:31:41:c8:f3:7f:68:23:09:d6:73:34:37:c9:8a:f2:5e: 6f:b5:1f:30:99:df:22:1c:ab:78:74:5f:6b:4f:29:be:9f:77: 3a:d7:9e:17:e5:27:df:42:91:f2:b9:34:3b:dd:43:54:80:71: b0:b8:5c:3f:c5:4f:93:f0:79:b9:f2:28:3b:1b:9e:6f:2d:3b: 75:c1:c2:23:da:5f:2d:98:aa:52:2c:ba:a3:b6:6d:34:58:bf: d7:2b:0e:92:2d:de:2e:5a:ce:73:28:09:27:2b:55:0e:f6:41: 3a:78:6c:94:5b:18:29:22:1d:4d:68:0c:e2:b2:fc:b4:55:e0: cc:95:a0:32:37:e2:15:a1:88:a0:55:20:f5:9c:21:2b:83:81: d2:ad:e3:3d:8e:8d:34:d5:6b:88:d9:75:01:cf:75:1d:b4:7e: 9d:6b:f4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0912Zp8qoXzUQjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MTQyMDk4MzUtZDY4Ny00ZWYyLWI2NTYtYWMzY2RmMDNiZDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0Hwd6IMmk7PNYbNz47aU5msaG4E5DSyqquY EGQiobbjuduwDrLA9bWzJ6Mopz2F8NgCHZYddYIXtR6pVtKcsUBsa9B1k/KQRV7+ JdcvVtpMKBY0yjWJaUgkp0usHRaD7ZhbXennHKJhGjIhkZRe8Q/jZcoZmTv1XBCt 6QXYZ3yigLkDq9xQxReUBVjnVhuZtmBbGJdZrr0p6uyoAxga/T7reSkpFVSjiT2N DujlOQmslDp9llYh0I2GsfahCycSDa6TLZGTaB7FinDsLnK5SsC0xlwF0b7rERAq yNng+5tQQq4hqYKZLZnRtJQl104LCr/vzyBY1Ek+yGv1xqhsTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWos1udHbPdYpRSsaZfBzjGzRClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWEzNGVmZmUtYjI1NS0z MTFkLTkyZjItYjg0YTQ0N2I2MDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz5sgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvjFpuBerngBalMWum4SPyRulUQboG0TU/O3kMNzswxg2HQHv8SrQqJ QskvtrVsgdD1IcaKSEAFEe/vHKwGPGJ2mmzFdx3zwyKkyc23DbJf659f/8llJUL+ lirGMUHI839oIwnWczQ3yYryXm+1HzCZ3yIcq3h0X2tPKb6fdzrXnhflJ99CkfK5 NDvdQ1SAcbC4XD/FT5PwebnyKDsbnm8tO3XBwiPaXy2YqlIsuqO2bTRYv9crDpIt 3i5aznMoCScrVQ72QTp4bJRbGCkiHU1oDOKy/LRV4MyVoDI34hWhiKBVIPWcISuD gdKt4z2OjTTVa4jZdQHPdR20fp1r9B8= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:22 2025 by rpki-client