$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa File: a2db5701-1c70-34d2-895b-b21eb98770cb.roa (raw, json) Hash identifier: /Du/TZrx3IKDi3bdkya32tV0AxzdRMO1Vp9yYz1+G9c= Subject key identifier: C3:1B:3C:C8:F4:2B:A3:0C:54:F0:23:7B:85:2F:30:69:59:6E:A0:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111C6AD55070411102AB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 68.143.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1c:6a:d5:50:70:41:11:02:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=746a55f2-6cf2-4460-9b84-6b0b257d0196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:9e:2c:3e:4a:76:8b:54:dc:70:c1:b3:bf: d9:de:7a:31:8b:30:5f:55:73:b1:33:b6:c3:b7:e3: a8:3a:a9:cf:1d:1f:56:de:e6:a0:98:7d:b3:6f:63: f6:fd:c2:96:e6:4b:bc:ad:d7:6a:3e:78:04:91:a6: 26:0b:7a:35:9f:f9:bf:47:72:a7:1b:41:68:10:06: 92:e1:8c:66:71:bd:cc:c1:0d:09:0b:23:fe:f8:62: 1f:11:6f:08:ce:84:f2:0c:da:6d:a4:c7:ca:33:68: b3:cd:c3:60:d2:53:1d:4c:64:2e:80:4b:d5:e8:ec: 4b:1a:92:55:54:bd:57:ee:3f:9d:a0:1e:90:c5:46: 51:35:ef:6d:06:c0:61:86:95:af:e7:7c:83:47:e6: 5c:05:a4:1e:6e:bb:28:2a:4a:6b:c3:99:18:83:1e: 67:06:da:b9:d1:65:8d:02:5c:fe:0e:64:0b:09:f0: 14:43:8a:2c:51:50:97:99:f6:14:10:a5:ea:5b:e8: 0b:04:66:b7:9c:06:86:f4:27:43:15:50:e8:41:09: 02:2b:a5:52:67:9d:13:cd:e3:95:f5:fe:c4:5b:59: b9:c8:32:0d:23:c5:6f:87:0c:90:42:fa:f0:87:cf: 45:2d:fd:12:fc:72:0b:98:c1:68:d8:d4:94:0b:f9: c8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:1B:3C:C8:F4:2B:A3:0C:54:F0:23:7B:85:2F:30:69:59:6E:A0:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a2db5701-1c70-34d2-895b-b21eb98770cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 68.143.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:90:24:c1:ee:f8:eb:96:ab:a2:5c:0b:ae:71:80:b1:71:e8: d0:c4:fa:91:ac:42:6c:cf:21:48:bd:4b:a8:eb:ff:34:3b:b7: 39:99:94:10:11:8e:3d:ca:0d:51:30:70:78:68:cd:54:f6:03: 9f:44:83:45:25:71:88:63:15:98:8f:0c:93:6b:ef:c9:85:e1: a8:4a:e3:ac:c3:3f:d8:35:bd:4c:d1:94:22:1b:2f:32:70:b2: 32:98:46:6d:4c:12:38:ed:ef:56:b2:77:28:27:53:e5:87:80: 3f:84:94:1b:78:5a:69:7b:05:79:d4:4a:ca:b8:d0:41:d6:f3: 9d:29:0b:d9:be:3c:fa:b8:e8:64:dd:6d:aa:94:57:c1:4e:4d: 33:40:4f:61:25:98:fc:7c:e7:15:60:52:50:19:60:97:7c:56: 2b:ad:52:4f:ed:be:fb:61:9f:4a:bb:05:ae:86:ef:dd:69:9d: a3:39:75:d9:0f:1c:a4:d1:6d:57:12:b5:8d:28:59:ae:89:85: df:c4:41:3e:4c:eb:58:0a:e5:00:47:ef:aa:a9:a2:44:19:fe: 68:6c:93:26:cb:cb:2b:7c:1d:78:f4:59:f2:ac:ca:f8:d3:6c: 6c:49:00:14:26:0b:08:48:af:9a:de:3a:1c:72:72:4e:d7:c3: 5a:08:4e:d7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSERxq1VBwQRECq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NzQ2YTU1ZjItNmNmMi00NDYwLTliODQtNmIwYjI1N2QwMTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGGeLD5KdotU3HDBs7/Z3noxizBfVXOxM7bD t+OoOqnPHR9W3uagmH2zb2P2/cKW5ku8rddqPngEkaYmC3o1n/m/R3KnG0FoEAaS 4Yxmcb3MwQ0JCyP++GIfEW8IzoTyDNptpMfKM2izzcNg0lMdTGQugEvV6OxLGpJV VL1X7j+doB6QxUZRNe9tBsBhhpWv53yDR+ZcBaQebrsoKkprw5kYgx5nBtq50WWN Alz+DmQLCfAUQ4osUVCXmfYUEKXqW+gLBGa3nAaG9CdDFVDoQQkCK6VSZ50TzeOV 9f7EW1m5yDINI8VvhwyQQvrwh89FLf0S/HILmMFo2NSUC/nIjQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMMbPMj0K6MMVPAje4UvMGlZbqDOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTJkYjU3MDEtMWM3MC0z NGQyLTg5NWItYjIxZWI5ODc3MGNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMARI8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAQZAkwe7465arolwLrnGAsXHo0MT6kaxCbM8hSL1LqOv/NDu3OZmUEBGO PcoNUTBweGjNVPYDn0SDRSVxiGMVmI8Mk2vvyYXhqErjrMM/2DW9TNGUIhsvMnCy MphGbUwSOO3vVrJ3KCdT5YeAP4SUG3haaXsFedRKyrjQQdbznSkL2b48+rjoZN1t qpRXwU5NM0BPYSWY/HznFWBSUBlgl3xWK61ST+2++2GfSrsFrobv3Wmdozl12Q8c pNFtVxK1jShZromF38RBPkzrWArlAEfvqqmiRBn+aGyTJsvLK3wdePRZ8qzK+NNs bEkAFCYLCEivmt46HHJyTtfDWghO1w== -----END CERTIFICATE-----Generated at Sat Apr 5 23:17:36 2025 by rpki-client