$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa File: ad644014-d396-3311-b8f5-c0be900b9032.roa (raw, json) Hash identifier: 25TJBHwWF73ZsgHQRs9NRibWfDW2sMy4ZFD+Z1XyJOU= Subject key identifier: 13:A7:A6:07:11:01:05:17:D3:72:79:23:74:27:4E:F6:79:BB:CC:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30C2D68FE9DCB2DF32B980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa Signing time: Tue 21 Jan 2025 20:38:40 +0000 ROA not before: Tue 21 Jan 2025 20:38:40 +0000 ROA not after: Mon 21 Apr 2025 19:38:40 +0000 asID: 7029 IP address blocks: 207.91.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:c2:d6:8f:e9:dc:b2:df:32:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:38:40 2025 GMT Not After : Apr 21 19:38:40 2025 GMT Subject: CN=7f43bed9-9e01-484e-8750-eff7958c0401 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e5:1d:b0:19:b5:ce:3b:37:d9:c3:7a:d8:88: 06:a7:92:38:45:35:c4:75:8f:7a:c6:e6:ac:a7:0a: 91:01:3b:77:2a:d8:df:e6:44:2e:29:3a:e7:0c:5d: fe:f0:4e:ea:f1:d8:f1:74:87:71:12:8f:b7:ed:f7: d1:78:0e:85:28:ae:dc:30:e9:a7:1f:3d:70:26:47: cb:0b:12:f9:8e:e3:c4:6e:85:60:05:d8:65:f7:1c: 8a:5d:df:85:c8:83:56:97:84:82:29:ae:03:9f:5f: d2:f4:84:65:cf:32:cd:6c:c7:f2:ca:7d:d1:84:59: 6c:1f:21:3f:1e:91:ff:57:66:35:24:2e:1b:73:cb: 99:f2:1a:30:b4:ab:71:77:e1:41:06:84:e5:06:5c: c6:b7:69:b5:9c:53:ac:3a:97:9b:12:61:aa:ed:91: bf:5c:af:94:2e:31:e0:f7:3f:7b:80:9e:1f:c6:ce: d5:31:6d:e7:40:23:f3:7e:8f:54:65:c8:bd:fc:85: 28:d4:8a:20:1d:fd:c4:02:83:85:bb:50:1a:77:33: d7:46:73:78:ec:4a:d7:5c:0e:e4:fc:36:c6:a2:02: cd:16:97:fa:24:9d:df:5a:d9:1d:13:f8:90:5b:a4: ca:cb:dc:ec:73:49:08:3d:e5:27:83:0b:f5:9e:c3: c9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A7:A6:07:11:01:05:17:D3:72:79:23:74:27:4E:F6:79:BB:CC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e2:b2:72:72:63:0e:ae:d5:a9:43:a4:14:2a:62:7f:26:c5: fe:dd:93:73:86:9d:15:7a:b3:2a:98:f5:85:4d:e3:55:14:09: b3:44:e6:27:d1:0f:e5:7f:a4:50:f5:af:2b:e5:9d:2d:a3:2b: b4:35:ce:b4:db:d7:98:34:3c:ea:eb:db:38:6c:06:33:b7:07: 6e:03:9e:a4:f3:e7:0b:03:0c:db:99:47:86:b2:74:8e:40:20: bc:06:5e:cd:09:c0:63:4f:10:b0:78:c1:3c:38:76:06:38:01: c7:87:fc:d0:26:4a:8c:96:82:2b:58:d3:f5:69:0e:6d:25:46: e5:e9:60:31:07:ef:03:02:91:33:a3:68:58:8b:92:df:7b:95: 74:94:35:04:90:8d:c3:9f:09:2f:9f:cb:3e:dc:24:11:73:01: 55:bc:02:ab:27:02:13:58:e6:01:07:46:e2:ed:9f:cb:5f:85: f5:b4:7a:4c:5d:13:28:21:55:70:b7:ef:8f:29:6f:d4:ee:68: c6:1a:5a:44:3c:5a:4b:1f:af:e2:dd:36:70:31:c1:0a:15:73: fc:13:88:14:5f:5a:1d:ff:35:d1:20:85:96:8f:2e:71:22:0d: f0:4a:43:dd:0c:ca:f0:c9:b4:06:b9:de:09:62:36:aa:5f:03: 38:a5:93:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMMLWj+ncst8yuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzg0MFoXDTI1MDQyMTE5Mzg0MFowLzEtMCsGA1UEAxMk N2Y0M2JlZDktOWUwMS00ODRlLTg3NTAtZWZmNzk1OGMwNDAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuUdsBm1zjs32cN62IgGp5I4RTXEdY96xuas pwqRATt3Ktjf5kQuKTrnDF3+8E7q8djxdIdxEo+37ffReA6FKK7cMOmnHz1wJkfL CxL5juPEboVgBdhl9xyKXd+FyINWl4SCKa4Dn1/S9IRlzzLNbMfyyn3RhFlsHyE/ HpH/V2Y1JC4bc8uZ8howtKtxd+FBBoTlBlzGt2m1nFOsOpebEmGq7ZG/XK+ULjHg 9z97gJ4fxs7VMW3nQCPzfo9UZci9/IUo1IogHf3EAoOFu1AadzPXRnN47ErXXA7k /DbGogLNFpf6JJ3fWtkdE/iQW6TKy9zsc0kIPeUngwv1nsPJtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOnpgcRAQUX03J5I3QnTvZ5u8yKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWQ2NDQwMTQtZDM5Ni0z MzExLWI4ZjUtYzBiZTkwMGI5MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbisnJyYw6u1alDpBQqYn8mxf7dk3OGnRV6syqY9YVN41UUCbNE5ifR D+V/pFD1ryvlnS2jK7Q1zrTb15g0POrr2zhsBjO3B24DnqTz5wsDDNuZR4aydI5A ILwGXs0JwGNPELB4wTw4dgY4AceH/NAmSoyWgitY0/VpDm0lRuXpYDEH7wMCkTOj aFiLkt97lXSUNQSQjcOfCS+fyz7cJBFzAVW8AqsnAhNY5gEHRuLtn8tfhfW0ekxd EyghVXC3748pb9TuaMYaWkQ8Wksfr+LdNnAxwQoVc/wTiBRfWh3/NdEghZaPLnEi DfBKQ90MyvDJtAa53gliNqpfAzilk3k= -----END CERTIFICATE-----Generated at Sat Apr 5 18:41:28 2025 by rpki-client