$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa File: b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa (raw, json) Hash identifier: hhGRTlZ/kESDgBrTfy3nn9090py/k/z+euiNhxOLU9U= Subject key identifier: FA:3C:34:22:D3:72:6C:58:98:B9:2A:AA:D3:6F:25:80:F9:A1:9B:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F75D4854D5132AF8188980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 69.66.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:5d:48:54:d5:13:2a:f8:18:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ebda4724-ac3f-4ae9-b8b1-12fdf989e189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2c:31:7a:d2:37:a9:c8:44:af:cb:3b:65:00: 5b:bb:d5:33:4c:f7:d6:c7:b3:e8:77:95:28:93:f6: 7b:08:4c:37:55:de:f1:8f:e5:e6:fa:01:d2:f7:37: ef:fa:5f:13:6b:49:30:77:46:be:c1:e4:34:a5:33: 26:87:84:5d:10:54:4b:ee:e8:10:49:48:62:7c:68: 14:ee:7a:77:6f:c4:0c:90:4f:47:bd:f3:7c:99:6c: 42:84:5d:98:52:53:48:8c:55:9b:01:d8:44:60:ad: e2:f6:9f:3b:4f:95:38:7e:53:d8:a9:da:ac:73:1f: 9a:eb:47:ee:33:76:2a:36:ef:e6:fe:b3:d5:17:98: 42:32:37:9e:bd:77:33:2d:37:34:ab:97:fd:08:fc: e9:bf:c1:29:3b:39:1e:ce:74:bb:ba:1d:1d:ee:d5: 1e:e6:e7:3f:8c:71:75:c8:45:78:4d:d6:9d:a6:ad: d7:ac:cd:96:22:5d:3a:9c:7c:13:bd:74:e9:ac:6d: bd:4b:e0:1d:ad:ec:3d:ba:b6:8a:1a:77:74:7d:e4: 2e:cc:8b:1d:ab:7b:f9:fe:35:03:e1:bf:b8:10:b5: 11:91:f7:d9:92:af:b6:76:10:a1:1c:8a:9b:53:35: 41:89:ff:88:7b:0c:db:a7:f6:ef:91:5d:55:83:aa: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3C:34:22:D3:72:6C:58:98:B9:2A:AA:D3:6F:25:80:F9:A1:9B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b16799ef-15f8-3e2b-9ad2-8a067e176fb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:05:03:64:dc:d6:d7:39:40:9e:b0:35:aa:df:61:c9:c0:5a: a1:91:e8:7e:fd:43:40:41:69:3c:2f:d6:2d:09:e6:1f:57:47: 7a:4d:38:5e:8f:38:60:f0:ef:40:1e:1d:79:70:cb:f4:44:2c: 02:d9:56:83:24:8b:91:d3:46:10:12:c3:48:5f:3c:b2:9d:d2: fd:c4:f7:00:86:48:52:a4:45:4c:31:e7:4e:28:ae:25:e3:54: ea:29:d0:8a:b7:62:c9:fa:9c:07:31:db:9a:63:4d:e9:3e:83: 1a:f7:ea:15:fd:57:05:f1:d6:55:33:6f:55:04:04:c5:de:2e: 51:8b:76:51:87:5d:0d:14:54:7c:4f:85:f6:5c:42:1c:6f:ba: d2:82:5a:f3:69:06:3c:d6:0e:9d:83:d3:f5:a0:b6:51:55:96: 54:c5:5e:91:af:df:c7:69:ae:d7:e7:c5:cd:9d:ef:0b:dd:5f: f3:fa:41:be:ee:18:a8:42:42:90:0f:5f:f4:df:10:a4:42:ab: e0:63:8a:96:fe:5d:9b:80:11:37:4f:9e:e0:2e:f0:b2:ad:07: c8:c4:2e:58:18:f0:bd:a4:97:b6:e5:ce:a9:17:5e:7f:e9:eb: 44:a3:33:5a:8d:61:1d:53:30:63:92:6a:63:8a:ff:7c:f8:42: ca:c2:44:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0911IVNUTKvgYiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk ZWJkYTQ3MjQtYWMzZi00YWU5LWI4YjEtMTJmZGY5ODllMTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCwxetI3qchEr8s7ZQBbu9UzTPfWx7Pod5Uo k/Z7CEw3Vd7xj+Xm+gHS9zfv+l8Ta0kwd0a+weQ0pTMmh4RdEFRL7ugQSUhifGgU 7np3b8QMkE9HvfN8mWxChF2YUlNIjFWbAdhEYK3i9p87T5U4flPYqdqscx+a60fu M3YqNu/m/rPVF5hCMjeevXczLTc0q5f9CPzpv8EpOzkeznS7uh0d7tUe5uc/jHF1 yEV4Tdadpq3XrM2WIl06nHwTvXTprG29S+Adrew9uraKGnd0feQuzIsdq3v5/jUD 4b+4ELURkffZkq+2dhChHIqbUzVBif+Iewzbp/bvkV1Vg6rE0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo8NCLTcmxYmLkqqtNvJYD5oZuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjE2Nzk5ZWYtMTVmOC0z ZTJiLTlhZDItOGEwNjdlMTc2ZmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRULwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0FA2Tc1tc5QJ6wNarfYcnAWqGR6H79Q0BBaTwv1i0J5h9XR3pNOF6P OGDw70AeHXlwy/RELALZVoMki5HTRhASw0hfPLKd0v3E9wCGSFKkRUwx504oriXj VOop0Iq3Ysn6nAcx25pjTek+gxr36hX9VwXx1lUzb1UEBMXeLlGLdlGHXQ0UVHxP hfZcQhxvutKCWvNpBjzWDp2D0/WgtlFVllTFXpGv38dprtfnxc2d7wvdX/P6Qb7u GKhCQpAPX/TfEKRCq+Bjipb+XZuAETdPnuAu8LKtB8jELlgY8L2kl7blzqkXXn/p 60SjM1qNYR1TMGOSamOK/3z4QsrCRMM= -----END CERTIFICATE-----Generated at Fri Mar 14 11:04:07 2025 by rpki-client