$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2166f3b-7624-37a4-94f7-a26705d37a41.roa File: b2166f3b-7624-37a4-94f7-a26705d37a41.roa (raw, json) Hash identifier: e7BxtHxZzevbqtOEBO+kd+4vauJo0nahQ6ZnsYP5x0w= Subject key identifier: DD:01:A3:89:DD:BB:40:D5:7F:8C:31:33:BA:AA:B9:71:9B:C2:19:0A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BFEBC29C72C02072A8472C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2166f3b-7624-37a4-94f7-a26705d37a41.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 75.117.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c2:9c:72:c0:20:72:a8:47:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=de7e3bdb-0708-494b-9d01-9d7dd6bde4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:9f:d4:ae:f2:f7:65:f7:e0:71:99:32:41: ae:e2:85:a4:7c:72:3e:e3:30:f4:6f:54:e1:28:fe: 9e:40:47:bb:66:0a:32:9f:e9:9b:fb:7c:d8:24:34: f1:8e:0d:4e:b1:3c:4b:d7:3c:73:1e:bc:dd:58:bf: 1e:8f:12:d0:5f:4c:71:22:0a:29:8b:f6:47:4d:0e: 4f:47:b4:4f:77:a8:ab:16:3a:14:e9:ba:4c:bc:cf: 26:cf:bd:5f:c9:70:b1:45:11:f1:14:6c:f5:24:c0: 9d:92:89:c1:31:c0:e0:65:4e:70:a6:50:dd:71:c6: 0f:ba:64:92:c3:4d:2f:fe:5e:dc:8f:a2:99:c3:8b: 0f:cc:d1:97:c6:30:80:d7:78:27:5c:1d:8b:52:a8: 2a:ea:80:a8:5e:1b:72:dd:12:9b:ce:e1:ea:17:3e: 67:9c:7b:a8:ea:03:8b:1d:fb:3f:ad:22:0a:d8:45: c6:cb:81:41:37:99:0e:06:6f:f4:dd:ec:f4:91:b7: 38:a4:43:a1:72:b1:0b:2f:a5:f7:d3:34:57:44:6f: 07:8c:f5:ec:39:ae:47:30:70:dd:ee:09:3d:57:12: 52:31:87:1a:38:67:3b:cb:97:62:bb:04:2d:91:5e: 3d:74:a5:dd:78:ac:ae:28:1a:52:b9:35:e5:57:9c: da:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:01:A3:89:DD:BB:40:D5:7F:8C:31:33:BA:AA:B9:71:9B:C2:19:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2166f3b-7624-37a4-94f7-a26705d37a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a7:5a:14:73:e0:d4:4d:d6:5e:24:77:3d:93:55:a9:c1:88: 67:b5:59:eb:cf:58:17:6d:f0:b4:b0:a4:a3:d7:4d:be:91:aa: b8:e0:f7:4b:cd:30:e0:45:f1:ff:14:65:32:3e:28:f3:b8:17: 06:1b:09:89:2b:81:c8:60:27:d2:64:e6:9a:68:d8:75:11:fc: ae:6f:d6:71:cb:d7:7d:f9:36:53:5c:90:42:7e:4b:ee:6f:9d: 25:f6:04:23:99:fd:3e:04:4c:0a:b5:11:ef:e5:94:d3:7f:00: 98:9d:10:40:e5:5e:36:97:c0:15:ef:a1:8b:3d:f4:68:71:0f: 01:28:c0:59:f4:c8:5c:c3:9a:13:99:b8:e2:45:18:be:d2:16: 99:03:ac:d1:67:ed:ea:e9:ca:93:47:19:01:2a:b6:83:12:df: 24:c7:83:53:92:26:a2:ff:4a:6a:1f:93:2e:39:e2:0d:1d:fe: bc:fa:b2:ca:6e:89:be:71:e8:4d:e8:fe:85:0e:cb:3d:6e:c9: 0d:f9:0a:f0:36:ac:e9:78:d1:34:a9:e4:5c:f2:ce:45:29:a8: b7:ce:5a:94:9a:f5:58:0b:7c:04:48:15:cc:e9:86:88:c0:92: ab:8e:bb:02:93:1d:74:7d:f3:1c:86:83:f7:ff:c1:b4:53:47: ad:9a:b4:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68KccsAgcqhHLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZGU3ZTNiZGItMDcwOC00OTRiLTlkMDEtOWQ3ZGQ2YmRlNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTqf1K7y92X34HGZMkGu4oWkfHI+4zD0b1Th KP6eQEe7Zgoyn+mb+3zYJDTxjg1OsTxL1zxzHrzdWL8ejxLQX0xxIgopi/ZHTQ5P R7RPd6irFjoU6bpMvM8mz71fyXCxRRHxFGz1JMCdkonBMcDgZU5wplDdccYPumSS w00v/l7cj6KZw4sPzNGXxjCA13gnXB2LUqgq6oCoXhty3RKbzuHqFz5nnHuo6gOL Hfs/rSIK2EXGy4FBN5kOBm/03ez0kbc4pEOhcrELL6X30zRXRG8HjPXsOa5HMHDd 7gk9VxJSMYcaOGc7y5diuwQtkV49dKXdeKyuKBpSuTXlV5zaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0Bo4ndu0DVf4wxM7qquXGbwhkKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjIxNjZmM2ItNzYyNC0z N2E0LTk0ZjctYTI2NzA1ZDM3YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSnWhRz4NRN1l4kdz2TVanBiGe1WevPWBdt8LSwpKPXTb6Rqrjg90vN MOBF8f8UZTI+KPO4FwYbCYkrgchgJ9Jk5ppo2HUR/K5v1nHL1335NlNckEJ+S+5v nSX2BCOZ/T4ETAq1Ee/llNN/AJidEEDlXjaXwBXvoYs99GhxDwEowFn0yFzDmhOZ uOJFGL7SFpkDrNFn7erpypNHGQEqtoMS3yTHg1OSJqL/Smofky454g0d/rz6sspu ib5x6E3o/oUOyz1uyQ35CvA2rOl40TSp5FzyzkUpqLfOWpSa9VgLfARIFczphojA kquOuwKTHXR98xyGg/f/wbRTR62atJw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:17 2025 by rpki-client