$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa File: b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa (raw, json) Hash identifier: zODFhnc/gmIBqOvjgjOx/0oSOJxWbJfVCqM/T2XXtoA= Subject key identifier: 8B:CB:14:0E:28:C0:01:E8:AC:66:AC:1D:4E:8E:E4:ED:C8:18:08:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211267D9BDD6C27A7DCA300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 208.84.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:26:7d:9b:dd:6c:27:a7:dc:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7a85f343-a4d9-4b3b-bd18-2f2cd6bd5969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ae:b0:2e:43:2e:a3:7d:85:9b:cf:1b:c5:86: a7:0a:8c:14:17:dc:c1:55:97:21:ae:df:29:37:39: ac:cf:1a:ca:74:0e:93:66:76:1a:c2:4f:97:97:fa: 19:a1:c8:84:fb:8a:64:dc:7e:ae:df:57:1b:30:b2: e0:5e:7c:33:0c:c5:66:0f:f0:2d:11:41:58:13:7b: 30:85:eb:a4:72:34:bd:f5:19:db:12:d0:9a:ac:3c: 7a:c1:8a:5b:48:db:a2:5d:04:15:62:98:3f:7c:70: e3:f0:76:b7:89:09:46:09:df:d9:3c:95:2e:52:4f: a3:b3:df:03:83:d3:fc:ae:e4:5b:38:ac:43:c4:9b: 76:03:c9:bc:c1:fd:39:fe:e7:6c:7e:69:05:a1:47: ea:52:82:98:0d:1a:3d:62:d1:de:94:11:b7:d1:9e: 5b:de:d2:7d:ff:4a:3b:3f:24:d8:d7:7a:4d:58:d0: 8d:a7:95:4a:0b:fe:d6:ce:3f:5e:fe:c1:c9:06:da: c9:fe:d9:cc:32:2d:3c:8c:4b:e8:77:07:35:2f:b5: 37:b8:82:78:47:26:9d:ee:4f:aa:d9:39:0a:3a:a8: 5b:21:c8:3a:33:2b:ac:17:65:f5:6f:68:94:cc:71: 2c:31:92:97:94:c6:79:83:5c:f6:7f:f5:92:ab:00: aa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CB:14:0E:28:C0:01:E8:AC:66:AC:1D:4E:8E:E4:ED:C8:18:08:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b764b8f2-3808-3bd4-9527-cc95c32aeb93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.84.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:8f:c9:d6:c6:3b:40:98:82:47:89:b2:a8:fd:34:ed:62:ec: f4:ad:a0:ca:ae:69:56:2f:f2:0d:ed:02:6b:7e:ea:c8:ff:81: de:d3:d7:52:f2:f1:71:e1:d9:4f:c3:5f:68:31:3a:ea:ff:a3: b9:9c:5e:ca:45:b9:d9:f9:27:44:6a:a9:b5:28:9b:82:f1:c2: a5:54:8d:04:98:0e:3c:72:9d:17:d0:5d:5b:32:84:2e:21:47: e1:c9:39:4d:2d:3a:42:be:ba:0f:2b:0e:1b:13:c2:dc:f6:95: e2:54:e1:37:43:4c:97:8e:50:51:d9:8a:f9:18:0c:84:6c:2d: 6a:84:5a:a6:b2:9b:b7:12:f9:0f:e0:fc:b2:ed:54:05:3f:4a: 64:54:39:4e:77:26:48:7e:17:73:d5:0a:f2:c1:2a:e9:9b:48: 89:ff:52:b9:47:ac:ca:55:67:5a:20:1f:4f:b6:11:bc:d1:37: 9e:d1:e8:0d:1e:ee:b1:e0:49:bd:80:e0:07:b6:5b:07:3f:7a: 9f:7c:a7:4c:1a:70:08:61:6f:07:e4:a1:9e:f0:04:1b:b2:09: f7:7d:eb:a6:68:6a:5b:c4:7a:8d:26:c1:03:0e:5e:44:82:ce: 6e:73:88:67:96:a1:9a:c1:c7:c6:e5:79:5a:9c:80:c1:be:f6: 67:b4:80:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESZ9m91sJ6fcowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2E4NWYzNDMtYTRkOS00YjNiLWJkMTgtMmYyY2Q2YmQ1OTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhK6wLkMuo32Fm88bxYanCowUF9zBVZchrt8p NzmszxrKdA6TZnYawk+Xl/oZociE+4pk3H6u31cbMLLgXnwzDMVmD/AtEUFYE3sw heukcjS99RnbEtCarDx6wYpbSNuiXQQVYpg/fHDj8Ha3iQlGCd/ZPJUuUk+js98D g9P8ruRbOKxDxJt2A8m8wf05/udsfmkFoUfqUoKYDRo9YtHelBG30Z5b3tJ9/0o7 PyTY13pNWNCNp5VKC/7Wzj9e/sHJBtrJ/tnMMi08jEvodwc1L7U3uIJ4Ryad7k+q 2TkKOqhbIcg6MyusF2X1b2iUzHEsMZKXlMZ5g1z2f/WSqwCqvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvLFA4owAHorGasHU6O5O3IGAjoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjc2NGI4ZjItMzgwOC0z YmQ0LTk1MjctY2M5NWMzMmFlYjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FSoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmPydbGO0CYgkeJsqj9NO1i7PStoMquaVYv8g3tAmt+6sj/gd7T11Ly 8XHh2U/DX2gxOur/o7mcXspFudn5J0RqqbUom4LxwqVUjQSYDjxynRfQXVsyhC4h R+HJOU0tOkK+ug8rDhsTwtz2leJU4TdDTJeOUFHZivkYDIRsLWqEWqaym7cS+Q/g /LLtVAU/SmRUOU53Jkh+F3PVCvLBKumbSIn/UrlHrMpVZ1ogH0+2EbzRN57R6A0e 7rHgSb2A4Ae2Wwc/ep98p0wacAhhbwfkoZ7wBBuyCfd966ZoalvEeo0mwQMOXkSC zm5ziGeWoZrBx8bleVqcgMG+9me0gOQ= -----END CERTIFICATE-----Generated at Sun Apr 6 01:16:04 2025 by rpki-client