$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa File: b85fcffe-594a-3ca2-98c5-30c94c748750.roa (raw, json) Hash identifier: b+zy/RXUcITW6Z9Rs6TH4DM/XtO0haXNlwNkQlLDxjU= Subject key identifier: 77:20:56:69:AF:0C:42:E0:1E:ED:08:8F:52:81:11:E3:A5:40:7A:E0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F7206C431ED787F47C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 205.147.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f7:20:6c:43:1e:d7:87:f4:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=07183775-a1e5-4966-a576-eab19ef3d4bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ee:16:40:5e:ed:7d:13:93:2b:36:3f:1d:a4: 34:6f:e1:00:41:fd:b7:03:9e:1e:3e:9b:4f:72:88: a5:c2:97:34:06:c0:d4:39:65:af:e5:f2:32:ac:4e: 61:bf:a5:1e:59:83:45:ea:fd:03:61:5a:ff:f6:90: 75:37:0d:e3:a4:d7:8c:c0:4b:b2:66:4d:f3:c4:52: d5:bc:f0:76:01:40:b8:f6:7a:eb:20:c7:c8:cc:c4: b9:a1:a6:80:d6:c9:3c:90:01:11:2a:10:93:f6:ca: 6f:68:51:30:88:9b:af:40:17:8e:f8:61:d8:63:6a: 71:b1:46:60:bf:78:66:48:91:58:8f:cd:9a:04:89: cc:b9:e4:a2:e4:d2:24:72:b8:2d:eb:f2:1d:6c:f5: fe:41:55:3f:f7:2d:59:5c:e0:8c:dc:58:c7:0c:19: cc:15:57:50:08:e6:8e:93:71:a3:7d:b3:c2:cc:b4: d5:c4:09:44:a7:8d:b7:1f:41:b2:f6:94:c4:40:39: 0d:ab:fd:9a:b6:a7:2d:44:bb:b6:e3:de:b0:b9:18: fb:34:5c:11:6e:69:81:1a:7e:c0:18:da:b7:35:b2: 35:09:81:d2:08:f1:11:e8:26:dc:ac:66:34:90:b2: 76:c4:4b:5e:0c:a8:d2:5e:61:a5:33:27:83:e2:80: ab:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:56:69:AF:0C:42:E0:1E:ED:08:8F:52:81:11:E3:A5:40:7A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b85fcffe-594a-3ca2-98c5-30c94c748750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.147.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ff:07:c1:2d:81:0f:8b:76:dd:f9:6d:44:30:9d:57:ea:25: 1c:cf:df:d8:f9:37:d0:83:87:a5:a2:fb:17:07:8b:84:a2:c5: 1e:8d:9e:34:91:27:f5:c2:a9:6a:96:4a:b2:73:fe:94:aa:f5: e4:e1:21:85:1f:ce:41:8a:30:00:59:88:86:aa:79:0b:0f:35: 19:ab:fb:7a:49:61:ab:a3:90:59:3f:aa:e5:a6:15:ba:e4:e3: 65:41:6e:ab:19:0d:a7:94:8d:bd:f5:af:4c:cd:26:b9:79:47: 62:50:c2:96:22:6c:0a:17:ee:68:79:6f:c0:b8:68:bb:ea:3b: 74:f4:29:90:9e:81:96:29:5b:60:9d:2d:0b:7e:aa:81:0c:96: dd:a9:0e:2b:e9:a3:c1:59:6a:8a:15:b6:8a:cc:0b:e9:e2:e9: 98:47:be:7e:8a:cd:2d:6c:6f:cc:30:54:5b:1d:fc:be:08:ac: 13:d3:09:48:a1:e5:07:3c:cc:ec:9a:bd:60:ea:b5:b5:a6:10: 10:e0:07:43:a5:44:34:6d:7b:6d:4c:89:15:84:c3:c2:98:3c: 0c:bf:88:e5:e7:18:39:31:87:e2:37:86:c5:07:ae:77:21:67: 7d:13:cc:41:b4:8b:87:8f:61:e9:e0:4c:63:06:70:5e:57:06: c2:3d:5e:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPcgbEMe14f0fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDcxODM3NzUtYTFlNS00OTY2LWE1NzYtZWFiMTllZjNkNGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO4WQF7tfROTKzY/HaQ0b+EAQf23A54ePptP coilwpc0BsDUOWWv5fIyrE5hv6UeWYNF6v0DYVr/9pB1Nw3jpNeMwEuyZk3zxFLV vPB2AUC49nrrIMfIzMS5oaaA1sk8kAERKhCT9spvaFEwiJuvQBeO+GHYY2pxsUZg v3hmSJFYj82aBInMueSi5NIkcrgt6/IdbPX+QVU/9y1ZXOCM3FjHDBnMFVdQCOaO k3GjfbPCzLTVxAlEp423H0Gy9pTEQDkNq/2atqctRLu2496wuRj7NFwRbmmBGn7A GNq3NbI1CYHSCPER6CbcrGY0kLJ2xEteDKjSXmGlMyeD4oCr2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcgVmmvDELgHu0Ij1KBEeOlQHrgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg1ZmNmZmUtNTk0YS0z Y2EyLTk4YzUtMzBjOTRjNzQ4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb/B8EtgQ+Ldt35bUQwnVfqJRzP39j5N9CDh6Wi+xcHi4SixR6NnjSR J/XCqWqWSrJz/pSq9eThIYUfzkGKMABZiIaqeQsPNRmr+3pJYaujkFk/quWmFbrk 42VBbqsZDaeUjb31r0zNJrl5R2JQwpYibAoX7mh5b8C4aLvqO3T0KZCegZYpW2Cd LQt+qoEMlt2pDivpo8FZaooVtorMC+ni6ZhHvn6KzS1sb8wwVFsd/L4IrBPTCUih 5Qc8zOyavWDqtbWmEBDgB0OlRDRte21MiRWEw8KYPAy/iOXnGDkxh+I3hsUHrnch Z30TzEG0i4ePYengTGMGcF5XBsI9XtQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:39 2025 by rpki-client