$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa File: b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa (raw, json) Hash identifier: MhDAQSNDcrcQDSsLl0Mf+fWn4v4p42DcoBW8p2CwFyM= Subject key identifier: 66:AD:BF:AB:16:90:CD:84:77:7A:14:33:08:41:90:3F:D9:1F:44:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F91892CC58658C14E480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.155.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f9:18:92:cc:58:65:8c:14:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=995f43d9-8be2-4239-b44e-357c0ee96f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:70:4e:bd:fc:c7:d1:97:06:ef:eb:63:6f: 68:62:c7:a7:91:c9:10:86:1b:58:fb:a7:89:35:e8: 4c:1e:31:ce:80:cf:b0:69:64:ce:92:90:1c:f7:d5: 29:2a:ce:23:d3:d1:3d:8d:2e:4d:84:58:5d:04:93: 15:84:7c:09:a1:84:55:b0:91:a8:66:1f:8a:db:15: 5e:6b:b1:1d:e5:71:c5:6d:85:2d:57:ee:af:c4:67: 64:6b:27:bb:f7:6f:8a:e4:8c:ad:be:09:cb:1c:27: 42:26:a7:9b:c3:d7:93:0c:66:6e:8c:85:31:33:75: 63:bb:bf:af:3e:0c:63:62:a9:70:fd:be:e0:11:0f: f7:f0:6f:eb:1b:f6:21:a1:83:17:6f:83:aa:3f:27: 02:0f:a8:94:fe:ff:84:6b:30:95:ec:f7:ae:c2:38: 5f:c3:3e:44:8f:f7:a8:ff:52:78:1b:18:1b:81:b6: 2b:11:7f:62:39:1e:07:2c:7f:20:77:3d:ff:44:06: f6:2d:58:8f:7e:62:31:f1:23:46:39:5c:00:9b:7c: 0c:7e:e6:7f:f6:7d:bb:8e:02:d5:ac:f1:3f:58:76: 53:e6:71:fd:2e:e1:2c:69:b1:69:6a:dc:f0:4e:eb: 6d:01:29:6b:73:dd:53:aa:e9:cd:35:9a:0d:1b:7d: fa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:AD:BF:AB:16:90:CD:84:77:7A:14:33:08:41:90:3F:D9:1F:44:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8f6eefc-b2c2-3b62-b48f-42b17c6e2f5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.155.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:8b:c3:0e:8d:8e:8b:00:fc:81:fb:09:53:c4:18:03:cf:7b: 53:93:2d:39:1f:45:07:4c:62:4b:5a:75:70:0b:27:0d:d0:67: c3:e1:fc:54:df:0e:b3:fd:19:34:47:94:8b:5b:5c:f1:c0:2c: 76:19:65:51:d8:ed:48:e3:44:2c:85:30:a4:63:4d:8e:0f:c0: 12:7b:a5:53:0e:d5:45:2d:52:c2:4d:30:51:48:c6:19:a4:61: 22:28:ca:d2:4f:21:05:ee:81:bb:16:e1:82:ee:51:a2:17:d9: 91:6b:91:2f:18:12:02:3a:02:47:50:0d:60:d9:e9:c9:72:e9: 67:48:d9:d1:6d:a9:94:ca:ce:f8:be:1e:a9:6e:69:3c:f5:6c: 83:2a:21:af:da:85:d9:11:a3:2f:71:d4:8a:1d:de:b3:60:39: ce:d7:4c:03:fa:e2:e7:7a:12:fa:b8:0f:ac:e9:ca:66:9f:cf: 17:54:74:66:ae:e6:dc:8c:26:9e:a6:49:10:f8:62:ca:60:26: 5a:75:5a:93:21:69:71:33:af:53:04:9a:8a:0a:1f:22:bf:26: 02:c9:f7:ed:a6:20:42:58:41:5a:0c:cf:23:05:a9:7f:bb:9e: 78:e7:f1:e4:86:0a:9b:69:b9:fa:d6:65:5e:bb:8e:59:36:9b: d6:a0:d2:a7 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEPkYksxYZYwU5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTk1ZjQzZDktOGJlMi00MjM5LWI0NGUtMzU3YzBlZTk2Zjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr9wTr38x9GXBu/rY29oYsenkckQhhtY+6eJ NehMHjHOgM+waWTOkpAc99UpKs4j09E9jS5NhFhdBJMVhHwJoYRVsJGoZh+K2xVe a7Ed5XHFbYUtV+6vxGdkaye792+K5IytvgnLHCdCJqebw9eTDGZujIUxM3Vju7+v PgxjYqlw/b7gEQ/38G/rG/YhoYMXb4OqPycCD6iU/v+EazCV7Peuwjhfwz5Ej/eo /1J4GxgbgbYrEX9iOR4HLH8gdz3/RAb2LViPfmIx8SNGOVwAm3wMfuZ/9n27jgLV rPE/WHZT5nH9LuEsabFpatzwTuttASlrc91TqunNNZoNG336mQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGatv6sWkM2Ed3oUMwhBkD/ZH0SOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjhmNmVlZmMtYjJjMi0z YjYyLWI0OGYtNDJiMTdjNmUyZjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0ZswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcYvDDo2OiwD8gfsJU8QYA897U5MtOR9FB0xiS1p1cAsnDdBnw+H8VN8O s/0ZNEeUi1tc8cAsdhllUdjtSONELIUwpGNNjg/AEnulUw7VRS1Swk0wUUjGGaRh IijK0k8hBe6Buxbhgu5RohfZkWuRLxgSAjoCR1ANYNnpyXLpZ0jZ0W2plMrO+L4e qW5pPPVsgyohr9qF2RGjL3HUih3es2A5ztdMA/ri53oS+rgPrOnKZp/PF1R0Zq7m 3IwmnqZJEPhiymAmWnVakyFpcTOvUwSaigofIr8mAsn37aYgQlhBWgzPIwWpf7ue eOfx5IYKm2m5+tZlXruOWTab1qDSpw== -----END CERTIFICATE-----Generated at Sat Apr 5 18:02:46 2025 by rpki-client