$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa File: c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa (raw, json) Hash identifier: AuUuULpncHfsPCm5E9qJB0LSSDGXzNoXjsgMQKLOLjI= Subject key identifier: 73:75:4E:64:D6:13:B9:A6:3D:3B:15:EA:D5:4D:12:53:96:AA:7E:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F89222CA96FD8AECE400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.92.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f8:92:22:ca:96:fd:8a:ec:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4f0b7b17-eeb9-42d7-a40f-a036f9907969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8c:b4:75:11:38:e4:89:bf:2e:78:60:9e:5e: f1:3c:81:e9:cb:31:62:cf:94:89:a3:c0:0a:05:35: 11:45:0e:b1:f7:82:09:d9:cf:ed:75:38:2d:5e:aa: d0:2f:6a:27:1e:b4:5b:bc:55:db:bb:d0:fe:93:9b: ec:40:2d:86:ad:1a:a0:7c:70:fa:19:e2:29:0c:2a: 32:63:6d:1f:4b:75:cc:c1:4d:63:f2:60:96:e9:b9: 25:2f:74:91:4b:56:a0:b6:f1:8e:2b:42:af:5f:25: d4:40:d5:66:b8:40:85:ea:a8:29:76:48:e0:1f:c2: 73:69:2f:64:a9:d5:b8:f0:0f:66:6b:84:9c:e6:a2: 98:d8:99:96:47:b7:c2:55:75:b2:16:5d:de:43:4b: ee:2d:09:4e:fa:12:29:b9:1b:06:14:3d:c0:4c:8e: 03:28:bb:2b:6f:5b:b9:71:98:bb:e9:2a:5c:72:42: 93:2a:70:6e:88:b5:88:9b:9f:a9:7c:a8:1a:94:99: 19:af:d3:26:1a:f5:a4:e6:59:9b:51:23:96:8a:cb: f9:c9:fd:54:03:f8:af:c4:cd:70:8d:f9:62:2f:26: a9:ec:c8:ab:43:d3:ae:0f:e2:68:85:55:35:36:0d: c0:d9:7f:df:c4:71:b3:31:18:3a:32:42:e0:b0:3b: a9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:75:4E:64:D6:13:B9:A6:3D:3B:15:EA:D5:4D:12:53:96:AA:7E:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2b:af:9b:28:76:44:2d:30:8d:d4:54:5b:3c:96:9d:4d:30: df:06:cf:ff:2e:98:ac:80:ab:88:75:2d:68:71:30:a3:dd:5f: 3a:b7:f7:d8:08:c9:3e:f9:68:2a:96:0e:c5:11:27:81:33:fd: b1:76:1b:1e:96:91:31:9a:3e:9c:62:10:70:89:21:61:f0:f7: 77:e4:6f:30:b1:a4:a4:8d:52:91:d0:fb:3e:ec:0e:f1:60:93: 48:c1:67:5f:3f:1b:26:a9:6e:b1:14:88:7a:8c:0c:b1:f7:e3: 11:83:5c:e3:55:52:00:52:f3:7d:24:c1:7e:d2:48:b2:e4:16: f3:d4:ac:76:c4:b4:d3:c3:00:cb:4a:c9:e1:06:05:54:ef:0b: 47:63:cc:85:8f:90:9f:34:69:03:e9:7b:2c:46:57:69:3a:b4: b9:14:23:70:97:55:da:1f:51:54:7a:8f:41:72:1c:d4:48:9e: c5:f3:9d:4e:6f:ad:5e:2d:97:f9:4f:d5:bf:00:30:82:56:a0: 34:3e:fe:7c:ca:05:53:4f:ee:b0:78:04:aa:d3:9c:58:cd:91: c3:a8:5a:de:cc:c3:d5:bd:67:62:83:37:8d:66:80:b0:35:8b: 39:d4:99:12:70:f1:f8:4f:ee:1f:6c:14:89:c9:27:bb:fb:79: 4a:bd:1d:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPiSIsqW/Yrs5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGYwYjdiMTctZWViOS00MmQ3LWE0MGYtYTAzNmY5OTA3OTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4y0dRE45Im/Lnhgnl7xPIHpyzFiz5SJo8AK BTURRQ6x94IJ2c/tdTgtXqrQL2onHrRbvFXbu9D+k5vsQC2GrRqgfHD6GeIpDCoy Y20fS3XMwU1j8mCW6bklL3SRS1agtvGOK0KvXyXUQNVmuECF6qgpdkjgH8JzaS9k qdW48A9ma4Sc5qKY2JmWR7fCVXWyFl3eQ0vuLQlO+hIpuRsGFD3ATI4DKLsrb1u5 cZi76SpcckKTKnBuiLWIm5+pfKgalJkZr9MmGvWk5lmbUSOWisv5yf1UA/ivxM1w jfliLyap7MirQ9OuD+JohVU1Ng3A2X/fxHGzMRg6MkLgsDupMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN1TmTWE7mmPTsV6tVNElOWqn7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdjMDk3MTktOGE3Yi0z ODBkLWI3MmUtZjNhMDFiYzJiNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYrr5sodkQtMI3UVFs8lp1NMN8Gz/8umKyAq4h1LWhxMKPdXzq399gI yT75aCqWDsURJ4Ez/bF2Gx6WkTGaPpxiEHCJIWHw93fkbzCxpKSNUpHQ+z7sDvFg k0jBZ18/GyapbrEUiHqMDLH34xGDXONVUgBS830kwX7SSLLkFvPUrHbEtNPDAMtK yeEGBVTvC0djzIWPkJ80aQPpeyxGV2k6tLkUI3CXVdofUVR6j0FyHNRInsXznU5v rV4tl/lP1b8AMIJWoDQ+/nzKBVNP7rB4BKrTnFjNkcOoWt7Mw9W9Z2KDN41mgLA1 iznUmRJw8fhP7h9sFInJJ7v7eUq9HYk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:05:51 2025 by rpki-client