$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa File: ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa (raw, json) Hash identifier: VokLf5eon5hHgKrmpN2W1GOyzu1JXsniyeAhsSlB0Bk= Subject key identifier: 02:92:2C:55:2D:43:EE:2E:4B:5C:14:24:10:9F:79:AB:DB:93:EA:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21128BDDCF1D63807C21180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.236.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:28:bd:dc:f1:d6:38:07:c2:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=a3f35246-900f-491a-be0f-08ba38270b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:eb:f9:f3:41:dd:be:11:31:89:fd:f0:7b:22: c7:ff:e8:31:f3:a8:69:d6:4e:31:9a:51:70:40:75: 28:6c:4a:a6:ca:13:6f:90:6a:26:e4:eb:a9:49:70: 24:08:31:50:09:c7:6f:61:6c:9d:9e:5d:35:2a:12: 52:96:e0:64:9a:91:80:b0:01:e5:ec:7d:31:ee:58: be:5e:4b:4d:bf:39:72:9b:80:2e:99:28:b3:35:f6: 78:53:e1:73:b2:0f:46:00:bf:dd:6b:1b:48:20:06: c2:2e:38:9a:1a:7a:9a:53:4d:4c:94:be:1b:5d:61: 2c:bf:44:9d:ec:c8:44:dc:82:9f:01:d2:d4:0a:d6: 56:fe:01:49:ca:b0:4b:48:4b:f7:7a:4c:fe:c8:d3: de:de:b5:1b:e2:47:c7:94:1c:64:d9:10:71:fd:26: e5:1a:d1:34:65:06:e8:3f:3a:c1:60:c3:66:cc:aa: f5:74:8c:81:42:f7:5f:46:03:0a:9a:c2:15:bc:86: 17:47:c4:cf:cc:6b:ab:43:a9:d2:11:4e:32:0e:5d: f3:ca:2f:26:46:8b:5b:41:a1:72:5c:14:63:4b:a7: 85:59:ce:92:94:72:ce:13:fd:84:2a:8e:2d:e4:10: 99:89:ca:97:d8:1c:44:4c:c1:2c:23:fb:45:f7:1e: 9d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:92:2C:55:2D:43:EE:2E:4B:5C:14:24:10:9F:79:AB:DB:93:EA:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca5bf5b1-617c-3dc6-b3a8-d493c4a0739f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.236.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f1:3a:d1:96:52:51:c6:ed:50:c3:9b:db:47:01:da:eb:6e: 03:c6:0c:38:dc:7c:8c:0f:7f:29:1d:78:fa:62:80:30:3e:b3: 25:51:0e:1f:be:88:f9:74:ff:af:6c:5f:19:a2:c7:46:81:41: 34:c0:d3:3a:55:82:78:f3:42:45:b7:17:f9:4c:d5:ad:4c:ec: 44:a6:0e:f0:66:07:12:38:fd:85:22:c3:aa:bb:a3:a5:68:0f: 1a:a3:65:60:03:55:a9:51:f9:ed:82:d9:e7:72:13:10:77:e3: 82:95:a0:6c:d1:04:bc:59:e0:7a:6e:47:8c:55:ad:9e:bc:0a: 72:a3:01:fc:92:cb:fc:26:60:6f:67:97:94:19:56:37:cc:a2: de:ff:70:b4:04:be:00:f0:c9:83:bf:cc:32:c5:29:0f:c6:5c: 2a:bf:c0:2f:64:72:c5:ef:92:c6:17:da:33:a1:7c:d2:95:50: 4c:5f:f6:62:f6:d3:c1:9b:ac:ed:07:1d:7a:cb:b2:14:7b:88: a6:0e:d7:81:a3:eb:f6:93:3f:ac:b6:d0:a9:ab:ca:6e:3d:e2: 84:0b:2b:f1:56:77:c0:44:58:e8:ca:be:1c:68:92:e9:0d:dd: a4:02:0b:80:49:4c:a4:dc:69:8f:5b:d4:70:ee:24:66:42:ad: ed:df:5c:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESi93PHWOAfCEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YTNmMzUyNDYtOTAwZi00OTFhLWJlMGYtMDhiYTM4MjcwYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluv580HdvhExif3weyLH/+gx86hp1k4xmlFw QHUobEqmyhNvkGom5OupSXAkCDFQCcdvYWydnl01KhJSluBkmpGAsAHl7H0x7li+ XktNvzlym4AumSizNfZ4U+Fzsg9GAL/daxtIIAbCLjiaGnqaU01MlL4bXWEsv0Sd 7MhE3IKfAdLUCtZW/gFJyrBLSEv3ekz+yNPe3rUb4kfHlBxk2RBx/SblGtE0ZQbo PzrBYMNmzKr1dIyBQvdfRgMKmsIVvIYXR8TPzGurQ6nSEU4yDl3zyi8mRotbQaFy XBRjS6eFWc6SlHLOE/2EKo4t5BCZicqX2BxETMEsI/tF9x6dKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKSLFUtQ+4uS1wUJBCfeavbk+pyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E1YmY1YjEtNjE3Yy0z ZGM2LWIzYTgtZDQ5M2M0YTA3MzlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OxVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbxOtGWUlHG7VDDm9tHAdrrbgPGDDjcfIwPfykdePpigDA+syVRDh++ iPl0/69sXxmix0aBQTTA0zpVgnjzQkW3F/lM1a1M7ESmDvBmBxI4/YUiw6q7o6Vo DxqjZWADValR+e2C2edyExB344KVoGzRBLxZ4HpuR4xVrZ68CnKjAfySy/wmYG9n l5QZVjfMot7/cLQEvgDwyYO/zDLFKQ/GXCq/wC9kcsXvksYX2jOhfNKVUExf9mL2 08GbrO0HHXrLshR7iKYO14Gj6/aTP6y20Kmrym494oQLK/FWd8BEWOjKvhxokukN 3aQCC4BJTKTcaY9b1HDuJGZCre3fXL8= -----END CERTIFICATE-----Generated at Sat Apr 5 23:16:29 2025 by rpki-client