$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2433854-214e-306a-aa7b-b7c29e45e7ce.roa File: d2433854-214e-306a-aa7b-b7c29e45e7ce.roa (raw, json) Hash identifier: nRCKdWvcCsc5KlNAWGKAh0Et9+s1ljnQenZ3jx/h+tg= Subject key identifier: 8E:49:38:70:6B:B5:0A:B0:F8:26:4C:DD:FA:3B:DE:F8:A2:44:FA:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5E894723ACD2DCAD4860 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2433854-214e-306a-aa7b-b7c29e45e7ce.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 151.213.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5e:89:47:23:ac:d2:dc:ad:48:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=ee3c4400-ec3a-4850-8940-9d610f53c37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:85:fb:c7:21:02:a5:ab:a9:48:dd:5a:06:93: 67:d9:a3:ca:88:d1:f1:41:ce:2a:89:42:90:9a:e7: 07:7f:c5:f4:31:1e:e4:b6:28:40:81:65:17:9b:12: 4d:a6:71:fd:ce:1a:f2:7b:35:7b:0a:ad:e2:3c:9d: 0f:b3:c5:f3:28:11:2b:04:d6:52:bd:88:93:d0:4f: 04:26:e4:ac:62:6a:7a:5a:92:0c:53:8e:92:13:07: a5:08:ec:fd:ed:3a:4c:79:3e:6f:5f:5f:b4:87:e2: 35:49:23:4f:de:d2:59:5e:85:d8:ef:ac:57:1b:35: 44:97:d5:8a:60:93:4d:3c:fd:66:b2:f5:03:02:02: 61:8a:5b:f6:4b:54:0f:80:1b:d0:d7:c0:46:21:a3: ac:a8:8f:33:2e:59:11:cc:71:aa:70:c4:8d:aa:92: c9:40:f8:f2:cb:a6:e5:c3:4c:17:97:79:23:17:08: f8:41:25:ee:c6:26:7b:11:6b:b9:ea:60:7d:55:d7: 78:5c:86:3a:0c:98:d7:09:42:5a:be:1d:e4:46:5c: b5:ac:31:cc:ed:45:14:8f:9d:61:4b:a0:4f:1d:cb: 3a:d7:06:a6:ad:9c:a0:6a:c6:68:0c:bf:11:ba:64: ec:d7:ad:68:fa:0e:2d:ed:bd:9a:57:34:c0:35:df: d6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:49:38:70:6B:B5:0A:B0:F8:26:4C:DD:FA:3B:DE:F8:A2:44:FA:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2433854-214e-306a-aa7b-b7c29e45e7ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ac:02:7c:a1:16:5a:fc:89:14:d3:55:23:9f:7e:10:7e:db: 2f:0f:5c:13:3e:f9:6a:3a:0a:d7:a8:72:57:71:40:28:cf:d2: 5a:6a:fb:de:f0:3e:a9:34:3f:8f:ed:fe:78:e2:dc:04:17:36: 98:38:2b:03:0a:83:8f:28:d9:d0:37:ef:00:bf:06:dd:64:6f: 13:6f:1a:3c:ef:20:08:d1:1d:57:64:ac:d6:04:a0:91:90:95: 2b:95:3f:4e:68:5f:fe:5a:cd:a6:57:1a:f5:21:35:6d:a3:56: d3:a9:eb:e4:58:fc:57:7c:e4:76:2c:8d:34:81:ae:0e:b9:d6: 31:f7:f2:11:be:19:a5:5d:5a:e8:cf:06:c0:00:79:f4:1b:41: 6f:d4:22:98:63:58:15:15:1a:17:5b:d3:b5:0f:d1:b6:7a:be: fd:79:c7:56:2c:30:72:71:65:1c:8a:a3:c2:a8:7d:41:ba:83: 0c:74:52:d5:6f:ca:26:5f:31:46:e5:13:a5:cc:a0:9f:06:99: 36:80:f5:4a:be:5d:0f:e8:b3:64:ae:a3:4b:06:8c:04:e0:ec: 0a:b8:19:0f:6c:a8:13:48:eb:43:4c:90:49:61:a1:3e:37:0d: 1a:78:1b:e1:2f:51:67:65:be:cf:bb:c1:29:d7:fb:b1:41:e9: 4c:2c:ad:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF6JRyOs0tytSGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZWUzYzQ0MDAtZWMzYS00ODUwLTg5NDAtOWQ2MTBmNTNjMzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIX7xyECpaupSN1aBpNn2aPKiNHxQc4qiUKQ mucHf8X0MR7ktihAgWUXmxJNpnH9zhryezV7Cq3iPJ0Ps8XzKBErBNZSvYiT0E8E JuSsYmp6WpIMU46SEwelCOz97TpMeT5vX1+0h+I1SSNP3tJZXoXY76xXGzVEl9WK YJNNPP1msvUDAgJhilv2S1QPgBvQ18BGIaOsqI8zLlkRzHGqcMSNqpLJQPjyy6bl w0wXl3kjFwj4QSXuxiZ7EWu56mB9Vdd4XIY6DJjXCUJavh3kRly1rDHM7UUUj51h S6BPHcs61wamrZygasZoDL8RumTs161o+g4t7b2aVzTANd/WAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI5JOHBrtQqw+CZM3fo73viiRPp5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDI0MzM4NTQtMjE0ZS0z MDZhLWFhN2ItYjdjMjllNDVlN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9WgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+sAnyhFlr8iRTTVSOffhB+2y8PXBM++Wo6CteocldxQCjP0lpq+97w Pqk0P4/t/nji3AQXNpg4KwMKg48o2dA37wC/Bt1kbxNvGjzvIAjRHVdkrNYEoJGQ lSuVP05oX/5azaZXGvUhNW2jVtOp6+RY/Fd85HYsjTSBrg651jH38hG+GaVdWujP BsAAefQbQW/UIphjWBUVGhdb07UP0bZ6vv15x1YsMHJxZRyKo8KofUG6gwx0UtVv yiZfMUblE6XMoJ8GmTaA9Uq+XQ/os2Suo0sGjATg7Aq4GQ9sqBNI60NMkElhoT43 DRp4G+EvUWdlvs+7wSnX+7FB6UwsrWs= -----END CERTIFICATE-----Generated at Fri Mar 14 13:41:12 2025 by rpki-client