$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa File: dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa (raw, json) Hash identifier: 3LrUAhr4Okv8zOujb/mBNPHJP0q5CS45Jicos3VuX6c= Subject key identifier: 6A:77:2E:3B:89:26:41:DF:99:7C:E8:6E:1E:F7:A6:0D:BD:AD:9F:89 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21124E568040D02A5844B00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 205.232.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:24:e5:68:04:0d:02:a5:84:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ecb55246-1903-4f79-800f-14c39fcf64f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1b:a3:73:e1:32:6d:ff:59:b4:f1:cb:91:d1: 74:15:78:a0:9e:a1:c9:54:de:71:19:20:1d:a0:08: 0a:d1:35:ec:05:a0:c7:7b:f7:29:08:ac:1c:f9:ea: 86:fa:3c:03:25:9c:e5:4f:78:23:42:cc:e5:be:01: fb:5a:85:d2:86:cf:8a:8a:3d:95:9d:f7:38:0d:8d: 3e:be:74:0a:ff:62:a6:01:4f:07:6f:a1:a8:bd:ca: ea:03:1e:1a:fc:b2:74:cd:7e:b2:06:fb:6c:51:9f: 74:d7:e3:e1:a9:9d:e0:20:10:aa:63:05:2b:61:ae: 8b:d1:88:73:7c:31:88:1f:a4:93:6e:7f:11:cc:d0: 0e:de:c4:ec:d7:b0:05:ff:a2:3c:41:d2:ca:a2:2d: 2c:45:50:15:ae:42:da:3a:f4:10:3f:8e:33:99:b6: 62:5b:c8:bf:0c:62:8f:69:39:2e:0d:dc:8f:9a:7a: a6:f7:00:7e:8a:95:62:a3:b3:83:8a:9f:94:79:bc: c5:07:92:0c:57:66:2e:2f:a8:27:45:bc:f6:63:a0: 0a:08:9b:5b:6e:c9:00:be:20:a9:10:79:7f:68:12: 39:54:b4:25:fe:50:5f:ca:42:7c:3c:41:dc:f2:91: 50:18:45:81:d3:e7:1f:6f:c1:15:eb:bb:c9:9a:a4: ba:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:77:2E:3B:89:26:41:DF:99:7C:E8:6E:1E:F7:A6:0D:BD:AD:9F:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dabf323e-14a0-380c-b75c-2b2dd35b54f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:00:0b:df:57:7f:dc:da:1f:d7:67:85:44:b6:09:e4:70:ab: de:b5:f9:3f:c9:ce:14:b8:8b:dc:42:6f:3e:76:b5:1c:ca:8e: 46:f6:0b:ff:0a:21:4e:d4:dc:51:7c:dc:38:8b:dc:85:54:a6: 1b:28:d9:11:99:c5:83:c3:0e:03:d5:a3:1d:7e:29:fb:14:9c: a0:2e:eb:1e:04:5b:39:65:f7:af:95:d5:ed:d9:45:f8:f9:8b: 3f:3f:e0:eb:9d:1b:15:05:d2:fe:b6:85:cf:30:9e:32:f1:78: 64:58:cf:0a:c2:a3:28:0b:b2:55:bb:49:44:70:1a:dd:d5:59: e4:16:2d:b3:24:f3:69:74:d4:ce:a0:bf:8d:eb:e6:1a:3d:d3: 6b:d1:75:ac:dd:6c:ec:be:bc:7e:a8:b5:c7:25:a3:c8:1e:69: b2:4e:ec:2d:d8:8b:aa:8f:2c:ad:f1:1d:58:a5:11:f8:4c:bf: 81:f9:c9:01:fb:ef:d2:80:f5:75:46:db:62:18:9c:11:6d:e1: 1c:c4:40:14:f0:e9:d6:bd:f0:e9:d0:db:ba:5c:3e:e2:0d:1d: 91:60:e9:a5:57:f3:5e:a7:9d:10:e5:69:ba:0b:e6:4d:e7:d6: 96:87:a0:ec:a0:34:9c:ff:81:07:b4:06:6a:02:91:30:84:37: b9:cc:69:54 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSESTlaAQNAqWESwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWNiNTUyNDYtMTkwMy00Zjc5LTgwMGYtMTRjMzlmY2Y2NGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihujc+Eybf9ZtPHLkdF0FXignqHJVN5xGSAd oAgK0TXsBaDHe/cpCKwc+eqG+jwDJZzlT3gjQszlvgH7WoXShs+Kij2Vnfc4DY0+ vnQK/2KmAU8Hb6GovcrqAx4a/LJ0zX6yBvtsUZ901+PhqZ3gIBCqYwUrYa6L0Yhz fDGIH6STbn8RzNAO3sTs17AF/6I8QdLKoi0sRVAVrkLaOvQQP44zmbZiW8i/DGKP aTkuDdyPmnqm9wB+ipVio7ODip+UebzFB5IMV2YuL6gnRbz2Y6AKCJtbbskAviCp EHl/aBI5VLQl/lBfykJ8PEHc8pFQGEWB0+cfb8EV67vJmqS6LwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGp3LjuJJkHfmXzobh73pg29rZ+JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFiZjMyM2UtMTRhMC0z ODBjLWI3NWMtMmIyZGQzNWI1NGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzegwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANAAL31d/3Nof12eFRLYJ5HCr3rX5P8nOFLiL3EJvPna1HMqORvYL/woh TtTcUXzcOIvchVSmGyjZEZnFg8MOA9WjHX4p+xScoC7rHgRbOWX3r5XV7dlF+PmL Pz/g650bFQXS/raFzzCeMvF4ZFjPCsKjKAuyVbtJRHAa3dVZ5BYtsyTzaXTUzqC/ jevmGj3Ta9F1rN1s7L68fqi1xyWjyB5psk7sLdiLqo8srfEdWKUR+Ey/gfnJAfvv 0oD1dUbbYhicEW3hHMRAFPDp1r3w6dDbulw+4g0dkWDppVfzXqedEOVpugvmTefW loeg7KA0nP+BB7QGagKRMIQ3ucxpVA== -----END CERTIFICATE-----Generated at Sun Apr 6 04:53:31 2025 by rpki-client