$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa File: db1a757d-af18-3aaa-9e08-520d47c74438.roa (raw, json) Hash identifier: AHxTJFvHJ0CnuKAIbP6RuNIT34KnsCrRrX4eQsV68yo= Subject key identifier: 78:37:3A:72:30:10:5B:F5:DA:00:36:B7:EF:C8:5A:A2:D8:C2:CC:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112F25AFDB286DC5B8FBC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 29877 IP address blocks: 74.207.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2f:25:af:db:28:6d:c5:b8:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=af8cd4cb-5d39-416c-9647-ecf494300dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:43:d0:9d:ba:80:79:d7:0b:42:70:9f:44:f1: 79:33:b0:02:65:de:ed:54:56:8a:65:2f:97:7b:92: a1:39:8b:61:5c:9f:c0:c6:e3:3a:ba:b0:8d:9c:e6: 3e:77:23:df:6a:92:64:13:b2:9b:a2:e1:0a:85:b4: c3:08:b3:19:12:61:a6:f0:77:ce:b4:f3:03:e7:e5: 22:cb:a6:af:db:1d:01:69:92:cd:be:3f:9e:62:f7: 63:eb:77:e6:37:cb:46:57:13:95:63:e3:c6:9c:87: 68:7d:b5:c9:2e:b1:8d:33:04:2a:44:54:2e:94:6d: 43:7b:2b:0d:af:6b:de:55:63:e1:3e:f7:bc:46:6c: 71:d3:3b:7c:d9:a1:54:41:71:a3:53:93:1b:2c:06: d0:ee:40:03:71:bf:5e:c3:40:c2:d0:d4:60:e3:e5: fa:64:7d:7e:c5:0e:9c:56:5c:ef:6c:81:71:14:f9: 03:f6:e6:0e:9c:c9:92:ed:af:a0:bd:e1:3a:c4:73: 95:b5:c8:85:6a:c1:77:d2:c2:e4:3a:6d:a0:07:5e: ea:52:7f:a9:65:35:d5:65:78:5f:cc:ab:09:8e:7f: 78:27:40:ee:8d:c2:67:56:a0:11:54:89:ae:f4:07: 34:ec:9a:70:c9:b2:34:08:3c:4f:3e:f7:8e:04:fe: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:37:3A:72:30:10:5B:F5:DA:00:36:B7:EF:C8:5A:A2:D8:C2:CC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.207.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:51:49:12:d8:21:b0:c9:d0:73:cb:b6:11:39:4e:9b:53:53: 92:2e:ea:ae:6f:fd:a3:95:15:17:c0:49:e8:c2:c2:0c:5c:d5: 97:4d:c0:0a:f8:3d:d4:28:c3:79:9a:3c:6c:d6:85:ff:57:c7: d3:c6:8d:a6:dc:f6:da:aa:2b:88:4b:77:aa:37:07:95:d1:08: d1:fa:9e:7b:60:8e:ab:48:4c:66:e3:a0:2a:d1:5f:fd:1d:0a: 3e:46:5a:fd:e9:76:93:d3:aa:cd:a5:52:d7:59:5e:df:f9:a6: e3:7e:df:97:91:f2:a2:bc:09:9c:51:a8:52:b0:bb:28:27:80: 0d:27:fa:10:7d:13:3f:0f:e0:ff:7a:91:f8:58:1e:f5:53:3b: 4c:ed:ba:76:3e:a6:e5:3b:0c:65:72:0c:68:c3:88:01:d0:2b: 42:ed:52:df:c9:12:7b:4b:6f:bb:05:65:76:40:23:af:3f:60: 20:ea:b2:d4:00:bd:5a:6f:42:9c:41:1d:42:97:91:91:a1:1d: 1f:e8:1e:6d:23:50:c5:29:bb:4b:1e:57:55:60:fa:b1:26:46: 26:f8:87:6a:b4:19:d5:d7:fe:9a:69:f1:db:37:24:76:91:3a: 37:ec:47:62:7e:09:1b:02:1e:9a:92:db:4e:f9:0e:cb:03:d2: e6:6a:cf:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSES8lr9sobcW4+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWY4Y2Q0Y2ItNWQzOS00MTZjLTk2NDctZWNmNDk0MzAwZGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkPQnbqAedcLQnCfRPF5M7ACZd7tVFaKZS+X e5KhOYthXJ/AxuM6urCNnOY+dyPfapJkE7KbouEKhbTDCLMZEmGm8HfOtPMD5+Ui y6av2x0BaZLNvj+eYvdj63fmN8tGVxOVY+PGnIdofbXJLrGNMwQqRFQulG1DeysN r2veVWPhPve8Rmxx0zt82aFUQXGjU5MbLAbQ7kADcb9ew0DC0NRg4+X6ZH1+xQ6c VlzvbIFxFPkD9uYOnMmS7a+gveE6xHOVtciFasF30sLkOm2gB17qUn+pZTXVZXhf zKsJjn94J0DujcJnVqARVImu9Ac07JpwybI0CDxPPveOBP5k/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg3OnIwEFv12gA2t+/IWqLYwsyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIxYTc1N2QtYWYxOC0z YWFhLTllMDgtNTIwZDQ3Yzc0NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSs/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtRSRLYIbDJ0HPLthE5TptTU5Iu6q5v/aOVFRfASejCwgxc1ZdNwAr4 PdQow3maPGzWhf9Xx9PGjabc9tqqK4hLd6o3B5XRCNH6nntgjqtITGbjoCrRX/0d Cj5GWv3pdpPTqs2lUtdZXt/5puN+35eR8qK8CZxRqFKwuygngA0n+hB9Ez8P4P96 kfhYHvVTO0ztunY+puU7DGVyDGjDiAHQK0LtUt/JEntLb7sFZXZAI68/YCDqstQA vVpvQpxBHUKXkZGhHR/oHm0jUMUpu0seV1Vg+rEmRib4h2q0GdXX/ppp8ds3JHaR OjfsR2J+CRsCHpqS2075DssD0uZqz/Q= -----END CERTIFICATE-----Generated at Mon Apr 7 12:03:49 2025 by rpki-client