$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ce167e-cdc5-3770-87bf-44a46bb693de.roa File: e4ce167e-cdc5-3770-87bf-44a46bb693de.roa (raw, json) Hash identifier: lIh/ASs7uptYLGGPDuhC5BEkU/c01dhd7WdtBBMwhIY= Subject key identifier: 63:F7:C4:88:2A:CD:7D:76:7C:BD:62:14:67:A5:B9:9E:46:9D:84:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211051A446F6350BB76B560 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ce167e-cdc5-3770-87bf-44a46bb693de.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 36469 IP address blocks: 209.236.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:05:1a:44:6f:63:50:bb:76:b5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=8ac8720b-998f-4968-9d7f-e69a79b7a17f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:31:3e:c1:0d:da:6f:e9:c7:15:e9:f7:e2:04: 83:d0:db:6e:65:78:36:e9:59:50:a4:f2:70:6e:2b: 2f:63:3d:0a:40:11:6c:ee:38:47:90:ca:73:2e:8c: 55:02:0a:2b:8b:20:53:38:bd:43:2d:b1:de:6d:f4: 45:0b:ee:47:ac:91:74:2d:8b:16:fe:bc:f0:43:33: 8f:d4:47:7d:6a:40:08:73:57:5a:a9:ea:68:a1:a6: 69:3f:f8:cf:a1:dc:4f:9a:ab:53:e6:3e:e9:e2:40: 6f:ce:65:d6:8b:d0:1f:dc:e1:c6:2e:b1:b6:a9:40: 32:11:7c:f3:91:f6:21:55:18:c3:8b:02:62:20:81: b5:07:54:60:af:8e:8b:02:d2:4c:46:a5:e3:10:0f: 2f:ac:46:08:da:d4:08:60:bf:79:20:68:73:26:47: 52:72:02:c0:57:c1:c9:1a:bb:a6:dc:68:5e:f9:aa: 99:2a:d9:ad:4b:89:0d:ef:71:fe:c3:26:83:ad:00: cc:f6:68:58:08:1f:6c:d4:5f:49:a5:14:ec:cd:76: ec:23:5b:d4:f1:d7:8e:02:24:84:8a:ea:5d:b7:37: f5:ca:96:cb:d9:46:6f:1d:cb:cf:66:f1:6a:04:91: 82:7a:a0:98:70:12:f0:ab:78:2c:f0:d7:7c:f0:78: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F7:C4:88:2A:CD:7D:76:7C:BD:62:14:67:A5:B9:9E:46:9D:84:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e4ce167e-cdc5-3770-87bf-44a46bb693de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.236.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1f:c3:a8:03:7f:bd:99:69:76:37:d4:df:ca:b1:88:fa:4c: bb:74:68:53:96:7b:cf:dc:9d:1a:10:00:c6:25:c7:8a:d4:5c: 36:d4:04:b6:34:d0:4f:00:0a:11:1c:94:c7:85:82:b9:05:fe: d5:fc:bb:6f:ad:30:8f:0f:94:b4:88:e0:fd:d2:66:33:d3:9e: 80:13:a8:3a:6c:20:63:94:75:2d:d6:6c:59:60:ea:ca:76:35: f4:70:8f:77:3d:44:50:23:51:0c:b4:df:4b:ae:0d:f9:2d:bd: fe:c9:75:e0:84:65:90:50:1e:6d:d7:92:73:b7:76:22:e2:8b: 94:61:d6:c9:33:50:02:50:ae:22:2d:67:5c:a9:42:5f:38:01: f0:4b:89:3b:5d:e8:89:94:0c:70:7e:e2:ba:9e:24:83:36:9f: 2c:43:64:a6:50:72:e5:64:dc:fd:a2:91:01:71:62:07:fb:1f: e5:ba:af:6c:18:27:a5:a4:0a:50:46:ae:e4:89:22:e7:69:01: 87:85:be:e4:4f:60:00:24:4e:12:b2:7d:24:9c:91:c8:22:af: b7:85:73:a5:7f:76:14:4f:e8:42:e4:f3:f3:79:58:2e:eb:18: 81:6d:db:7a:06:90:a0:ac:d6:e1:ca:7d:fc:05:e1:94:ff:51: 53:9b:c0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQUaRG9jULt2tWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OGFjODcyMGItOTk4Zi00OTY4LTlkN2YtZTY5YTc5YjdhMTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTE+wQ3ab+nHFen34gSD0NtuZXg26VlQpPJw bisvYz0KQBFs7jhHkMpzLoxVAgoriyBTOL1DLbHebfRFC+5HrJF0LYsW/rzwQzOP 1Ed9akAIc1daqepooaZpP/jPodxPmqtT5j7p4kBvzmXWi9Af3OHGLrG2qUAyEXzz kfYhVRjDiwJiIIG1B1Rgr46LAtJMRqXjEA8vrEYI2tQIYL95IGhzJkdScgLAV8HJ Grum3Ghe+aqZKtmtS4kN73H+wyaDrQDM9mhYCB9s1F9JpRTszXbsI1vU8deOAiSE iupdtzf1ypbL2UZvHcvPZvFqBJGCeqCYcBLwq3gs8Nd88HhrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP3xIgqzX12fL1iFGeluZ5GnYTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTRjZTE2N2UtY2RjNS0z NzcwLTg3YmYtNDRhNDZiYjY5M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0eyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4fw6gDf72ZaXY31N/KsYj6TLt0aFOWe8/cnRoQAMYlx4rUXDbUBLY0 0E8AChEclMeFgrkF/tX8u2+tMI8PlLSI4P3SZjPTnoATqDpsIGOUdS3WbFlg6sp2 NfRwj3c9RFAjUQy030uuDfktvf7JdeCEZZBQHm3XknO3diLii5Rh1skzUAJQriIt Z1ypQl84AfBLiTtd6ImUDHB+4rqeJIM2nyxDZKZQcuVk3P2ikQFxYgf7H+W6r2wY J6WkClBGruSJIudpAYeFvuRPYAAkThKyfSSckcgir7eFc6V/dhRP6ELk8/N5WC7r GIFt23oGkKCs1uHKffwF4ZT/UVObwN8= -----END CERTIFICATE-----Generated at Mon Apr 7 12:14:04 2025 by rpki-client