$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e664c2e3-e044-3caf-9d41-504da8630c79.roa File: e664c2e3-e044-3caf-9d41-504da8630c79.roa (raw, json) Hash identifier: J18ATBDZd/rgNDlUdATg00b1RBNrf8ALF9wt0CMbJ8s= Subject key identifier: 81:BC:B7:81:07:CB:FC:F2:A6:CD:D8:B5:9B:C4:E3:05:FA:9A:7D:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F75DC8C75460B0D89CA180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e664c2e3-e044-3caf-9d41-504da8630c79.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 216.96.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:5d:c8:c7:54:60:b0:d8:9c:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=9acbdba6-7a59-42ac-99ba-89366099ec28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:01:d2:a1:91:e9:ee:8b:ae:3b:e7:24:f6: 8a:03:75:10:7d:9e:8b:a5:f5:71:1d:41:fe:30:f3: 38:a1:be:0a:bb:5f:40:5c:a9:c5:3b:aa:36:15:f6: 30:41:04:dd:4e:93:3d:1b:b2:df:be:76:ad:99:fd: 45:5f:72:b4:52:e3:20:1a:2b:4d:77:1e:b8:15:53: 24:6b:b5:0f:5f:ee:7e:4f:b6:ff:55:57:35:31:e4: 4c:c2:32:dc:8a:38:84:75:cb:e4:0c:b5:62:53:2e: a0:34:aa:94:fa:77:50:e7:19:d7:8c:f1:67:b1:7b: 4a:c2:63:02:54:d5:c4:62:11:b0:20:cd:44:a0:bc: 4d:1d:54:33:b8:a1:a7:9c:cb:f7:81:87:d2:55:7f: 39:23:35:cd:8b:7e:4e:bd:44:dc:f8:5d:44:69:1a: 8e:a1:b2:3a:47:b1:ab:45:b2:5b:b8:24:82:28:e1: fa:79:32:f0:fd:81:67:8c:ea:aa:b4:fb:86:5e:42: d3:ce:00:79:ec:1a:32:33:3a:d5:42:ba:ea:7f:8a: 35:5c:59:cd:77:f5:ab:9e:30:ad:5a:b9:50:79:48: 14:f9:55:a3:22:18:45:d2:11:41:34:b3:d0:7e:e9: 76:2a:f7:af:3f:f0:b3:76:14:d4:ed:ff:de:d7:80: ba:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:BC:B7:81:07:CB:FC:F2:A6:CD:D8:B5:9B:C4:E3:05:FA:9A:7D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e664c2e3-e044-3caf-9d41-504da8630c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0d:97:c1:5c:73:23:21:d1:42:50:d8:60:dd:8c:a8:25:a6: e5:90:8c:77:03:a3:3b:bd:86:f4:d6:48:e1:66:ed:33:a9:0d: e5:22:0c:3b:3f:5a:38:6b:b0:cf:ac:11:8f:2c:03:27:85:ce: 77:99:f1:e4:be:e4:84:51:82:27:db:ca:64:08:09:23:ba:9d: 58:d9:6b:dc:c8:24:ff:10:45:ab:00:79:0f:a1:24:76:b7:59: 11:3a:5f:41:13:09:c2:33:dc:2b:ff:88:ed:aa:5f:18:e2:64: c1:c4:1b:b4:45:c7:ca:31:e4:13:f0:09:ad:7e:7d:ae:1a:5e: 0f:19:2f:22:fc:4e:c2:3a:c1:07:2c:8c:a2:27:b4:e1:c9:cf: ee:87:7b:2b:c8:cc:93:29:69:0f:1c:15:f1:a8:72:86:b2:3f: 39:b5:b9:e7:3a:45:2a:50:fe:ff:35:c7:f8:e6:bc:bf:5e:2a: c6:5e:80:dc:d4:6f:47:67:87:74:ff:73:7b:4b:a6:3b:8b:0d: b2:a8:fb:0f:2e:a3:69:ab:b7:dc:38:88:f6:1f:8d:83:a0:9d: c6:d4:d6:ff:1d:5f:7c:da:b7:ad:b0:a4:c9:7f:56:92:8a:42: d1:b5:15:75:1a:0d:51:6e:66:6c:fe:46:0a:b8:b3:12:47:76: 8a:a2:59:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0913Ix1RgsNicoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk OWFjYmRiYTYtN2E1OS00MmFjLTk5YmEtODkzNjYwOTllYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwkB0qGR6e6LrjvnJPaKA3UQfZ6LpfVxHUH+ MPM4ob4Ku19AXKnFO6o2FfYwQQTdTpM9G7Lfvnatmf1FX3K0UuMgGitNdx64FVMk a7UPX+5+T7b/VVc1MeRMwjLcijiEdcvkDLViUy6gNKqU+ndQ5xnXjPFnsXtKwmMC VNXEYhGwIM1EoLxNHVQzuKGnnMv3gYfSVX85IzXNi35OvUTc+F1EaRqOobI6R7Gr RbJbuCSCKOH6eTLw/YFnjOqqtPuGXkLTzgB57BoyMzrVQrrqf4o1XFnNd/WrnjCt WrlQeUgU+VWjIhhF0hFBNLPQful2KvevP/CzdhTU7f/e14C6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIG8t4EHy/zyps3YtZvE4wX6mn1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY2NGMyZTMtZTA0NC0z Y2FmLTlkNDEtNTA0ZGE4NjMwYzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2GBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Nl8FccyMh0UJQ2GDdjKglpuWQjHcDozu9hvTWSOFm7TOpDeUiDDs/ WjhrsM+sEY8sAyeFzneZ8eS+5IRRgifbymQICSO6nVjZa9zIJP8QRasAeQ+hJHa3 WRE6X0ETCcIz3Cv/iO2qXxjiZMHEG7RFx8ox5BPwCa1+fa4aXg8ZLyL8TsI6wQcs jKIntOHJz+6HeyvIzJMpaQ8cFfGocoayPzm1uec6RSpQ/v81x/jmvL9eKsZegNzU b0dnh3T/c3tLpjuLDbKo+w8uo2mrt9w4iPYfjYOgncbU1v8dX3zat62wpMl/VpKK QtG1FXUaDVFuZmz+Rgq4sxJHdoqiWcg= -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:45 2025 by rpki-client