$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea9bd20d-aa63-3e54-882f-e0ae615af928.roa File: ea9bd20d-aa63-3e54-882f-e0ae615af928.roa (raw, json) Hash identifier: 6AF4puGoXOWslRgaWol/9l11lcmaZ3PtPyYVUWg2MfE= Subject key identifier: C9:03:B7:A3:B5:50:E8:D5:CD:6E:43:7E:A9:1B:EA:36:61:1A:46:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21106F164FD97D755957680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea9bd20d-aa63-3e54-882f-e0ae615af928.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 54132 IP address blocks: 209.92.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:06:f1:64:fd:97:d7:55:95:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7ae5dcb4-7fa8-4601-b327-055ea84cb817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8a:bf:64:7b:58:ab:26:a3:1e:95:49:c2:2f: df:70:82:2d:9a:1a:eb:45:5f:3c:53:7f:70:0c:1d: e4:21:bd:db:88:cc:56:df:cd:ab:09:98:45:ca:9e: 60:ce:42:16:bb:8d:40:62:f5:d0:80:f5:58:d5:15: 16:fe:a8:71:e8:77:a6:f9:36:61:72:a7:99:22:bf: 0c:1a:2f:1d:bb:a0:db:08:07:ad:c5:3f:6c:f0:6b: d9:60:da:fe:89:f6:4e:74:e1:fe:f2:8d:c4:6c:28: 5a:65:e1:a0:c0:1b:2c:cd:21:a1:0f:b1:ee:16:d1: 3a:b6:de:c3:98:ca:fe:f1:e5:b7:42:39:41:1c:0c: 8d:40:b8:4c:e8:fe:cd:62:a7:87:ba:29:e5:d2:49: 97:b6:19:c4:29:1b:40:4a:d8:6b:78:f9:65:a3:f4: ad:fc:d2:7e:35:c9:30:2e:84:e9:c7:22:6c:bb:7e: 0c:55:0c:4a:c1:2c:90:82:60:23:f1:ec:77:1c:c7: be:14:97:37:97:16:88:37:9d:d1:12:8f:75:16:82: d9:8f:1b:26:e1:73:80:c2:0f:dd:d7:71:6f:9a:46: 64:f7:84:5b:c1:c3:af:47:d6:b2:0b:28:44:aa:c2: f8:0c:87:02:2d:44:43:2c:29:de:17:ea:25:7b:35: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:03:B7:A3:B5:50:E8:D5:CD:6E:43:7E:A9:1B:EA:36:61:1A:46:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ea9bd20d-aa63-3e54-882f-e0ae615af928.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:f6:f9:03:5e:65:23:c9:2e:8f:59:31:86:f6:62:58:db:42: dc:d7:83:c6:a2:cc:fa:98:3d:d3:19:42:0b:f4:99:59:25:1f: 12:0d:e8:f8:c8:d1:d0:47:a7:ce:4d:b0:36:0d:40:d3:c4:12: 38:e2:93:8a:83:3b:60:7d:7b:92:a5:ed:5b:24:1d:bf:12:23: d9:29:f8:14:09:e4:06:e2:e9:a8:b9:29:8a:da:94:8a:12:a7: 5c:74:15:8c:3f:54:2a:53:12:aa:83:40:94:fc:69:97:cc:ed: 86:ef:ea:fa:a0:4f:e1:29:5f:81:da:51:ed:fa:d5:38:1a:bf: aa:07:bc:0f:00:e6:b9:6e:b1:15:9b:65:7d:79:cd:8b:55:b0: fb:ae:be:21:37:ce:f5:6c:be:3e:75:a4:ea:dc:93:c5:e5:98: ae:3e:2d:61:8e:4b:14:6c:0f:d5:77:58:a8:15:85:17:8f:bf: 35:41:93:be:65:be:92:4e:02:d8:b5:cb:f5:f4:05:7f:81:a2: a3:39:1c:63:fa:6d:9c:52:44:64:a8:92:fa:9c:42:cc:3e:6c: f8:86:b6:87:f1:2d:3e:71:84:01:86:18:d8:e8:83:40:5a:3f: b9:5f:84:f8:3d:da:3b:2e:2d:db:c4:11:a6:5e:9a:02:3d:bf: a1:bf:0d:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQbxZP2X11WVdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2FlNWRjYjQtN2ZhOC00NjAxLWIzMjctMDU1ZWE4NGNiODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oq/ZHtYqyajHpVJwi/fcIItmhrrRV88U39w DB3kIb3biMxW382rCZhFyp5gzkIWu41AYvXQgPVY1RUW/qhx6Hem+TZhcqeZIr8M Gi8du6DbCAetxT9s8GvZYNr+ifZOdOH+8o3EbChaZeGgwBsszSGhD7HuFtE6tt7D mMr+8eW3QjlBHAyNQLhM6P7NYqeHuinl0kmXthnEKRtASthrePllo/St/NJ+Nckw LoTpxyJsu34MVQxKwSyQgmAj8ex3HMe+FJc3lxaIN53REo91FoLZjxsm4XOAwg/d 13FvmkZk94RbwcOvR9ayCyhEqsL4DIcCLURDLCneF+olezVJwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkDt6O1UOjVzW5Dfqkb6jZhGkZKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWE5YmQyMGQtYWE2My0z ZTU0LTg4MmYtZTBhZTYxNWFmOTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VzDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACT2+QNeZSPJLo9ZMYb2YljbQtzXg8aizPqYPdMZQgv0mVklHxIN6PjI 0dBHp85NsDYNQNPEEjjik4qDO2B9e5Kl7VskHb8SI9kp+BQJ5Abi6ai5KYralIoS p1x0FYw/VCpTEqqDQJT8aZfM7Ybv6vqgT+EpX4HaUe361Tgav6oHvA8A5rlusRWb ZX15zYtVsPuuviE3zvVsvj51pOrck8XlmK4+LWGOSxRsD9V3WKgVhRePvzVBk75l vpJOAti1y/X0BX+BoqM5HGP6bZxSRGSokvqcQsw+bPiGtofxLT5xhAGGGNjog0Ba P7lfhPg92jsuLdvEEaZemgI9v6G/DSs= -----END CERTIFICATE-----Generated at Sun Feb 16 20:26:08 2025 by rpki-client