$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecea0a96-77a0-3f01-aa75-d18b403053a3.roa File: ecea0a96-77a0-3f01-aa75-d18b403053a3.roa (raw, json) Hash identifier: HTKYv4p+bKlTN9ZH91hxYKBt5g3Z792Brrm/f2/2z48= Subject key identifier: 07:15:7E:DE:7B:9A:0C:A7:21:1F:7A:89:97:A7:55:32:B6:F1:38:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21127132FFDAE17F64A3CB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecea0a96-77a0-3f01-aa75-d18b403053a3.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.92.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:27:13:2f:fd:ae:17:f6:4a:3c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=05440142-b18d-48a0-9f68-a976d9536463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:9a:87:b1:7c:25:8b:6b:49:88:8d:0e:96: 06:bc:54:8f:27:e7:d6:1e:f0:07:db:10:36:f0:cc: a2:90:f7:6d:7f:0e:71:74:ea:ee:93:f4:75:21:b0: 48:68:51:f4:6c:80:a7:fc:d4:dd:b7:c4:e2:05:e7: 1f:01:0f:dc:d3:ed:35:20:ec:4b:8c:69:d1:b2:00: 70:14:44:a2:c4:8b:ce:bd:31:a5:91:8f:f7:f0:57: 27:86:17:4e:18:8c:ce:fe:29:e9:9b:59:a5:36:4a: 69:60:0d:ad:19:32:21:e8:04:40:b8:83:c6:4b:13: d5:d5:64:0d:46:d7:b0:cf:f6:47:67:30:04:83:49: a7:12:2d:63:a5:31:cb:71:c4:f1:37:c5:c6:9c:56: f3:40:ea:de:fc:42:94:d1:98:d3:ed:e4:fa:76:8c: 59:76:c5:3a:22:03:4f:73:36:01:e6:b7:29:6e:3d: 74:70:4e:e0:f0:d6:71:7f:18:9f:ed:4d:fc:38:aa: f6:56:de:a3:cf:dd:5b:83:dc:1b:d9:8d:6d:78:ba: 9f:67:f8:ca:f0:0e:4e:48:dd:b7:4a:e8:35:d0:0f: 4a:12:36:10:e4:d5:53:c2:7e:e0:6d:f0:ed:b4:91: 50:a8:52:c5:b9:09:e5:3f:7e:cd:0c:5f:83:5d:3b: 97:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:15:7E:DE:7B:9A:0C:A7:21:1F:7A:89:97:A7:55:32:B6:F1:38:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecea0a96-77a0-3f01-aa75-d18b403053a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:18:ba:b5:61:14:0c:cd:e7:3b:3e:fc:77:fc:2d:38:64:a1: f0:dc:d8:95:92:e6:27:42:93:20:cc:b7:9e:f6:85:5a:51:4c: e6:ba:bc:85:8e:b1:2f:d8:bd:74:c0:89:5f:39:b8:cd:90:61: 6b:9d:41:a9:ea:7b:5d:00:08:74:ae:48:ef:42:48:d0:27:ee: 0c:1f:c4:cb:52:3f:c7:08:ed:93:09:d7:63:de:67:07:b3:a0: 0e:89:27:01:cb:a8:fa:fa:3e:85:67:9b:74:87:12:81:5a:ef: 67:18:df:0b:e2:0a:51:9f:2f:6d:70:b4:f0:94:3a:39:b1:d7: d6:81:55:01:42:d0:44:f7:a5:a4:e3:d5:e1:5a:9a:c5:74:07: 1f:e2:d5:05:96:5d:f3:41:e9:39:46:70:9f:a9:97:23:d6:1d: 5d:48:b4:64:41:69:44:b3:4e:ae:10:8d:94:d0:b3:5d:a1:55: ed:b8:d3:33:5d:85:2b:23:d8:ba:64:32:09:fd:5a:9d:fa:01: 06:e6:d1:09:2e:65:71:65:e9:bb:37:04:34:28:91:a9:57:65: 4a:03:3a:bb:bd:2f:4a:a0:68:cf:de:c8:aa:ce:2f:6b:3c:83: ca:cd:e9:f3:d2:c5:79:8e:9c:8d:e1:8e:d5:db:75:ce:c0:e2: cc:b4:8c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEScTL/2uF/ZKPLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDU0NDAxNDItYjE4ZC00OGEwLTlmNjgtYTk3NmQ5NTM2NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0uah7F8JYtrSYiNDpYGvFSPJ+fWHvAH2xA2 8MyikPdtfw5xdOruk/R1IbBIaFH0bICn/NTdt8TiBecfAQ/c0+01IOxLjGnRsgBw FESixIvOvTGlkY/38FcnhhdOGIzO/inpm1mlNkppYA2tGTIh6ARAuIPGSxPV1WQN Rtewz/ZHZzAEg0mnEi1jpTHLccTxN8XGnFbzQOre/EKU0ZjT7eT6doxZdsU6IgNP czYB5rcpbj10cE7g8NZxfxif7U38OKr2Vt6jz91bg9wb2Y1teLqfZ/jK8A5OSN23 Sug10A9KEjYQ5NVTwn7gbfDttJFQqFLFuQnlP37NDF+DXTuXTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcVft57mgynIR96iZenVTK28TjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNlYTBhOTYtNzdhMC0z ZjAxLWFhNzUtZDE4YjQwMzA1M2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0YurVhFAzN5zs+/Hf8LThkofDc2JWS5idCkyDMt572hVpRTOa6vIWO sS/YvXTAiV85uM2QYWudQanqe10ACHSuSO9CSNAn7gwfxMtSP8cI7ZMJ12PeZwez oA6JJwHLqPr6PoVnm3SHEoFa72cY3wviClGfL21wtPCUOjmx19aBVQFC0ET3paTj 1eFamsV0Bx/i1QWWXfNB6TlGcJ+plyPWHV1ItGRBaUSzTq4QjZTQs12hVe240zNd hSsj2LpkMgn9Wp36AQbm0QkuZXFl6bs3BDQokalXZUoDOru9L0qgaM/eyKrOL2s8 g8rN6fPSxXmOnI3hjtXbdc7A4sy0jFQ= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:54 2025 by rpki-client