$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f68ebcab-5ce5-3722-a008-575cca3f968e.roa File: f68ebcab-5ce5-3722-a008-575cca3f968e.roa (raw, json) Hash identifier: gAG5PkC6Py/gprIonwROeet1tVm0UpZxoFfE3yX5aL8= Subject key identifier: EF:66:97:AF:34:54:34:49:82:90:D4:C1:47:A0:AF:7B:F2:29:89:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111734B869F35EA1BB7A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f68ebcab-5ce5-3722-a008-575cca3f968e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 14 IP address blocks: 209.2.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:17:34:b8:69:f3:5e:a1:bb:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=dc19196a-63af-4d16-b980-8b73acd8dfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:47:4e:c9:f0:cb:2d:13:7c:71:1f:72:d1: 3a:30:d9:e1:69:20:b3:db:e6:75:11:a3:74:77:1b: 34:c7:c7:78:3b:d1:d9:f4:1e:4f:36:d9:28:77:88: 20:d9:90:0b:0f:79:80:93:ba:2c:7f:5e:88:a5:98: 48:e5:15:51:d4:cd:11:c8:3d:60:10:66:45:c0:06: 82:6c:38:ab:15:49:f7:50:6a:e7:dc:a7:ea:3e:35: 54:9c:bf:dc:a9:d8:1c:60:6b:3e:e8:bd:c8:7c:ce: 93:e4:60:a8:53:e6:31:0f:8d:ad:be:81:6a:94:ed: 09:73:de:e9:7f:5d:6e:54:8b:5e:6d:51:a8:2b:0b: 30:58:c4:16:3b:f0:62:bd:5f:50:7d:f0:b4:94:cf: 05:51:da:ff:e6:10:8f:b3:4c:a9:63:8c:26:35:97: fa:4b:f7:d3:5c:cf:70:63:e8:e5:95:85:e0:6f:a9: 14:41:4e:ac:cd:16:af:d9:5e:4b:ff:99:6d:92:c4: a7:9b:8e:14:dd:87:fd:9e:0c:86:c8:17:5a:78:da: a8:6f:7e:1c:e2:1c:d0:73:63:17:3b:cf:f8:f9:42: cc:21:20:ea:79:cf:67:07:d9:af:46:72:ee:c8:06: 6b:54:cb:27:e0:56:ec:f4:aa:03:d1:c0:f9:95:2c: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:66:97:AF:34:54:34:49:82:90:D4:C1:47:A0:AF:7B:F2:29:89:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f68ebcab-5ce5-3722-a008-575cca3f968e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:2a:ce:73:e2:59:7c:45:66:db:93:3e:ba:64:59:e5:a9:dd: 23:11:67:e5:bd:3b:41:04:28:29:da:77:d9:db:19:64:a1:b9: 0f:96:c2:cd:68:2e:91:84:af:17:56:f9:e4:56:94:64:7d:08: 3e:7e:81:47:12:8f:83:67:a7:e8:39:65:bf:77:a5:e8:bd:f0: 9e:f6:d5:2d:f9:67:66:d2:53:87:6b:2a:d7:06:eb:30:89:df: c5:1f:80:f9:79:a4:ca:27:50:bf:43:c8:55:18:6f:6e:88:54: 76:03:16:20:a2:53:4a:39:ef:31:9e:cf:14:55:d1:e2:52:3a: c1:45:af:4a:fd:4c:98:d4:93:8f:57:18:e5:c3:51:21:18:6b: 32:46:b4:07:d9:99:55:de:f2:79:f9:99:91:95:5f:be:ce:e0: 32:51:c6:86:5c:2d:16:1e:5f:e0:f4:6e:38:2d:ad:fc:c5:02: 1a:1f:81:7a:02:33:e8:41:9f:db:34:f0:8f:19:5b:2b:e6:f1: 03:1f:bd:12:bb:1d:87:53:1e:0c:3d:12:bc:15:bb:1b:3d:2d: 55:36:02:d8:8c:4d:f1:fa:73:f2:cf:02:eb:51:ca:4f:07:58: dd:ca:49:0e:8f:d3:31:0a:73:b7:ad:6b:b2:41:e4:b0:93:7e: 49:6d:08:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERc0uGnzXqG7eoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZGMxOTE5NmEtNjNhZi00ZDE2LWI5ODAtOGI3M2FjZDhkZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD1HTsnwyy0TfHEfctE6MNnhaSCz2+Z1EaN0 dxs0x8d4O9HZ9B5PNtkod4gg2ZALD3mAk7osf16IpZhI5RVR1M0RyD1gEGZFwAaC bDirFUn3UGrn3KfqPjVUnL/cqdgcYGs+6L3IfM6T5GCoU+YxD42tvoFqlO0Jc97p f11uVItebVGoKwswWMQWO/BivV9QffC0lM8FUdr/5hCPs0ypY4wmNZf6S/fTXM9w Y+jllYXgb6kUQU6szRav2V5L/5ltksSnm44U3Yf9ngyGyBdaeNqob34c4hzQc2MX O8/4+ULMISDqec9nB9mvRnLuyAZrVMsn4Fbs9KoD0cD5lSw3gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9ml680VDRJgpDUwUegr3vyKYkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjY4ZWJjYWItNWNlNS0z NzIyLWEwMDgtNTc1Y2NhM2Y5NjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0QIwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwqznPiWXxFZtuTPrpkWeWp3SMRZ+W9O0EEKCnad9nbGWShuQ+Wws1o LpGErxdW+eRWlGR9CD5+gUcSj4Nnp+g5Zb93pei98J721S35Z2bSU4drKtcG6zCJ 38UfgPl5pMonUL9DyFUYb26IVHYDFiCiU0o57zGezxRV0eJSOsFFr0r9TJjUk49X GOXDUSEYazJGtAfZmVXe8nn5mZGVX77O4DJRxoZcLRYeX+D0bjgtrfzFAhofgXoC M+hBn9s08I8ZWyvm8QMfvRK7HYdTHgw9ErwVuxs9LVU2AtiMTfH6c/LPAutRyk8H WN3KSQ6P0zEKc7eta7JB5LCTfkltCAA= -----END CERTIFICATE-----Generated at Mon Apr 7 12:03:44 2025 by rpki-client