$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9858869-a66f-3fd5-9247-1cdb76be8f43.roa File: f9858869-a66f-3fd5-9247-1cdb76be8f43.roa (raw, json) Hash identifier: PXs/KNUu1SMKKUkQs/jVKWh0UkdQAPyeFxF67iHNxkM= Subject key identifier: 64:7B:7B:91:F2:2A:EC:FF:22:A8:D2:CE:6E:93:C2:B7:79:F2:99:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111D3DB73574A7286EE400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9858869-a66f-3fd5-9247-1cdb76be8f43.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 69.196.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1d:3d:b7:35:74:a7:28:6e:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=004bce22-97c7-4953-abea-f946f9f46ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e0:14:8d:b3:8d:b7:d7:8a:c3:2d:7e:92:37: a1:67:fc:13:63:1e:60:76:09:9d:4d:08:61:6c:2a: 63:fd:2f:68:9c:5d:f1:58:45:f5:30:d1:30:db:78: ee:e5:59:00:db:33:c9:42:1a:29:b2:a5:48:8a:f7: dd:ae:86:af:2e:05:e7:04:35:89:71:47:f4:f1:c9: c2:f6:bd:e7:dd:ac:8e:f5:e2:82:fe:c7:a6:75:d5: fc:55:2e:a3:98:48:1e:46:a8:e7:66:e7:96:35:0d: b4:7f:15:c0:78:b7:2e:75:2a:0c:ca:25:5a:9d:d4: dc:55:47:b8:47:71:6c:fc:51:06:59:a1:98:3f:2a: b7:02:7f:c9:24:b9:4b:97:ac:44:67:b0:d0:19:c0: f7:b1:4a:51:32:5d:3b:1c:d7:60:b9:ea:10:8d:f3: c4:31:f1:5c:ed:2b:d6:30:6e:66:58:aa:b6:6a:c4: bc:29:a3:55:75:64:c7:4a:18:c7:69:85:66:b4:92: de:62:d6:c5:ec:ec:45:91:b4:4c:5d:29:ed:4b:ee: bc:90:74:7f:76:2b:1c:9f:af:84:1b:9f:45:33:d8: 75:34:08:a9:2d:b8:16:77:44:de:fa:67:2c:f5:bc: 9f:13:d5:f6:34:39:ad:58:47:c4:b1:d3:e3:2d:a0: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7B:7B:91:F2:2A:EC:FF:22:A8:D2:CE:6E:93:C2:B7:79:F2:99:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9858869-a66f-3fd5-9247-1cdb76be8f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.196.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:4c:c4:23:06:7a:64:d4:f3:6a:18:2e:ac:2f:d1:60:ab:76: ad:8f:05:25:d2:65:04:54:06:1b:82:5d:bf:ce:80:e9:e7:51: b9:fb:ea:b9:c0:90:a4:ce:1f:1f:eb:9e:85:a7:59:9f:d2:ff: 87:66:85:2f:5c:ea:74:bb:14:d3:53:e8:ca:41:bb:cc:ba:cf: c6:96:4a:ea:c2:78:ca:06:df:d1:0c:cc:d9:b8:c3:d4:61:8c: d7:63:c7:d1:94:ba:27:f9:e3:5b:74:fe:68:66:d3:c2:c5:80: 17:c9:d1:82:b1:c0:aa:63:3e:d3:d7:f1:f6:81:b5:9d:1a:25: c9:c3:9b:3a:78:51:a5:de:49:75:05:34:60:ff:c6:23:13:9d: 88:53:ae:49:0b:5d:63:89:a5:d8:fc:31:75:39:40:98:29:c0: 14:ba:65:48:24:67:9d:56:6e:58:d3:67:f1:bf:c7:5c:cd:df: 3d:8f:27:74:d9:cf:11:d4:91:b5:bc:39:96:72:89:ca:58:5d: 04:8c:79:ba:42:4f:33:31:70:fe:e1:1f:f1:ec:ec:3f:86:f1: 88:9b:ab:05:bb:fe:a5:19:9b:33:0d:4b:f2:25:8e:af:64:23: 4a:14:f5:b4:61:39:d2:0d:4c:be:79:26:05:28:81:7d:54:db: 0f:55:d7:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER09tzV0pyhu5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDA0YmNlMjItOTdjNy00OTUzLWFiZWEtZjk0NmY5ZjQ2ZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuAUjbONt9eKwy1+kjehZ/wTYx5gdgmdTQhh bCpj/S9onF3xWEX1MNEw23ju5VkA2zPJQhopsqVIivfdroavLgXnBDWJcUf08cnC 9r3n3ayO9eKC/semddX8VS6jmEgeRqjnZueWNQ20fxXAeLcudSoMyiVandTcVUe4 R3Fs/FEGWaGYPyq3An/JJLlLl6xEZ7DQGcD3sUpRMl07HNdgueoQjfPEMfFc7SvW MG5mWKq2asS8KaNVdWTHShjHaYVmtJLeYtbF7OxFkbRMXSntS+68kHR/discn6+E G59FM9h1NAipLbgWd0Te+mcs9byfE9X2NDmtWEfEsdPjLaBGWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGR7e5HyKuz/IqjSzm6Twrd58pmMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjk4NTg4NjktYTY2Zi0z ZmQ1LTkyNDctMWNkYjc2YmU4ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRcTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERMxCMGemTU82oYLqwv0WCrdq2PBSXSZQRUBhuCXb/OgOnnUbn76rnA kKTOHx/rnoWnWZ/S/4dmhS9c6nS7FNNT6MpBu8y6z8aWSurCeMoG39EMzNm4w9Rh jNdjx9GUuif541t0/mhm08LFgBfJ0YKxwKpjPtPX8faBtZ0aJcnDmzp4UaXeSXUF NGD/xiMTnYhTrkkLXWOJpdj8MXU5QJgpwBS6ZUgkZ51WbljTZ/G/x1zN3z2PJ3TZ zxHUkbW8OZZyicpYXQSMebpCTzMxcP7hH/Hs7D+G8YibqwW7/qUZmzMNS/Iljq9k I0oU9bRhOdINTL55JgUogX1U2w9V138= -----END CERTIFICATE-----Generated at Sat Apr 5 22:30:59 2025 by rpki-client