$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa File: fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa (raw, json) Hash identifier: w7TjWaap+hz/X7Zdme/hSSV/+i46oWmRqkSGwWeqTmE= Subject key identifier: E1:A3:50:38:37:89:0E:BB:67:AB:CE:8A:5A:02:73:85:34:63:BA:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F6B0B8BEF6128E3BB240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 199.119.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f6:b0:b8:be:f6:12:8e:3b:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=e1eb8246-a337-443e-8bec-f0551ace21f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b3:f7:61:3e:fd:81:ce:26:81:64:46:4a:aa: c8:b9:aa:78:cb:90:f4:d4:46:43:77:a1:6f:0c:d0: e3:54:7c:c0:46:a8:bf:00:d5:72:10:fa:ab:3b:18: 68:69:5f:b2:fa:d3:bb:29:5e:f7:38:fc:5d:54:e0: 2d:ae:92:f2:45:de:90:2c:bd:fd:86:27:f1:94:bc: ef:89:c8:3a:2c:27:03:74:a7:f6:1e:39:72:3c:d5: 93:f7:4d:f5:cf:21:6b:0c:a5:98:2d:be:c2:be:22: 0a:8b:04:fb:77:59:42:54:08:ec:3e:aa:17:6d:20: c5:cd:e4:a4:71:c0:c7:25:21:20:1a:5e:f2:7f:fc: 57:00:e2:d4:cb:e1:99:b9:43:4a:14:0d:e7:ec:c1: 96:ec:63:e6:dc:04:34:06:62:c7:61:fa:12:17:0a: 18:0a:6a:60:54:36:55:e5:30:be:5c:78:6a:78:50: 4d:61:b7:85:65:f9:2b:ee:18:27:ee:03:53:a1:70: ec:da:91:b2:c6:2e:d6:2a:c0:e1:a0:e7:a2:8b:ac: f3:56:82:9e:92:d7:be:39:eb:5b:1d:44:4f:f3:8d: 07:dd:84:cf:b9:ae:7f:63:d4:5f:83:f3:c3:2f:8a: 64:e6:a0:b6:ca:a6:d6:a1:33:95:48:10:bc:16:54: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A3:50:38:37:89:0E:BB:67:AB:CE:8A:5A:02:73:85:34:63:BA:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fabd9fbe-3ef8-3d3d-9d81-791f7a057c63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.119.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:59:60:83:f8:19:39:66:90:5e:ea:c4:15:d8:1c:58:d6:77: cf:fd:ac:eb:3e:d9:54:90:e7:29:53:64:f4:f7:a7:e6:95:31: 26:44:65:81:de:4b:41:5e:99:18:25:43:b0:f5:3d:45:f4:b7: 9c:71:aa:b7:88:01:67:08:f0:f5:f1:10:7c:bd:d5:23:ab:3f: 1d:8c:c0:7a:2e:34:c1:04:d4:d7:69:12:fa:b5:3d:5e:d1:1f: e4:5b:70:b1:e2:5f:5a:e1:3b:c0:c6:54:2f:cd:cb:08:cc:49: 76:d5:cd:b6:5a:a8:e3:e9:aa:41:0b:2e:b3:38:a9:51:f6:3b: 3f:99:3b:6c:90:68:43:f9:d0:a9:17:a2:29:b1:0a:de:61:62: 6b:cd:5f:27:5e:b4:b5:c3:b3:83:f8:68:99:cb:12:be:7e:47: 7a:2c:50:99:f9:00:8c:4f:5c:78:39:78:aa:bb:50:9d:cc:be: d8:b9:11:09:ec:61:a9:c0:2b:a1:25:4d:fa:b4:8a:08:30:e6: 8e:a9:f4:a8:a3:d0:f8:70:56:b2:2e:15:e5:9e:9f:e5:58:9e: 2f:0e:66:3c:69:a4:3a:a9:54:ab:bb:83:d7:39:97:fc:ff:95: 43:d0:77:9e:05:89:83:18:fc:33:39:4e:35:95:43:6a:9f:c5: b4:a3:d8:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPawuL72Eo47skAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZTFlYjgyNDYtYTMzNy00NDNlLThiZWMtZjA1NTFhY2UyMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLP3YT79gc4mgWRGSqrIuap4y5D01EZDd6Fv DNDjVHzARqi/ANVyEPqrOxhoaV+y+tO7KV73OPxdVOAtrpLyRd6QLL39hifxlLzv icg6LCcDdKf2HjlyPNWT9031zyFrDKWYLb7CviIKiwT7d1lCVAjsPqoXbSDFzeSk ccDHJSEgGl7yf/xXAOLUy+GZuUNKFA3n7MGW7GPm3AQ0BmLHYfoSFwoYCmpgVDZV 5TC+XHhqeFBNYbeFZfkr7hgn7gNToXDs2pGyxi7WKsDhoOeii6zzVoKekte+Oetb HURP840H3YTPua5/Y9Rfg/PDL4pk5qC2yqbWoTOVSBC8FlSXHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGjUDg3iQ67Z6vOiloCc4U0Y7q0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmFiZDlmYmUtM2VmOC0z ZDNkLTlkODEtNzkxZjdhMDU3YzYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx3fwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhZYIP4GTlmkF7qxBXYHFjWd8/9rOs+2VSQ5ylTZPT3p+aVMSZEZYHe S0FemRglQ7D1PUX0t5xxqreIAWcI8PXxEHy91SOrPx2MwHouNMEE1NdpEvq1PV7R H+RbcLHiX1rhO8DGVC/NywjMSXbVzbZaqOPpqkELLrM4qVH2Oz+ZO2yQaEP50KkX oimxCt5hYmvNXydetLXDs4P4aJnLEr5+R3osUJn5AIxPXHg5eKq7UJ3Mvti5EQns YanAK6ElTfq0iggw5o6p9Kij0PhwVrIuFeWen+VYni8OZjxppDqpVKu7g9c5l/z/ lUPQd54FiYMY/DM5TjWVQ2qfxbSj2Mk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:23 2025 by rpki-client