$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc53500c-4e8c-3ce2-ac85-ac38860f21cb.roa File: fc53500c-4e8c-3ce2-ac85-ac38860f21cb.roa (raw, json) Hash identifier: 1Y2IeUFcDYvqrA+Dg6RPWPWwrxwqv+9rCpm2sWI4ALk= Subject key identifier: 5F:81:CD:3C:4B:96:15:B1:04:B9:EC:78:50:DA:B0:5F:9B:94:E8:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858491246A016454B2EBACC578680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc53500c-4e8c-3ce2-ac85-ac38860f21cb.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 7029 IP address blocks: 209.96.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:a0:16:45:4b:2e:ba:cc:57:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=93fa7bbb-3ae5-4b29-b280-f2cfaba5f974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:2b:cb:31:7d:d5:32:1c:0a:8b:3e:b0:95:9c: 1c:9a:1c:5d:af:d7:32:0b:b1:2c:b7:a0:2b:e2:99: 88:f5:20:b6:1d:c7:7c:77:5c:ea:6a:38:08:8d:3c: 8f:a5:0b:f1:75:a8:39:da:a6:f7:52:30:fa:05:13: 03:0b:d4:50:ff:ad:f6:33:41:1d:37:9a:a6:05:44: 23:31:4c:ab:70:b1:fe:c5:ef:fb:34:f2:b5:14:80: 36:84:b8:39:97:13:b6:cd:f5:b5:de:bf:53:bd:6f: 27:67:8d:a5:61:8e:26:a5:21:ba:80:a9:86:05:e4: 6b:a8:af:32:2c:fd:fb:9f:ec:08:e0:e6:7a:3b:06: c5:dd:a4:80:77:1d:70:92:76:33:c7:7b:e7:78:aa: ce:6d:92:f6:4a:d1:26:2d:a3:94:b4:0e:f3:f5:d4: 46:fa:30:e1:c3:69:21:ae:e5:c4:da:ea:a3:58:33: 63:8d:7e:14:f8:0f:8e:98:a6:aa:47:ed:68:61:bb: f8:e4:76:ed:10:d4:bb:d3:09:22:c0:d3:e3:23:c3: 9e:46:6a:66:04:5f:eb:52:eb:ec:2b:83:f0:f9:b4: 14:6e:4b:a8:6e:44:1e:f5:80:0a:f4:a8:08:45:66: 8d:f1:29:1a:b8:69:9b:80:c2:0c:d4:c2:09:67:ae: 13:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:81:CD:3C:4B:96:15:B1:04:B9:EC:78:50:DA:B0:5F:9B:94:E8:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fc53500c-4e8c-3ce2-ac85-ac38860f21cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.96.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2f:13:75:03:5f:b5:0a:19:4a:b7:2d:6a:62:f4:18:1e:f6: 07:da:5c:25:77:37:d9:ec:e9:eb:e7:7b:5b:98:ea:7d:7b:87: 74:03:9e:ea:c4:bb:a1:89:86:91:a0:22:81:d5:5e:fd:93:e9: d8:b9:87:36:44:5f:46:a0:61:77:33:b0:94:d9:f7:78:ab:ca: 6f:c9:22:5e:94:a2:f8:c8:af:58:61:f2:3a:1b:e5:32:6b:d5: 45:19:40:f9:81:7d:39:18:98:43:8e:c4:ce:ac:36:c6:60:b4: 80:a5:e9:0e:71:0b:bf:33:0c:27:ae:a8:01:28:18:fa:f0:b5: a8:4a:e2:61:54:62:8e:e7:3c:a0:21:58:2a:ea:eb:9a:de:df: 58:26:57:80:85:67:17:b2:51:54:cb:c8:ac:75:61:cc:67:e5: f1:e5:ef:fe:a1:5d:9c:95:0a:15:76:4c:5b:ee:b9:5c:b6:dd: 3e:7c:8c:63:f4:92:96:07:84:48:23:42:f2:9e:3d:40:82:e1: d5:15:72:ca:ff:cd:eb:2e:1f:0e:7b:c6:a3:76:33:e0:63:ef: 69:22:ba:ba:8f:38:dd:28:bb:8d:25:91:23:af:c3:ae:4e:46: 9c:ad:fc:57:e3:8b:98:38:ab:85:5a:04:cc:7f:88:19:28:14: bf:b8:bb:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqAWRUsuusxXhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OTNmYTdiYmItM2FlNS00YjI5LWIyODAtZjJjZmFiYTVmOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SvLMX3VMhwKiz6wlZwcmhxdr9cyC7Est6Ar 4pmI9SC2Hcd8d1zqajgIjTyPpQvxdag52qb3UjD6BRMDC9RQ/632M0EdN5qmBUQj MUyrcLH+xe/7NPK1FIA2hLg5lxO2zfW13r9TvW8nZ42lYY4mpSG6gKmGBeRrqK8y LP37n+wI4OZ6OwbF3aSAdx1wknYzx3vneKrObZL2StEmLaOUtA7z9dRG+jDhw2kh ruXE2uqjWDNjjX4U+A+OmKaqR+1oYbv45HbtENS70wkiwNPjI8OeRmpmBF/rUuvs K4Pw+bQUbkuobkQe9YAK9KgIRWaN8SkauGmbgMIM1MIJZ64TmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+BzTxLlhWxBLnseFDasF+blOhDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmM1MzUwMGMtNGU4Yy0z Y2UyLWFjODUtYWMzODg2MGYyMWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0WDZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIvE3UDX7UKGUq3LWpi9Bge9gfaXCV3N9ns6evne1uY6n17h3QDnurE u6GJhpGgIoHVXv2T6di5hzZEX0agYXczsJTZ93irym/JIl6UovjIr1hh8job5TJr 1UUZQPmBfTkYmEOOxM6sNsZgtICl6Q5xC78zDCeuqAEoGPrwtahK4mFUYo7nPKAh WCrq65re31gmV4CFZxeyUVTLyKx1Ycxn5fHl7/6hXZyVChV2TFvuuVy23T58jGP0 kpYHhEgjQvKePUCC4dUVcsr/zesuHw57xqN2M+Bj72kiurqPON0ou40lkSOvw65O Rpyt/Ffji5g4q4VaBMx/iBkoFL+4u5U= -----END CERTIFICATE-----Generated at Sun Apr 6 07:25:51 2025 by rpki-client