$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa File: 08f9e3af-a77c-300b-90ce-7f032359dcfa.roa (raw, json) Hash identifier: nEFx8QBzWAYq+TTL0eKFbtDMTKhxU9F+Fq1MCMGE8u4= Subject key identifier: 41:3E:16:D4:E4:F9:4E:5B:6D:3D:6A:82:80:7B:F8:94:8B:20:90:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11FE791F1DBBA2B9912C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 151.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1f:e7:91:f1:db:ba:2b:99:12:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=dc638dc0-6a7a-4988-a59d-49cd08e8719a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:f0:2c:f7:62:95:0b:bb:5b:1e:70:d7:47: 43:cb:a3:bf:95:d3:8d:03:4f:5a:5b:bd:38:1b:95: 34:c5:35:e7:16:78:c2:40:2e:a1:83:39:6d:06:86: 69:14:e3:ba:f3:37:c7:71:8d:17:ec:32:12:f5:97: 9a:2f:85:e7:89:4a:05:ec:56:b7:9f:04:b9:94:b2: 1e:c2:33:57:6e:45:32:ae:50:25:23:99:47:67:f6: a1:c4:7d:77:8c:26:43:09:ae:16:ad:4c:04:03:ea: d6:89:cb:7d:5e:a4:ba:d6:7b:0f:5d:cf:75:e1:f2: 3f:07:d6:74:0d:6a:d6:f8:89:17:de:eb:3f:13:37: 7e:ec:a1:d4:f1:d7:8f:f5:0e:62:14:4e:1b:e4:85: 01:d8:c6:48:34:53:0b:c3:9b:d9:89:9f:a7:e7:02: ad:84:e4:81:76:73:fa:42:b4:39:35:85:c6:58:37: 4a:cd:47:1e:ec:33:69:b3:92:a4:43:40:1c:d9:87: 08:b4:76:6d:26:be:3a:df:81:18:f6:6b:5d:88:9c: d6:b0:39:62:35:fb:bc:96:c3:5b:96:35:33:29:0c: 3c:3a:be:e6:67:1c:dc:9f:dc:af:71:28:02:e9:3e: 03:de:0f:0f:85:02:28:a6:75:56:98:95:20:68:44: 2b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3E:16:D4:E4:F9:4E:5B:6D:3D:6A:82:80:7B:F8:94:8B:20:90:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:8e:ce:ae:5d:5a:4a:01:b0:4d:7b:a6:67:b6:40:cb:b8:69: d8:18:72:2d:a9:db:fb:4f:83:dc:07:5c:83:43:23:1e:a3:17: f5:7a:60:d4:35:a2:ba:06:94:34:ba:7f:10:6c:e0:4c:c4:83: 26:25:6d:c7:6e:e9:ee:36:20:0e:67:11:02:ca:58:33:37:12: 87:3e:b4:3c:f6:b9:31:32:ee:75:6e:80:a1:13:05:d1:04:30: ab:73:55:53:8a:97:44:46:27:15:81:e5:b9:ad:cf:27:31:6d: 85:6b:e8:f0:7e:7a:25:06:fa:bf:b5:ea:5a:2f:1c:e8:81:e9: 22:0c:3f:84:d0:0f:b8:be:42:3b:89:d1:72:ab:67:06:79:37: b2:b6:b5:fc:11:1e:ac:1e:d4:ec:b2:9e:1e:d6:53:a2:69:d1: d6:61:3d:30:39:9b:d7:36:7b:e0:d5:13:95:6c:08:4e:9d:57: 39:2c:e6:7c:cb:75:47:9e:0c:f5:c3:48:f7:e1:48:6e:aa:18: 07:8b:5b:33:79:9e:1a:70:fa:00:08:1e:ed:88:32:ce:91:42: 8f:05:12:dc:b9:0d:d6:0b:24:92:2e:bb:c7:7c:5f:ce:df:0a: c4:22:c5:4f:fc:c2:db:e8:36:f9:48:57:78:d1:1d:de:47:db: 18:c5:28:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R/nkfHbuiuZEsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZGM2MzhkYzAtNmE3YS00OTg4LWE1OWQtNDljZDA4ZTg3MTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6zwLPdilQu7Wx5w10dDy6O/ldONA09aW704 G5U0xTXnFnjCQC6hgzltBoZpFOO68zfHcY0X7DIS9ZeaL4XniUoF7Fa3nwS5lLIe wjNXbkUyrlAlI5lHZ/ahxH13jCZDCa4WrUwEA+rWict9XqS61nsPXc914fI/B9Z0 DWrW+IkX3us/Ezd+7KHU8deP9Q5iFE4b5IUB2MZINFMLw5vZiZ+n5wKthOSBdnP6 QrQ5NYXGWDdKzUce7DNps5KkQ0Ac2YcItHZtJr4634EY9mtdiJzWsDliNfu8lsNb ljUzKQw8Or7mZxzcn9yvcSgC6T4D3g8PhQIopnVWmJUgaEQrlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE+FtTk+U5bbT1qgoB7+JSLIJDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhmOWUzYWYtYTc3Yy0z MDBiLTkwY2UtN2YwMzIzNTlkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSOzq5dWkoBsE17pme2QMu4adgYci2p2/tPg9wHXINDIx6jF/V6YNQ1 oroGlDS6fxBs4EzEgyYlbcdu6e42IA5nEQLKWDM3Eoc+tDz2uTEy7nVugKETBdEE MKtzVVOKl0RGJxWB5bmtzycxbYVr6PB+eiUG+r+16lovHOiB6SIMP4TQD7i+QjuJ 0XKrZwZ5N7K2tfwRHqwe1Oyynh7WU6Jp0dZhPTA5m9c2e+DVE5VsCE6dVzks5nzL dUeeDPXDSPfhSG6qGAeLWzN5nhpw+gAIHu2IMs6RQo8FEty5DdYLJJIuu8d8X87f CsQixU/8wtvoNvlIV3jRHd5H2xjFKNU= -----END CERTIFICATE-----Generated at Sun Apr 27 02:31:16 2025 by rpki-client