$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa File: 21ef65b0-89b3-3b33-8192-e464535e916c.roa (raw, json) Hash identifier: Sw+jLDmvjLO5TNm0cXtoZ0Jbn6IWEWJ5MfYfYMQzpAg= Subject key identifier: 42:DB:84:EF:BB:C6:3A:EB:13:0B:0B:02:F8:F7:72:FE:C9:4B:A6:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F833CC725881DE30C000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 207.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f8:33:cc:72:58:81:de:30:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0db66d7b-9db8-4200-a21e-eabc79d08ff2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f8:fe:c9:ca:ab:fb:61:e5:dd:ea:25:32:e1: 3c:4b:7d:b0:21:4b:c1:af:57:12:a3:71:e3:97:2a: 9b:9d:94:8d:3c:6b:e3:98:0c:be:59:25:fb:8a:8a: ac:06:dd:51:da:30:33:9c:e0:82:a3:24:23:b1:e3: 24:ac:3e:3b:73:a3:45:cd:7b:da:33:d3:e4:c9:40: fe:ca:bc:9e:d8:8e:1e:26:3f:36:15:09:ab:63:2b: 9f:5b:1b:24:ec:21:5e:2a:58:1d:93:11:54:a5:96: df:a6:dc:f7:e5:39:66:1f:26:bd:bc:cd:e2:04:cc: 9c:cd:8d:fd:77:7e:6a:ac:f4:87:87:62:a5:15:8b: 19:d7:56:7d:8d:1d:bf:7c:70:93:43:fb:52:a6:75: d5:73:12:67:e9:c2:29:cc:c0:9b:45:31:73:87:07: 13:d1:57:cc:da:06:77:e1:15:37:bb:ae:6c:8e:6a: 88:b3:16:7b:cd:d8:6c:eb:83:f7:0f:b8:0a:52:1a: 12:d3:31:54:ac:c7:cd:9b:22:0c:5e:41:f1:03:40: 1b:fb:b5:72:9c:3b:7d:07:f9:ba:fd:5b:9e:d8:fd: 0d:93:77:88:59:35:75:80:6b:b5:c5:ca:cf:9f:6c: 86:1d:b6:83:66:ea:e5:6e:ea:93:ef:67:60:1a:4b: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DB:84:EF:BB:C6:3A:EB:13:0B:0B:02:F8:F7:72:FE:C9:4B:A6:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:98:f3:73:03:2c:97:d7:f1:83:c5:80:fe:61:86:a2:c6:e4: 1f:e5:27:69:88:e4:ed:62:0f:26:4d:23:aa:9e:7f:6f:16:71: 80:d2:d9:ec:97:7e:bf:a1:5d:c8:ca:de:7c:e5:30:dd:e0:26: df:f6:c4:ca:3a:3a:02:7b:aa:59:8d:93:d1:4b:ee:6f:0a:4f: d4:bf:65:2a:2f:55:ca:bd:ab:be:ba:0a:27:2c:f9:60:61:96: ad:40:66:00:a3:5d:01:bc:b6:b8:c5:21:64:c3:3b:76:bc:43: a6:29:3f:e2:46:55:ee:ff:ef:87:be:00:dc:bc:b4:92:c3:77: 37:c4:d1:47:94:b9:86:3d:b3:67:0e:d3:cb:79:c2:0e:c1:95: 77:ee:43:06:99:38:1e:65:d5:a2:98:95:aa:01:1c:82:3b:6d: fd:88:71:51:0c:af:b3:4e:ca:44:47:56:9c:34:a6:b3:66:a6: 64:86:b8:8b:48:2a:e6:7f:c8:60:91:16:73:c3:60:ef:70:51: 30:f7:f0:91:cf:1a:1c:82:d0:22:cc:70:7f:b1:63:c4:5d:ad: 15:b4:01:58:95:3d:a5:b8:7d:63:09:b3:a9:b0:07:88:dd:a9: d7:41:53:40:30:b9:1b:41:0b:04:ba:d7:bc:3f:66:ef:8d:81: c5:10:d8:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPgzzHJYgd4wwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGRiNjZkN2ItOWRiOC00MjAwLWEyMWUtZWFiYzc5ZDA4ZmYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/j+ycqr+2Hl3eolMuE8S32wIUvBr1cSo3Hj lyqbnZSNPGvjmAy+WSX7ioqsBt1R2jAznOCCoyQjseMkrD47c6NFzXvaM9PkyUD+ yrye2I4eJj82FQmrYyufWxsk7CFeKlgdkxFUpZbfptz35TlmHya9vM3iBMyczY39 d35qrPSHh2KlFYsZ11Z9jR2/fHCTQ/tSpnXVcxJn6cIpzMCbRTFzhwcT0VfM2gZ3 4RU3u65sjmqIsxZ7zdhs64P3D7gKUhoS0zFUrMfNmyIMXkHxA0Ab+7VynDt9B/m6 /Vue2P0Nk3eIWTV1gGu1xcrPn2yGHbaDZurlbuqT72dgGktj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELbhO+7xjrrEwsLAvj3cv7JS6YRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlZjY1YjAtODliMy0z YjMzLTgxOTItZTQ2NDUzNWU5MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyY83MDLJfX8YPFgP5hhqLG5B/lJ2mI5O1iDyZNI6qef28WcYDS2eyX fr+hXcjK3nzlMN3gJt/2xMo6OgJ7qlmNk9FL7m8KT9S/ZSovVcq9q766Cics+WBh lq1AZgCjXQG8trjFIWTDO3a8Q6YpP+JGVe7/74e+ANy8tJLDdzfE0UeUuYY9s2cO 08t5wg7BlXfuQwaZOB5l1aKYlaoBHII7bf2IcVEMr7NOykRHVpw0prNmpmSGuItI KuZ/yGCRFnPDYO9wUTD38JHPGhyC0CLMcH+xY8RdrRW0AViVPaW4fWMJs6mwB4jd qddBU0AwuRtBCwS617w/Zu+NgcUQ2NQ= -----END CERTIFICATE-----Generated at Sun Apr 27 05:48:37 2025 by rpki-client