$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa File: 2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa (raw, json) Hash identifier: ESBYC5PtVsFHONNFLceMIIKOYmfNvCGGXRNWDrUhWJM= Subject key identifier: 90:3F:D0:28:24:83:A0:A1:12:72:4A:62:B2:F7:8D:2B:65:34:08:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21128331129099F3AAB1840 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.119.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:28:33:11:29:09:9f:3a:ab:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=a01b58de-0c66-4449-b5f7-443b4e94f353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:6a:f3:59:57:d3:b1:a6:42:fa:66:8d:26: 0e:7b:4c:69:06:af:87:f7:56:b8:07:a2:e3:f3:13: c7:14:28:7c:ec:80:53:85:f7:6b:da:6c:22:82:a7: 90:06:f4:9c:2f:24:59:62:d7:c5:da:e9:55:7b:ad: c8:41:0a:d6:35:01:ba:50:a5:de:75:5b:eb:8f:7d: b0:be:c0:67:16:dc:56:b1:60:ea:a2:c3:73:4e:fe: 53:cf:24:cf:1c:19:7b:b2:d0:da:98:9f:9b:4e:a6: b1:25:0a:f9:0a:b2:49:2a:a7:b9:cd:8a:d1:26:b2: 5d:3c:88:1d:fb:96:31:3c:f6:71:b6:a6:11:a8:b7: b6:58:29:60:4d:d5:1f:aa:91:06:23:62:ea:0c:20: 09:b7:37:3c:f1:77:55:b3:43:f4:cf:13:b7:7b:4c: 79:1d:2b:c7:f3:7b:36:f3:c0:36:fa:9e:c8:58:a4: 77:ef:f2:ed:a9:35:83:80:69:5f:95:45:96:f6:11: d9:a4:dc:93:3b:d1:ea:45:a4:a6:f4:e9:21:a9:23: f3:67:c9:d6:45:af:f3:2c:91:2b:9d:94:4d:91:4e: c5:02:12:ab:83:bb:3d:ef:2e:e9:0e:e0:c0:2c:3a: b2:99:a4:92:47:90:af:a7:99:ff:e5:48:18:15:82: 26:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3F:D0:28:24:83:A0:A1:12:72:4A:62:B2:F7:8D:2B:65:34:08:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f4ab6ed-df8d-353a-ab51-fbeb61ce130a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.119.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:54:f2:dc:ce:1d:12:81:e1:a2:09:86:87:bb:1d:34:73:70: 66:8a:8d:7c:3b:3e:eb:98:29:33:cd:e4:56:be:13:0d:b2:6e: 2f:f5:04:5e:a1:7a:f4:46:2f:fa:7e:f3:a2:c9:ab:29:51:dd: bc:c4:40:16:8d:40:a2:b8:65:be:98:e9:8b:6f:97:e4:a0:f9: 9f:91:24:60:6a:4e:9c:67:7b:00:e4:e1:87:3d:48:bd:b8:d4: 04:15:f4:92:17:a6:5f:54:b4:c1:ae:e1:5e:ce:85:74:90:6e: 18:77:72:52:bd:20:ab:3c:69:f5:02:48:c2:75:73:5e:ef:6f: 5f:52:4c:b5:88:1d:e7:9d:cd:ed:8a:30:99:8c:ff:b3:07:d2: 74:7d:89:3c:cc:c5:9c:32:0f:2a:b9:d1:03:5d:ea:fd:fd:0d: af:18:54:8e:2c:86:28:73:97:f6:98:86:b2:f0:4e:da:0c:0a: ed:48:df:98:05:c6:46:c5:14:58:c7:0b:ef:71:a7:9c:0c:54: 68:8b:ef:64:a3:0f:33:18:5d:da:4b:30:69:a0:fd:35:e1:e4: 01:e3:af:cd:7e:6d:c8:07:3a:13:fb:bf:33:8c:68:ba:8c:61: 31:d4:a0:31:57:9f:3d:49:40:ac:cb:e8:ac:c2:26:a6:0d:03: 03:02:e4:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESgzESkJnzqrGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YTAxYjU4ZGUtMGM2Ni00NDQ5LWI1ZjctNDQzYjRlOTRmMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGpq81lX07GmQvpmjSYOe0xpBq+H91a4B6Lj 8xPHFCh87IBThfdr2mwigqeQBvScLyRZYtfF2ulVe63IQQrWNQG6UKXedVvrj32w vsBnFtxWsWDqosNzTv5TzyTPHBl7stDamJ+bTqaxJQr5CrJJKqe5zYrRJrJdPIgd +5YxPPZxtqYRqLe2WClgTdUfqpEGI2LqDCAJtzc88XdVs0P0zxO3e0x5HSvH83s2 88A2+p7IWKR37/LtqTWDgGlflUWW9hHZpNyTO9HqRaSm9OkhqSPzZ8nWRa/zLJEr nZRNkU7FAhKrg7s97y7pDuDALDqymaSSR5Cvp5n/5UgYFYImdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA/0Cgkg6ChEnJKYrL3jStlNAjtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmY0YWI2ZWQtZGY4ZC0z NTNhLWFiNTEtZmJlYjYxY2UxMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2HfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtU8tzOHRKB4aIJhoe7HTRzcGaKjXw7PuuYKTPN5Fa+Ew2ybi/1BF6h evRGL/p+86LJqylR3bzEQBaNQKK4Zb6Y6Ytvl+Sg+Z+RJGBqTpxnewDk4Yc9SL24 1AQV9JIXpl9UtMGu4V7OhXSQbhh3clK9IKs8afUCSMJ1c17vb19STLWIHeedze2K MJmM/7MH0nR9iTzMxZwyDyq50QNd6v39Da8YVI4shihzl/aYhrLwTtoMCu1I35gF xkbFFFjHC+9xp5wMVGiL72SjDzMYXdpLMGmg/TXh5AHjr81+bcgHOhP7vzOMaLqM YTHUoDFXnz1JQKzL6KzCJqYNAwMC5D8= -----END CERTIFICATE-----Generated at Sun Apr 27 01:46:48 2025 by rpki-client