$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa File: 49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa (raw, json) Hash identifier: HACSGR/dQpvJIqQKXrGgzb1aI26+rXeSg3YXU4oqYu0= Subject key identifier: 00:3B:90:CC:DF:10:7D:12:A7:7A:97:AB:D6:B1:AA:FF:45:E8:3D:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F9DF81860FC554FAC5C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.252.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f9:df:81:86:0f:c5:54:fa:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=cf2a2436-1bf5-4dd9-b7e5-ff930d1e389b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:e2:d1:55:87:57:fc:9d:43:de:cd:fb:48: f4:8d:0a:0e:55:ba:60:dd:16:70:39:d2:bd:22:ca: df:f4:ab:f4:b2:7f:79:73:ad:45:6d:3d:27:ba:49: 95:d4:9d:2f:e1:0b:c0:95:cd:c5:4d:59:51:51:b9: ab:01:03:e0:13:db:57:5e:01:e5:e8:2c:ab:35:5f: 82:c4:67:c2:21:19:6a:23:11:f1:d9:40:68:b7:96: 5f:0e:de:84:71:8e:ef:6c:19:44:e2:43:07:1e:6d: 17:19:72:4c:1c:cd:ff:44:64:64:38:d5:33:c0:31: de:78:b2:5f:37:a0:5c:f8:de:21:ec:f1:b3:d8:07: 22:7b:89:db:26:f5:e9:d3:61:73:42:62:28:31:39: 6a:96:09:3b:5e:83:dc:86:a5:28:42:65:93:e8:e5: df:22:ba:3e:bf:54:6b:4b:9b:e1:8f:d7:22:81:c4: c1:a7:61:a1:23:38:23:2a:69:15:10:79:af:6b:85: b7:ec:52:5f:6c:f6:17:57:b5:5a:a8:97:37:a2:d2: 0d:4d:1c:1f:d2:18:2f:c3:05:5b:cc:06:0c:71:74: 4f:08:98:a8:c8:7a:ef:95:7d:22:98:cd:ae:6a:20: 6d:1b:92:a8:f5:24:74:a8:5c:9e:32:61:79:18:d5: b3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:90:CC:DF:10:7D:12:A7:7A:97:AB:D6:B1:AA:FF:45:E8:3D:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49b6977a-18d0-3312-bcf0-a7c382d60ad9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:03:5e:3c:47:7f:1e:7d:e5:6d:f1:6d:28:51:b6:8f:6c:83: a0:58:60:6d:06:e1:dc:2d:6d:1c:c6:e6:7a:7a:48:44:56:4e: 71:ad:eb:f7:87:b3:48:18:7d:36:81:79:03:84:d8:ee:97:5c: 63:a0:8f:82:01:46:d4:be:09:78:85:d7:b1:ee:db:1c:99:11: 9e:fb:4c:20:d0:4e:5d:cb:28:ef:9f:f6:5b:02:2c:68:ee:68: 9b:ee:85:06:12:fc:5f:04:85:9e:d6:1f:82:45:24:ad:c4:da: db:34:e9:c2:94:c0:85:b1:98:48:24:d1:5d:4b:a9:b4:f9:23: 79:cb:7b:16:9f:a8:e3:16:7c:8a:d3:c2:bf:c4:da:bd:4f:9f: 1c:bb:9b:91:bb:69:d8:1b:75:01:ca:bf:9e:19:02:f4:af:7d: 4d:05:cf:50:61:93:34:4c:0c:f8:05:ca:d8:9f:40:32:90:95: 15:ab:0a:92:c9:99:f7:02:94:bc:9b:ce:35:ca:09:e9:5b:a5: 56:17:28:15:ce:bb:97:ee:c7:17:80:f0:9f:79:0b:c2:d8:2d: 5e:f9:60:4a:ca:65:7a:86:94:8e:bc:c8:e4:b9:71:7c:94:f8: ad:d0:96:4a:92:1f:7d:66:b8:33:26:7f:44:dc:d9:49:67:30: b4:1c:ed:b4 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEPnfgYYPxVT6xcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2YyYTI0MzYtMWJmNS00ZGQ5LWI3ZTUtZmY5MzBkMWUzODliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8Pi0VWHV/ydQ97N+0j0jQoOVbpg3RZwOdK9 Isrf9Kv0sn95c61FbT0nukmV1J0v4QvAlc3FTVlRUbmrAQPgE9tXXgHl6CyrNV+C xGfCIRlqIxHx2UBot5ZfDt6EcY7vbBlE4kMHHm0XGXJMHM3/RGRkONUzwDHeeLJf N6Bc+N4h7PGz2Acie4nbJvXp02FzQmIoMTlqlgk7XoPchqUoQmWT6OXfIro+v1Rr S5vhj9cigcTBp2GhIzgjKmkVEHmva4W37FJfbPYXV7VaqJc3otINTRwf0hgvwwVb zAYMcXRPCJioyHrvlX0imM2uaiBtG5Ko9SR0qFyeMmF5GNWz3QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAA7kMzfEH0Sp3qXq9axqv9F6D1QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDliNjk3N2EtMThkMC0z MzEyLWJjZjAtYTdjMzgyZDYwYWQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC0fwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADQNePEd/Hn3lbfFtKFG2j2yDoFhgbQbh3C1tHMbmenpIRFZOca3r94ez SBh9NoF5A4TY7pdcY6CPggFG1L4JeIXXse7bHJkRnvtMINBOXcso75/2WwIsaO5o m+6FBhL8XwSFntYfgkUkrcTa2zTpwpTAhbGYSCTRXUuptPkject7Fp+o4xZ8itPC v8TavU+fHLubkbtp2Bt1Acq/nhkC9K99TQXPUGGTNEwM+AXK2J9AMpCVFasKksmZ 9wKUvJvONcoJ6VulVhcoFc67l+7HF4Dwn3kLwtgtXvlgSspleoaUjrzI5LlxfJT4 rdCWSpIffWa4MyZ/RNzZSWcwtBzttA== -----END CERTIFICATE-----Generated at Sun Apr 27 13:11:46 2025 by rpki-client