$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa File: 558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa (raw, json) Hash identifier: PyLu4PW5hTWR0X/lt5Bef0RzN95BH4gqfye8OWZuxvM= Subject key identifier: BF:42:25:16:30:96:10:A2:C8:7B:E0:34:EE:2C:6F:69:B1:CA:D1:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F854D9ECF61B9C26BCD0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 208.101.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f8:54:d9:ec:f6:1b:9c:26:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=18d1c0be-ff65-416a-af43-74380a1878e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3a:b4:e8:48:ec:25:66:1e:42:b2:09:60:c6: 9d:c2:70:77:74:80:e0:e7:33:4b:49:a2:d9:a8:42: d1:06:f6:55:cb:f0:00:ef:98:06:03:e0:92:8a:c5: c6:70:b4:b9:a0:9f:47:d1:93:3f:c5:0d:26:5d:2f: 57:bf:6e:9e:24:90:25:03:b2:e6:e7:a8:eb:b3:0d: 81:83:38:f1:39:a0:a5:d9:ed:a3:88:17:61:1f:b1: 51:07:38:c3:ad:c4:a1:8e:3a:76:71:9c:7f:95:85: c9:5e:18:75:93:25:8b:e1:92:54:ab:77:7f:78:8c: 20:a4:c6:32:0f:09:c4:b8:48:76:be:e1:93:a1:5c: 77:c1:5d:83:4b:a5:dc:3e:b9:12:42:30:b2:bf:36: 07:5d:47:18:b3:af:70:97:11:bd:f6:0f:ab:91:56: 98:df:c0:33:d3:a6:66:12:99:c8:5c:ab:ef:11:f6: db:7f:30:5a:98:ae:92:85:12:68:c1:6d:ea:b1:1b: c6:61:0e:7a:a3:70:3e:26:8c:11:18:c8:a3:fa:a7: 7e:24:d8:ba:4e:02:24:d4:5c:67:20:06:26:0a:b7: 8f:43:ff:4f:de:cd:29:e7:33:85:5d:30:b6:ef:2e: d8:2d:d9:fb:e0:27:62:b2:cd:a5:70:ad:52:43:f8: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:42:25:16:30:96:10:A2:C8:7B:E0:34:EE:2C:6F:69:B1:CA:D1:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:05:66:2c:84:0b:6a:43:6c:b6:8b:70:da:5f:1b:2e:db:16: 80:10:91:f6:a7:d3:80:77:a9:4f:94:9f:82:52:91:3e:54:ef: 2a:68:97:c4:a8:e9:4d:71:0e:6a:99:8a:40:00:13:47:0f:c0: 93:88:ee:52:a6:f9:65:c0:23:fb:f9:dc:4b:97:d9:17:88:8a: 51:3f:46:fd:08:51:cc:c3:d7:eb:78:44:ac:91:60:44:35:e0: bb:f7:dc:de:ae:e0:fd:b0:cb:c7:af:88:91:9e:24:07:62:ea: 76:75:99:ce:64:e5:7a:42:69:61:d4:36:ff:5e:be:8b:cf:c6: 95:f3:ff:7f:54:92:25:e3:7c:a0:c2:3e:03:b1:87:d6:9f:7a: d5:17:f0:2b:bb:27:53:a0:2a:1a:0b:14:7e:f7:0b:f6:a8:cc: 4b:ea:57:a3:38:46:d3:d8:4a:e8:a7:7c:0b:1b:a7:03:db:7d: 11:61:bb:48:f1:f9:57:c3:16:9b:4c:f0:1c:ae:3e:da:8f:5f: cb:43:d2:b6:72:16:e2:59:9f:e3:bb:20:38:3c:3a:93:3a:13: f8:3a:a7:f0:09:56:35:bf:32:92:9f:c8:2e:45:94:3f:ac:9e: ae:06:81:41:59:27:8d:77:f4:07:4d:b1:0b:92:48:ca:93:6b: c0:21:fa:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPhU2ez2G5wmvNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MThkMWMwYmUtZmY2NS00MTZhLWFmNDMtNzQzODBhMTg3OGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjq06EjsJWYeQrIJYMadwnB3dIDg5zNLSaLZ qELRBvZVy/AA75gGA+CSisXGcLS5oJ9H0ZM/xQ0mXS9Xv26eJJAlA7Lm56jrsw2B gzjxOaCl2e2jiBdhH7FRBzjDrcShjjp2cZx/lYXJXhh1kyWL4ZJUq3d/eIwgpMYy DwnEuEh2vuGToVx3wV2DS6XcPrkSQjCyvzYHXUcYs69wlxG99g+rkVaY38Az06Zm EpnIXKvvEfbbfzBamK6ShRJowW3qsRvGYQ56o3A+JowRGMij+qd+JNi6TgIk1Fxn IAYmCrePQ/9P3s0p5zOFXTC27y7YLdn74Cdiss2lcK1SQ/junQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9CJRYwlhCiyHvgNO4sb2mxytEWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU4YjQ1NTgtZmIzZi0z Yjk5LTgwYTgtOGEzODNhZDZhZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAFZiyEC2pDbLaLcNpfGy7bFoAQkfan04B3qU+Un4JSkT5U7ypol8So 6U1xDmqZikAAE0cPwJOI7lKm+WXAI/v53EuX2ReIilE/Rv0IUczD1+t4RKyRYEQ1 4Lv33N6u4P2wy8eviJGeJAdi6nZ1mc5k5XpCaWHUNv9evovPxpXz/39UkiXjfKDC PgOxh9afetUX8Cu7J1OgKhoLFH73C/aozEvqV6M4RtPYSuinfAsbpwPbfRFhu0jx +VfDFptM8ByuPtqPX8tD0rZyFuJZn+O7IDg8OpM6E/g6p/AJVjW/MpKfyC5FlD+s nq4GgUFZJ4139AdNsQuSSMqTa8Ah+tQ= -----END CERTIFICATE-----Generated at Sun Apr 27 03:57:15 2025 by rpki-client