$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa File: 814cbe67-9c67-3420-81e6-2b9acdf04041.roa (raw, json) Hash identifier: 7bAmN1tdSJH9tRukIFVMKa9I/QUTdE59O/rJNH+ZNlM= Subject key identifier: BF:FA:8F:1E:3C:EB:20:6E:64:81:76:1A:8A:75:AC:3B:C9:FF:BE:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211268989BAC6B0408AB900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 208.101.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:26:89:89:ba:c6:b0:40:8a:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0c576cd1-046f-427b-86d1-1361fcb4624a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1c:1a:21:e3:32:0f:ed:f2:e9:29:c7:9e:70: e2:99:3a:05:c1:ed:93:9a:7e:77:cf:0d:e7:db:7a: 7d:43:ec:36:f2:c6:8d:e6:a1:98:ce:ec:f3:2a:ad: 95:fe:8f:76:a7:45:b4:ce:7a:f2:2b:53:fd:65:fd: 07:8d:91:1b:77:bc:33:64:a9:1f:f9:36:c0:b1:e4: c0:16:1a:b5:3f:d2:ae:a9:f6:c2:b4:74:2f:c8:8d: 07:2f:ed:e7:96:3a:4f:90:55:d3:64:f7:f6:ca:c1: ad:ad:04:6d:0b:ba:cf:c1:d4:1c:e3:9f:8e:1d:97: 29:c6:cd:55:0b:7d:f8:ea:d9:fb:10:32:fd:04:31: 1b:83:13:eb:ea:f4:49:3e:c5:7e:de:d9:3a:a5:a1: 32:a4:a7:7a:1d:d3:b3:27:d7:15:7e:9d:d9:27:11: 08:90:66:c7:6c:24:31:6e:34:0d:30:4f:c1:41:18: 58:32:07:2c:43:d8:88:06:99:8f:cb:b3:7a:2a:90: d5:8d:e9:08:6d:d2:e0:94:ff:83:3f:bc:ba:f4:a9: 9b:ca:28:bf:04:8a:42:cf:a2:e3:aa:cb:f6:4f:44: 42:32:1e:d7:7f:02:09:ad:0e:f1:38:2d:a3:2e:b8: 69:e3:06:32:40:b1:0d:21:11:bc:60:ea:01:3e:02: e6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:8F:1E:3C:EB:20:6E:64:81:76:1A:8A:75:AC:3B:C9:FF:BE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/814cbe67-9c67-3420-81e6-2b9acdf04041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:8f:07:d7:5a:02:e1:ca:b8:6a:89:ee:b4:53:b2:56:21:c8: 45:6a:26:2a:c7:91:7b:03:39:c6:ed:99:42:91:4a:6d:87:de: 5c:94:8d:36:4c:18:49:77:53:bb:b1:16:00:0d:f1:f5:91:39: af:a3:1f:f8:17:ce:a4:be:8a:2f:8c:21:fe:d9:08:d5:97:3f: e9:1a:16:23:22:a9:90:b6:66:16:c4:a1:19:50:a3:4f:d9:bf: 19:b2:4a:cd:f1:84:f6:a5:66:0f:d1:d3:3e:04:8b:94:b8:5c: d2:4c:75:f0:49:a8:dd:6f:ab:ca:90:f6:8f:0a:71:16:80:82: 56:a3:c6:2b:f4:6a:70:7d:95:70:ec:b0:a9:a2:e2:f8:86:81: a5:40:5d:b7:34:48:2d:67:55:9c:3a:a4:e2:b6:a3:e8:35:f4: 01:e0:02:9c:8c:01:80:6b:a1:a6:ea:c7:e0:37:d6:28:fc:b6: 31:44:f9:df:0f:95:f5:33:14:2b:ff:2c:c4:ae:8f:cc:3e:ce: 10:fc:4f:91:9e:96:f1:61:2d:4d:fa:3c:3d:79:55:89:d7:b1: d7:8e:11:9a:ab:56:16:2b:36:89:6c:2b:ea:1a:2b:a8:72:38: 82:b4:43:3a:a6:21:8d:00:a2:98:8b:08:c6:ee:69:f5:d5:99: 9b:10:2e:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESaJibrGsECKuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGM1NzZjZDEtMDQ2Zi00MjdiLTg2ZDEtMTM2MWZjYjQ2MjRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRwaIeMyD+3y6SnHnnDimToFwe2Tmn53zw3n 23p9Q+w28saN5qGYzuzzKq2V/o92p0W0znryK1P9Zf0HjZEbd7wzZKkf+TbAseTA Fhq1P9KuqfbCtHQvyI0HL+3nljpPkFXTZPf2ysGtrQRtC7rPwdQc45+OHZcpxs1V C3346tn7EDL9BDEbgxPr6vRJPsV+3tk6paEypKd6HdOzJ9cVfp3ZJxEIkGbHbCQx bjQNME/BQRhYMgcsQ9iIBpmPy7N6KpDVjekIbdLglP+DP7y69Kmbyii/BIpCz6Lj qsv2T0RCMh7XfwIJrQ7xOC2jLrhp4wYyQLENIRG8YOoBPgLmVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/6jx486yBuZIF2Gop1rDvJ/77YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODE0Y2JlNjctOWM2Ny0z NDIwLTgxZTYtMmI5YWNkZjA0MDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyPB9daAuHKuGqJ7rRTslYhyEVqJirHkXsDOcbtmUKRSm2H3lyUjTZM GEl3U7uxFgAN8fWROa+jH/gXzqS+ii+MIf7ZCNWXP+kaFiMiqZC2ZhbEoRlQo0/Z vxmySs3xhPalZg/R0z4Ei5S4XNJMdfBJqN1vq8qQ9o8KcRaAglajxiv0anB9lXDs sKmi4viGgaVAXbc0SC1nVZw6pOK2o+g19AHgApyMAYBroabqx+A31ij8tjFE+d8P lfUzFCv/LMSuj8w+zhD8T5GelvFhLU36PD15VYnXsdeOEZqrVhYrNolsK+oaK6hy OIK0QzqmIY0AopiLCMbuafXVmZsQLn8= -----END CERTIFICATE-----Generated at Sun Apr 27 11:30:24 2025 by rpki-client