$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa File: 01a8e5f6-00d1-310c-9826-54ee0eea151a.roa (raw, json) Hash identifier: quAs5dIc01LhqdV9qpjMc4b+RvC5zOXs4JXutM+i5tA= Subject key identifier: F7:93:AF:EC:ED:DE:2E:0E:63:73:D9:45:F2:EC:DA:49:E3:AA:34:01 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB57470477A1E2C11E8C980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 40.136.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:74:70:47:7a:1e:2c:11:e8:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=00e843f1-bf7b-43cb-b6bb-f232b4ed1f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d9:59:7a:16:48:a7:57:38:65:4a:0a:24:e3: b8:8d:a1:57:45:b2:d8:51:60:ea:21:aa:c5:56:5b: 20:2d:2c:1d:3f:4e:82:83:97:9b:e0:34:10:8f:a6: c8:a7:70:7a:36:5d:91:b1:5e:4f:b0:fc:2f:a1:38: e9:83:02:71:09:53:80:ac:62:a2:17:c7:f2:d2:98: d2:97:99:80:5e:c9:e8:ec:ea:b3:08:e0:66:fa:64: 0b:06:a0:cb:05:1a:2a:da:49:66:9d:a3:98:b0:35: 63:eb:c1:27:ea:19:23:48:f4:f1:bc:a4:95:b3:a2: 0a:ed:a0:96:5d:a5:27:fa:86:b4:9a:d9:fc:13:05: 20:ab:a4:f3:c1:98:b5:9f:c3:dc:68:b7:1a:37:e4: 31:a1:e3:ac:cc:47:1e:d2:53:c5:3d:14:0d:2c:0e: e1:06:34:78:58:b8:10:a4:15:59:10:3c:8d:17:86: 3e:de:69:6b:58:94:bd:e4:2b:b9:4a:d2:2d:52:03: f8:5b:38:d3:6f:aa:c6:a2:4e:b9:11:7d:f5:67:91: 91:b0:5f:3c:0d:d3:ff:42:d6:17:f8:69:b2:7d:b6: 88:8f:23:ab:f3:28:3d:b7:15:fb:a9:cf:b7:2c:99: 33:59:c5:0d:22:43:44:b0:dd:1e:d6:0e:0d:e1:6c: c3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:93:AF:EC:ED:DE:2E:0E:63:73:D9:45:F2:EC:DA:49:E3:AA:34:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/01a8e5f6-00d1-310c-9826-54ee0eea151a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f5:da:0b:f3:ed:8f:77:f3:fe:e2:21:fb:f8:12:e5:49:b3: 60:c2:88:42:c4:58:92:7b:40:e9:c1:19:b4:bb:0b:d6:b7:b0: 1a:df:80:c4:cd:59:3c:d2:b4:4a:90:59:ac:de:71:f6:bf:da: e2:e5:b8:7b:55:c7:29:a0:46:9a:52:ea:50:09:49:3b:39:6b: 13:e2:e6:76:2d:d9:6b:6e:31:14:d4:e7:2a:2d:5c:66:c2:0f: 04:20:ed:2e:96:00:6b:57:e9:81:1b:35:c7:78:19:5e:f5:30: 4a:8e:02:28:25:c2:68:0e:6d:46:4b:8f:69:c1:9b:fb:ed:a7: 48:d8:a2:31:c6:31:2e:c4:3a:5d:78:05:a5:4e:43:55:9d:cc: 01:ac:d2:e0:22:1b:bf:67:e7:a7:dd:56:66:fe:a2:f3:11:87: 1e:75:98:ac:21:4f:13:0b:28:a5:d4:61:4d:46:34:a0:be:47: 4d:d6:bc:1d:92:0b:be:a2:58:3c:d1:6a:27:8f:33:26:48:23: 52:13:dc:a9:23:97:e0:da:68:71:d5:e7:72:03:70:6b:1e:03: 48:8f:4b:84:47:f8:56:d6:9a:37:9b:c9:1c:a0:c3:b6:1e:1b: ad:16:ba:e0:4a:cd:91:39:e4:bb:c2:9a:8f:c3:8b:46:8c:2e: 24:0d:96:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXRwR3oeLBHoyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk MDBlODQzZjEtYmY3Yi00M2NiLWI2YmItZjIzMmI0ZWQxZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtlZehZIp1c4ZUoKJOO4jaFXRbLYUWDqIarF VlsgLSwdP06Cg5eb4DQQj6bIp3B6Nl2RsV5PsPwvoTjpgwJxCVOArGKiF8fy0pjS l5mAXsno7OqzCOBm+mQLBqDLBRoq2klmnaOYsDVj68En6hkjSPTxvKSVs6IK7aCW XaUn+oa0mtn8EwUgq6TzwZi1n8PcaLcaN+QxoeOszEce0lPFPRQNLA7hBjR4WLgQ pBVZEDyNF4Y+3mlrWJS95Cu5StItUgP4WzjTb6rGok65EX31Z5GRsF88DdP/QtYX +GmyfbaIjyOr8yg9txX7qc+3LJkzWcUNIkNEsN0e1g4N4WzDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeTr+zt3i4OY3PZRfLs2knjqjQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDFhOGU1ZjYtMDBkMS0z MTBjLTk4MjYtNTRlZTBlZWExNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKIjIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv12gvz7Y938/7iIfv4EuVJs2DCiELEWJJ7QOnBGbS7C9a3sBrfgMTN WTzStEqQWazecfa/2uLluHtVxymgRppS6lAJSTs5axPi5nYt2WtuMRTU5yotXGbC DwQg7S6WAGtX6YEbNcd4GV71MEqOAiglwmgObUZLj2nBm/vtp0jYojHGMS7EOl14 BaVOQ1WdzAGs0uAiG79n56fdVmb+ovMRhx51mKwhTxMLKKXUYU1GNKC+R03WvB2S C76iWDzRaiePMyZII1IT3Kkjl+DaaHHV53IDcGseA0iPS4RH+FbWmjebyRygw7Ye G60WuuBKzZE55LvCmo/Di0aMLiQNlqU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:40 2025 by rpki-client