$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa File: 03553546-6243-34d9-8a02-d58e1b7c7b0e.roa (raw, json) Hash identifier: YnkxR41R9MIYCW8/p6tB8slnt04S9m1HZhYyWy3ilhU= Subject key identifier: 8C:DD:DA:53:6C:27:28:95:93:63:DA:2C:1D:A8:D6:08:45:55:25:44 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EE8A3704095000E13680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ee:8a:37:04:09:50:00:e1:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f0306fae-5a63-45d9-8dfa-339824f8054d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:16:69:bb:01:98:8f:fc:05:ed:2c:27:b7: ac:1a:a2:4d:9a:cc:1a:ab:5a:72:9f:1f:c9:96:ff: c8:82:61:87:eb:86:c5:2a:8c:e5:4a:ba:42:11:85: 46:b7:fe:2e:e0:d1:0f:17:14:28:a1:81:37:95:b9: 72:6c:d2:72:2b:58:74:c9:e1:84:89:20:d1:40:9f: c4:a7:a9:d8:4a:88:d6:9e:4e:b0:62:05:13:ef:f3: db:49:2c:c9:2d:bc:0d:16:45:64:5e:ae:d6:9c:00: 7b:93:f1:76:c1:56:59:7a:e1:65:67:d0:27:e2:10: c3:97:0b:a2:4a:ce:df:a2:b2:41:57:90:2c:7f:2d: fd:e3:60:9b:2e:a7:da:8e:fe:74:ab:ea:e4:53:3f: 43:5c:e1:e9:5f:d2:eb:8f:8e:85:b0:95:2e:ed:f0: a8:6d:49:cd:53:e5:10:18:af:b8:2d:50:d5:b0:cb: dd:70:af:94:ea:49:ac:dc:3d:1d:74:a4:6d:0a:dd: e5:46:3f:1e:69:2d:e9:66:4d:b5:c1:39:ba:c0:4c: 3d:ca:cf:9e:f5:43:34:9f:af:f2:66:d3:bf:63:ef: de:29:66:c1:51:ba:40:98:b5:e8:85:eb:04:5d:51: 71:3e:86:69:30:8a:13:3e:0a:13:23:e8:06:51:32: 43:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DD:DA:53:6C:27:28:95:93:63:DA:2C:1D:A8:D6:08:45:55:25:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03553546-6243-34d9-8a02-d58e1b7c7b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:7c:55:cf:1e:77:c8:08:c6:e9:47:ed:df:66:99:87:be:23: 08:aa:55:b2:95:ff:c7:ef:e2:f9:3a:79:f6:c3:70:79:3d:78: 71:c6:48:2f:3d:e4:24:a9:66:89:e1:5f:14:47:34:82:2b:68: 8f:f6:d7:5f:19:02:cb:3c:53:86:10:3b:91:0e:88:ff:9e:65: 02:db:ad:e7:c1:ad:bd:87:a9:86:0b:84:d3:e5:83:47:4d:13: 45:d0:6e:44:46:bc:bb:57:fb:0e:e2:82:59:15:8e:58:8a:87: c9:c4:88:d7:ee:e7:de:ff:cd:df:8f:df:a8:8d:e1:0d:31:33: f8:61:28:7e:25:a0:3f:67:3c:e2:1d:69:aa:d1:da:9a:ca:54: 3d:38:31:fe:5c:28:06:02:67:7b:ba:f3:98:77:e3:28:a4:a0: da:ad:b2:61:05:86:68:19:c0:2c:48:f4:4f:7b:d6:14:74:00: 4a:d0:1d:08:33:a6:96:68:e2:fc:50:f6:7c:64:c8:62:15:96: d2:8a:c8:34:69:35:dc:e2:88:53:4b:c3:53:36:9e:cd:16:8c: 5f:dd:b2:e6:2a:13:3b:cc:16:04:4f:93:7c:f6:47:e5:96:26: 24:5c:f2:56:49:c5:a7:0c:9a:1e:34:d7:e9:ba:5d:ae:a8:0c: 5b:bf:20:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO6KNwQJUADhNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjAzMDZmYWUtNWE2My00NWQ5LThkZmEtMzM5ODI0ZjgwNTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo60WabsBmI/8Be0sJ7esGqJNmswaq1pynx/J lv/IgmGH64bFKozlSrpCEYVGt/4u4NEPFxQooYE3lblybNJyK1h0yeGEiSDRQJ/E p6nYSojWnk6wYgUT7/PbSSzJLbwNFkVkXq7WnAB7k/F2wVZZeuFlZ9An4hDDlwui Ss7forJBV5Asfy3942CbLqfajv50q+rkUz9DXOHpX9Lrj46FsJUu7fCobUnNU+UQ GK+4LVDVsMvdcK+U6kms3D0ddKRtCt3lRj8eaS3pZk21wTm6wEw9ys+e9UM0n6/y ZtO/Y+/eKWbBUbpAmLXohesEXVFxPoZpMIoTPgoTI+gGUTJDSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzd2lNsJyiVk2PaLB2o1ghFVSVEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDM1NTM1NDYtNjI0My0z NGQ5LThhMDItZDU4ZTFiN2M3YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACB8Vc8ed8gIxulH7d9mmYe+IwiqVbKV/8fv4vk6efbDcHk9eHHGSC89 5CSpZonhXxRHNIIraI/2118ZAss8U4YQO5EOiP+eZQLbrefBrb2HqYYLhNPlg0dN E0XQbkRGvLtX+w7iglkVjliKh8nEiNfu597/zd+P36iN4Q0xM/hhKH4loD9nPOId aarR2prKVD04Mf5cKAYCZ3u685h34yikoNqtsmEFhmgZwCxI9E971hR0AErQHQgz ppZo4vxQ9nxkyGIVltKKyDRpNdziiFNLw1M2ns0WjF/dsuYqEzvMFgRPk3z2R+WW JiRc8lZJxacMmh401+m6Xa6oDFu/IN0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:56 2025 by rpki-client