$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa File: 0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa (raw, json) Hash identifier: JQgPtaYd3xZr7WUhjvi2tGt1BE2547mJHrFq2P3jqEk= Subject key identifier: 3F:7F:51:C6:A2:D1:90:9F:13:42:96:E5:09:D4:7F:35:C2:56:B8:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB57760B2BE5080F89C7240 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 72.16.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:77:60:b2:be:50:80:f8:9c:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=7432fc4d-853b-474d-98ce-849fdb7d6c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:98:a7:79:24:f1:00:74:1b:92:92:5f:d0:40: 17:17:a2:e8:2d:f5:33:f1:6d:4c:bd:85:5f:06:7e: e0:d8:09:d2:12:6c:d1:6f:0c:97:7c:66:a9:e1:89: 6e:39:af:3d:6d:e6:2b:48:65:39:21:bf:e4:6a:e9: 9f:73:c5:73:94:c2:90:38:79:4b:d0:a2:d6:b5:7b: 67:ea:e6:6f:a5:a6:26:0d:3f:b2:c3:ad:73:19:b7: b3:a5:e2:fa:52:da:c1:6b:6a:3f:19:8d:c5:5d:d6: be:68:f4:76:5d:a7:4f:62:64:ee:d8:a2:3b:a4:0e: 40:52:cd:b0:14:76:d0:dc:61:a8:7e:33:c3:fa:4f: 70:3b:e5:2e:c5:6c:95:ba:fd:b2:3e:5f:ba:e2:8b: 05:06:55:fb:11:8a:01:02:bf:49:c2:01:07:ad:ff: ec:1f:cd:c8:22:2e:36:af:6e:4a:1a:c8:6e:f5:97: b2:bd:f8:80:9b:b9:3a:46:20:2c:fd:bc:e2:de:60: 25:27:3f:9f:2d:e8:35:1a:5e:0e:96:ac:9e:ce:dd: 42:c0:0a:f5:1f:72:78:36:3c:8d:02:ee:3a:21:c5: 8d:47:6f:78:cb:39:94:21:92:a1:cc:04:00:ba:c1: 81:80:45:a1:af:33:ee:9c:09:2b:9a:5c:ce:e1:c4: cf:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7F:51:C6:A2:D1:90:9F:13:42:96:E5:09:D4:7F:35:C2:56:B8:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0c85b536-e8b5-3a6b-95b1-8fa3f16831bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.16.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:3f:59:be:07:3a:1a:fa:51:ce:c2:fb:9c:66:b8:5e:f7:ac: ec:85:84:41:07:cf:9a:d0:83:97:10:50:9f:23:5b:f2:85:d4: 6d:69:57:7e:13:b0:9f:44:0d:7f:4f:ed:5a:ae:fd:2f:35:ab: e7:ce:fc:92:0a:ae:12:93:0d:71:ee:85:ed:90:4d:2b:06:56: 01:db:89:2f:10:f9:55:da:7f:17:c4:81:42:4f:a2:a0:26:ad: e7:68:14:34:31:78:a2:71:a2:10:4c:6d:35:c3:5e:a7:e3:a6: 57:bf:ec:d0:27:5d:36:20:1c:c9:f9:ed:cd:48:f4:c2:98:bc: c6:6b:4a:20:b9:50:e1:29:23:84:93:8d:9c:03:58:78:7a:f1: cd:3e:e9:d4:01:66:52:88:ae:91:e4:ea:da:6a:54:d6:17:19: 83:69:2f:f5:5b:c6:52:91:c1:02:e0:3a:28:62:ec:d8:c2:00: 7c:e0:c0:11:54:ce:4d:7d:ac:8a:62:89:36:13:85:71:76:45: 3d:3d:f1:2a:a4:f2:ad:54:3b:be:e8:9a:97:b9:e6:3e:bf:ed: 91:00:9f:bb:83:80:02:21:a6:f5:6d:83:d1:2f:44:0e:ec:2d: 1d:17:80:6a:5d:d8:3a:1d:cf:86:ea:da:b8:bf:c5:e8:d9:b3: cf:f9:c5:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXdgsr5QgPicckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk NzQzMmZjNGQtODUzYi00NzRkLTk4Y2UtODQ5ZmRiN2Q2YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpineSTxAHQbkpJf0EAXF6LoLfUz8W1MvYVf Bn7g2AnSEmzRbwyXfGap4YluOa89beYrSGU5Ib/kaumfc8VzlMKQOHlL0KLWtXtn 6uZvpaYmDT+yw61zGbezpeL6UtrBa2o/GY3FXda+aPR2XadPYmTu2KI7pA5AUs2w FHbQ3GGofjPD+k9wO+UuxWyVuv2yPl+64osFBlX7EYoBAr9JwgEHrf/sH83IIi42 r25KGshu9ZeyvfiAm7k6RiAs/bzi3mAlJz+fLeg1Gl4Olqyezt1CwAr1H3J4NjyN Au46IcWNR294yzmUIZKhzAQAusGBgEWhrzPunAkrmlzO4cTPswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD9/Ucai0ZCfE0KW5QnUfzXCVrgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGM4NWI1MzYtZThiNS0z YTZiLTk1YjEtOGZhM2YxNjgzMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSBAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM/Wb4HOhr6Uc7C+5xmuF73rOyFhEEHz5rQg5cQUJ8jW/KF1G1pV34T sJ9EDX9P7Vqu/S81q+fO/JIKrhKTDXHuhe2QTSsGVgHbiS8Q+VXafxfEgUJPoqAm redoFDQxeKJxohBMbTXDXqfjple/7NAnXTYgHMn57c1I9MKYvMZrSiC5UOEpI4ST jZwDWHh68c0+6dQBZlKIrpHk6tpqVNYXGYNpL/VbxlKRwQLgOihi7NjCAHzgwBFU zk19rIpiiTYThXF2RT098Sqk8q1UO77ompe55j6/7ZEAn7uDgAIhpvVtg9EvRA7s LR0XgGpd2Dodz4bq2ri/xejZs8/5xck= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:21 2025 by rpki-client