$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa File: 107092d7-9026-31fd-802e-0afd0de7f5db.roa (raw, json) Hash identifier: 4ukCGSWwmW4bdtGxPhWZAlgukLq3TREAQA24b+NvW4M= Subject key identifier: 2A:BB:51:F2:89:14:15:83:A2:71:29:0B:5D:6A:61:E9:D6:5E:27:43 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112495B610E7A1E7EDF780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 2001:19b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:24:95:b6:10:e7:a1:e7:ed:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=cf22b4b1-b608-4832-a560-4845b302fa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f9:dc:70:72:88:bc:89:86:1d:d8:16:19:96: c1:a2:af:d2:1d:24:51:55:d0:ab:80:f1:b2:80:5d: 3f:4c:26:1e:1e:9b:7f:a9:1c:95:2d:ed:48:95:4e: 5d:38:54:01:af:e5:8f:7d:3c:bb:85:0d:3a:c2:89: cd:50:ca:34:82:a4:f1:1f:bf:91:28:d0:55:0c:2a: ea:ed:4a:2c:99:72:17:cb:47:e7:ff:10:6d:5c:8b: f9:cb:49:bc:a1:2f:98:8f:90:ef:cf:e7:f0:e2:da: a7:9a:69:cb:86:3c:2f:b9:e1:7a:63:cd:99:93:bc: 5a:a0:e2:14:05:1c:8a:33:6b:1f:41:13:ff:a1:12: 9c:78:9d:86:38:03:f9:58:91:e4:c2:b5:91:f0:07: a8:b0:84:6e:ed:49:7a:2b:fd:e7:42:8f:95:6d:0d: 87:36:32:0e:13:a3:ec:9b:ca:4b:71:de:75:ac:8a: 9f:af:00:a0:7c:7c:60:49:7a:c3:ef:a1:0c:d6:b5: 48:47:ae:c8:fd:99:d9:89:41:25:81:9d:89:c8:dc: 96:1c:62:76:a2:84:7c:07:6f:ab:47:f1:44:41:6f: 7a:d3:0d:ea:4a:5f:ca:f0:de:d3:57:19:ad:f8:31: 72:7d:2c:4f:f1:fb:4a:48:3d:c2:3b:0f:d1:ba:28: b1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BB:51:F2:89:14:15:83:A2:71:29:0B:5D:6A:61:E9:D6:5E:27:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/107092d7-9026-31fd-802e-0afd0de7f5db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv6: 2001:19b0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:81:78:d5:1e:9e:46:5b:df:41:f9:38:57:4b:50:7f:88:95: ae:b6:78:d6:de:c7:e3:25:21:b5:82:19:3b:9e:3d:cb:ca:cc: 46:89:de:66:26:24:a9:6c:f6:0d:ff:59:d2:0a:30:6c:34:89: e6:07:7c:d4:4c:2e:62:9e:dc:ee:ba:d7:29:d3:d5:df:89:f2: c0:09:5c:73:d2:9e:4c:e8:4d:5a:d3:b5:ed:3b:ee:d0:c0:6d: 04:23:8f:ac:4a:e1:07:00:9e:d5:39:a2:5e:86:4e:40:48:1a: aa:8a:38:56:b9:ea:80:65:a2:1f:9a:1a:e1:83:ca:8d:74:af: 9d:4f:9b:87:ec:09:ac:1c:13:be:6b:9d:5c:fc:98:87:e9:08: b9:c2:e5:d9:34:2e:ce:ac:f0:35:97:bc:c5:3a:77:50:06:4b: 4b:4e:42:6a:f8:67:51:e4:6e:fa:de:56:8f:9b:92:e6:a5:18: 80:ce:de:bc:4f:20:7c:74:e5:a2:04:4d:96:38:ec:e8:ab:2c: ab:44:b3:8f:01:e6:c6:b5:82:e7:c2:33:55:c2:f7:0f:7d:72: 78:48:ce:91:bd:e8:61:fb:23:fe:2a:b6:ee:5d:a4:f7:36:da: ec:2b:72:3c:f5:ec:8b:b8:32:3d:31:f0:2c:ef:00:a1:35:c1: 73:35:8b:f5 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEjSESSVthDnoeft94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2YyMmI0YjEtYjYwOC00ODMyLWE1NjAtNDg0NWIzMDJmYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPnccHKIvImGHdgWGZbBoq/SHSRRVdCrgPGy gF0/TCYeHpt/qRyVLe1IlU5dOFQBr+WPfTy7hQ06wonNUMo0gqTxH7+RKNBVDCrq 7UosmXIXy0fn/xBtXIv5y0m8oS+Yj5Dvz+fw4tqnmmnLhjwvueF6Y82Zk7xaoOIU BRyKM2sfQRP/oRKceJ2GOAP5WJHkwrWR8AeosIRu7Ul6K/3nQo+VbQ2HNjIOE6Ps m8pLcd51rIqfrwCgfHxgSXrD76EM1rVIR67I/ZnZiUElgZ2JyNyWHGJ2ooR8B2+r R/FEQW960w3qSl/K8N7TVxmt+DFyfSxP8ftKSD3COw/RuiixzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCq7UfKJFBWDonEpC11qYenWXidDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA3MDkyZDctOTAyNi0z MWZkLTgwMmUtMGFmZDBkZTdmNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAEZsDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBGgXjVHp5GW99B+ThXS1B/iJWutnjW3sfjJSG1ghk7nj3LysxGid5m JiSpbPYN/1nSCjBsNInmB3zUTC5intzuutcp09XfifLACVxz0p5M6E1a07XtO+7Q wG0EI4+sSuEHAJ7VOaJehk5ASBqqijhWueqAZaIfmhrhg8qNdK+dT5uH7AmsHBO+ a51c/JiH6Qi5wuXZNC7OrPA1l7zFOndQBktLTkJq+GdR5G763laPm5LmpRiAzt68 TyB8dOWiBE2WOOzoqyyrRLOPAebGtYLnwjNVwvcPfXJ4SM6Rvehh+yP+KrbuXaT3 NtrsK3I89eyLuDI9MfAs7wChNcFzNYv1 -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:25 2025 by rpki-client