$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11b00434-81a4-382a-9cb6-43a1635c769b.roa File: 11b00434-81a4-382a-9cb6-43a1635c769b.roa (raw, json) Hash identifier: eCQuc9aOGsnsreUNr363TpHuPe39mXKc+Csxl+HGkZY= Subject key identifier: F8:CF:41:32:9C:17:FA:56:97:20:67:B3:36:F1:B8:0D:8C:C6:73:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584898D616C1EEFC6A433D114C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11b00434-81a4-382a-9cb6-43a1635c769b.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.185.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:16:c1:ee:fc:6a:43:3d:11:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=1114c396-ef36-450f-97ab-52ef88fddb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:32:70:3a:ec:25:67:cd:e7:1c:7e:00:34:83: f3:5c:bb:f8:72:f5:f6:e0:9c:c8:7c:f0:90:46:ad: 6d:d0:68:31:9a:b6:76:a1:a5:49:de:f5:8a:9c:54: 2d:4f:fb:66:94:6c:14:3b:08:22:d1:b8:c7:45:57: c7:b9:85:11:0b:6e:fc:a0:cf:dd:90:4f:94:dd:71: c1:99:6d:41:d8:38:d1:6e:aa:38:99:d1:73:cb:42: 20:6c:8f:5f:6f:69:c3:82:41:17:45:2a:b0:3a:23: 49:57:12:2c:54:34:08:67:46:66:8c:c3:0a:cb:ba: a9:81:a2:7f:ea:f4:8a:41:a4:52:f4:0f:a7:6d:17: 17:b7:e3:c9:84:8e:1e:1d:f6:14:f7:9b:5b:e3:4d: a2:bb:a9:46:b9:f8:6a:83:b7:fe:38:02:4b:cf:44: 75:6e:c3:9d:bd:67:98:7a:8d:92:45:00:0d:81:72: a4:f4:27:65:c4:06:d5:4d:09:96:99:01:af:73:3d: 3e:6f:a8:3d:d6:50:73:a5:8b:96:3d:95:e3:eb:11: ce:79:58:5a:6a:46:e3:fd:89:2c:78:b6:0b:93:a9: 51:5e:45:45:2f:4c:1c:a8:a9:c4:a2:75:b8:d7:1c: b3:9a:d2:78:b1:77:5d:92:c5:a1:ec:74:ca:92:8e: f3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:CF:41:32:9C:17:FA:56:97:20:67:B3:36:F1:B8:0D:8C:C6:73:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11b00434-81a4-382a-9cb6-43a1635c769b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:9b:94:8e:89:d9:12:59:9d:a0:e5:01:3e:b2:6a:ce:1f:62: f5:bc:9f:ee:47:f4:e3:c6:c6:c2:83:1c:bb:f3:0c:b5:af:c2: 96:fb:79:24:e5:fd:bd:a7:6f:62:6c:84:01:3b:39:da:b4:11: 37:9a:bc:1f:eb:48:1c:fc:b0:80:04:85:49:5a:32:bf:f7:5c: 44:93:d4:a9:53:47:58:fd:7e:5a:bd:8a:13:2a:4d:da:2d:fd: c2:1e:bc:4c:c4:9b:3c:b7:21:ef:02:24:23:f0:22:5b:6c:96: 08:bc:bb:3e:14:f5:ee:80:0c:6e:a8:a2:11:c6:a0:32:fc:90: 5e:14:dd:c7:92:a8:24:34:9a:4f:6b:7c:c9:2e:5c:84:ee:f3: f6:55:5a:0c:52:97:ab:b9:af:6d:61:89:5e:30:bb:1a:76:73: ac:10:d7:ae:ce:27:13:0a:85:39:6a:fa:30:a4:3e:92:79:6f: 64:30:65:ac:7c:87:43:5a:65:f9:c6:4a:21:d1:ee:07:e9:a9: 4f:1f:48:ce:31:30:73:ca:be:1b:37:b5:7b:03:95:4c:f7:e4: 68:40:bc:4d:94:00:cb:1e:7e:31:af:02:a7:d2:8f:cc:e6:f3: 6b:a5:1a:a5:37:b7:ea:1f:1b:33:35:0d:ca:60:cb:5a:d8:f1: cd:f1:cf:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1hbB7vxqQz0RTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk MTExNGMzOTYtZWYzNi00NTBmLTk3YWItNTJlZjg4ZmRkYjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzJwOuwlZ83nHH4ANIPzXLv4cvX24JzIfPCQ Rq1t0GgxmrZ2oaVJ3vWKnFQtT/tmlGwUOwgi0bjHRVfHuYURC278oM/dkE+U3XHB mW1B2DjRbqo4mdFzy0IgbI9fb2nDgkEXRSqwOiNJVxIsVDQIZ0ZmjMMKy7qpgaJ/ 6vSKQaRS9A+nbRcXt+PJhI4eHfYU95tb402iu6lGufhqg7f+OAJLz0R1bsOdvWeY eo2SRQANgXKk9CdlxAbVTQmWmQGvcz0+b6g91lBzpYuWPZXj6xHOeVhaakbj/Yks eLYLk6lRXkVFL0wcqKnEonW41xyzmtJ4sXddksWh7HTKko7zGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjPQTKcF/pWlyBnszbxuA2MxnMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTFiMDA0MzQtODFhNC0z ODJhLTljYjYtNDNhMTYzNWM3NjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErblAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiblI6J2RJZnaDlAT6yas4fYvW8n+5H9OPGxsKDHLvzDLWvwpb7eSTl /b2nb2JshAE7Odq0ETeavB/rSBz8sIAEhUlaMr/3XEST1KlTR1j9flq9ihMqTdot /cIevEzEmzy3Ie8CJCPwIltslgi8uz4U9e6ADG6oohHGoDL8kF4U3ceSqCQ0mk9r fMkuXITu8/ZVWgxSl6u5r21hiV4wuxp2c6wQ167OJxMKhTlq+jCkPpJ5b2QwZax8 h0NaZfnGSiHR7gfpqU8fSM4xMHPKvhs3tXsDlUz35GhAvE2UAMsefjGvAqfSj8zm 82ulGqU3t+ofGzM1Dcpgy1rY8c3xz0c= -----END CERTIFICATE-----Generated at Fri Mar 14 10:32:01 2025 by rpki-client