$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17bebcfd-9776-3879-95a9-84164bb50deb.roa File: 17bebcfd-9776-3879-95a9-84164bb50deb.roa (raw, json) Hash identifier: zqRCmp4qB+PXB8AKJ3DP+VG2sWQOxHA2RtqYppdVaKo= Subject key identifier: A4:BC:5E:E1:0B:BF:9E:FF:48:21:8A:F0:AC:D8:54:87:9D:16:E9:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EF4CCC4FA266D0324CC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17bebcfd-9776-3879-95a9-84164bb50deb.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.29.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ef:4c:cc:4f:a2:66:d0:32:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1dde2132-9d85-4caf-8e04-9905603ca946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d8:06:23:b2:60:b9:56:fa:77:1c:04:7f:5e: 58:e4:b7:88:85:61:8e:80:cd:13:4f:22:64:93:64: b4:97:a0:12:78:5c:ab:7c:17:42:46:94:e2:d6:82: 30:a0:b9:68:c9:76:65:9e:2a:68:2d:75:61:28:5b: d1:ff:60:14:17:3f:03:dc:10:e5:91:25:99:77:e2: 06:af:e4:26:96:04:e8:de:6d:81:47:02:27:23:fd: ba:74:e1:95:85:c7:33:2a:02:4c:7f:b4:b4:1a:e6: ef:c5:6f:c3:4c:2c:fc:77:a7:56:60:82:35:10:21: 8f:f3:3c:2a:79:36:a0:5b:d6:07:9e:ff:41:bc:d4: d9:ff:37:5c:ae:ea:58:6d:3d:fd:58:b4:82:98:d7: 13:ed:8c:c8:c9:26:f9:88:33:00:55:64:7b:de:6c: 37:3b:3b:14:67:5b:2f:5b:ff:53:a9:a6:80:c6:36: 20:96:6c:45:6a:fb:75:96:ef:d1:8a:cf:83:64:9f: d6:81:ea:89:f7:69:20:01:17:d3:9f:c4:57:59:21: 25:7a:80:24:ca:11:1c:7d:12:c2:63:95:81:79:21: 5f:49:fe:5a:d5:83:3e:62:f2:0b:fa:bb:20:0d:be: 9b:ee:f0:07:fa:34:61:02:b1:f7:c3:43:bb:90:d7: 9f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:BC:5E:E1:0B:BF:9E:FF:48:21:8A:F0:AC:D8:54:87:9D:16:E9:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/17bebcfd-9776-3879-95a9-84164bb50deb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:db:a5:1c:89:d9:7d:60:2d:d8:fc:ff:e4:81:70:23:6d:d6: 20:99:ba:85:1f:8c:27:80:32:14:82:96:55:10:1f:5b:99:85: 6b:8f:08:83:c1:f7:cd:75:02:58:56:46:9c:c7:6d:75:5a:28: 2a:3c:ae:97:b9:9c:13:cd:4e:ec:7e:7c:e8:91:4f:08:7c:70: a9:f9:12:dd:83:a2:48:53:a6:f2:40:00:05:f8:de:95:25:00: 24:f7:2b:e6:17:ec:04:07:2f:3d:40:dd:12:10:54:87:05:73: 12:15:86:3f:f3:c0:0c:8c:d8:6f:e9:39:8d:a9:2d:a2:c8:c5: 44:96:f2:f0:97:eb:33:8c:bd:28:84:be:37:db:2f:0a:6a:e8: 7d:84:29:71:89:cb:de:46:69:47:e7:00:a4:f9:a8:1c:b5:68: f6:04:ee:41:4d:71:b3:59:70:4c:66:9f:49:fc:9d:16:0f:d6: 22:1b:fd:60:ae:44:58:78:81:52:e8:f6:35:c9:37:1a:25:06: d7:b1:ed:db:39:a8:91:48:d7:8b:11:b7:69:b5:d2:e6:44:28: 47:e9:88:f9:86:aa:15:e8:bd:66:7c:7b:75:9f:fc:d0:75:ca: 36:52:16:73:ae:f3:6d:cc:ef:6c:2e:65:2e:91:e1:1c:e7:63: 44:01:ad:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO9MzE+iZtAyTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWRkZTIxMzItOWQ4NS00Y2FmLThlMDQtOTkwNTYwM2NhOTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdgGI7JguVb6dxwEf15Y5LeIhWGOgM0TTyJk k2S0l6ASeFyrfBdCRpTi1oIwoLloyXZlnipoLXVhKFvR/2AUFz8D3BDlkSWZd+IG r+QmlgTo3m2BRwInI/26dOGVhcczKgJMf7S0GubvxW/DTCz8d6dWYII1ECGP8zwq eTagW9YHnv9BvNTZ/zdcrupYbT39WLSCmNcT7YzIySb5iDMAVWR73mw3OzsUZ1sv W/9TqaaAxjYglmxFavt1lu/Ris+DZJ/WgeqJ92kgARfTn8RXWSEleoAkyhEcfRLC Y5WBeSFfSf5a1YM+YvIL+rsgDb6b7vAH+jRhArH3w0O7kNefVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS8XuELv57/SCGK8KzYVIedFukEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTdiZWJjZmQtOTc3Ni0z ODc5LTk1YTktODQxNjRiYjUwZGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3bpRyJ2X1gLdj8/+SBcCNt1iCZuoUfjCeAMhSCllUQH1uZhWuPCIPB 9811AlhWRpzHbXVaKCo8rpe5nBPNTux+fOiRTwh8cKn5Et2DokhTpvJAAAX43pUl ACT3K+YX7AQHLz1A3RIQVIcFcxIVhj/zwAyM2G/pOY2pLaLIxUSW8vCX6zOMvSiE vjfbLwpq6H2EKXGJy95GaUfnAKT5qBy1aPYE7kFNcbNZcExmn0n8nRYP1iIb/WCu RFh4gVLo9jXJNxolBtex7ds5qJFI14sRt2m10uZEKEfpiPmGqhXovWZ8e3Wf/NB1 yjZSFnOu823M72wuZS6R4RznY0QBrWA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:18 2025 by rpki-client