$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa File: 18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa (raw, json) Hash identifier: 6uSphLAu+TnBb14F7rk97JoyNG0OlOSeXXqFyvAgGKY= Subject key identifier: 8B:B6:CE:75:77:16:F2:1B:AB:8C:A0:C2:1E:C6:C2:6C:F9:D2:87:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA710327B3247380751BDCC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.30.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:03:27:b3:24:73:80:75:1b:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=29ad3f69-8054-498a-8a1c-2371cb21afd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a4:23:11:87:61:c0:10:cb:5d:c2:67:e8:e4: 65:f4:36:53:10:89:ae:3a:27:0c:d2:e1:63:a2:61: cc:e6:0d:1d:88:e8:e5:11:7a:c0:80:ca:5c:32:89: 6f:93:ad:92:5e:0b:54:df:32:3a:0c:97:fe:12:cf: b4:b1:10:79:34:fa:fd:76:5c:71:eb:38:79:90:ff: 3d:62:be:44:f8:87:79:2b:52:d5:3f:82:a4:97:3a: 5e:68:c7:e6:40:56:b6:10:bd:fb:1c:44:55:e3:27: 84:13:23:c0:bb:aa:99:8d:9a:10:fc:e4:1b:02:97: c0:ca:60:9b:ab:93:7c:79:85:21:27:37:bf:3b:3d: 63:e4:b4:cc:1b:2a:7c:14:a3:98:2d:64:02:c0:5f: 64:84:ea:ea:35:3e:13:9a:bd:62:00:4d:87:77:ac: 04:43:1d:30:55:f5:33:f2:a5:c1:8b:6d:0a:90:4f: 3e:38:b2:77:96:9d:b0:c9:1b:6b:5f:39:10:19:bb: d8:20:92:ba:45:a8:a9:ac:a8:b2:f0:3a:5b:ff:87: 7b:2f:1d:a0:b4:da:14:22:26:cc:77:6e:56:e0:b5: 6a:23:b1:07:3f:d7:9e:b5:97:cd:32:0d:1e:e1:c5: a4:6b:67:4a:91:8a:81:a1:84:a4:dc:68:f0:e5:a2: 3e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:B6:CE:75:77:16:F2:1B:AB:8C:A0:C2:1E:C6:C2:6C:F9:D2:87:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/18c0d28c-f6d2-330a-ab5d-18a92cd16106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:06:b8:1f:02:b1:65:11:6a:1c:55:46:83:05:45:59:35:fe: 17:26:c7:f2:5a:7d:80:97:67:80:3f:b6:42:29:35:46:98:f9: 38:fa:d3:f3:78:3b:04:67:a4:a1:f1:41:a9:06:ab:84:51:0e: 1b:3a:da:1f:03:11:26:8e:d4:62:9b:3f:44:bf:90:06:d0:44: f6:47:e8:35:d2:1b:2d:27:37:de:c7:66:9f:c7:97:55:c8:58: 5d:62:c0:44:c1:2b:f0:5f:27:db:ba:33:bd:d8:1a:5f:34:35: 4e:83:76:d0:91:b5:69:7f:a1:78:1c:1f:c8:32:c2:92:56:22: 4a:3a:5e:69:c1:f7:39:f9:ca:03:24:6d:cb:4a:9b:5e:ba:2f: 4a:a5:4e:5d:dc:93:a9:53:7c:d4:2f:10:ee:d3:e7:ce:d2:7b: fd:20:4e:23:6f:14:90:c3:60:59:11:f2:b7:c5:76:d6:45:6d: 08:29:96:33:f5:66:98:01:8f:21:95:3b:9c:df:2d:27:a6:fd: af:49:ce:83:03:48:dd:8d:ba:d9:2e:33:95:40:40:ca:f7:e6: 58:73:55:98:26:86:b5:75:3f:f5:25:a7:31:fe:5f:5b:43:5f: 8c:84:48:da:03:98:7a:90:43:c3:ff:0b:ac:fe:d1:a7:80:f3: eb:f0:42:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQMnsyRzgHUb3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk MjlhZDNmNjktODA1NC00OThhLThhMWMtMjM3MWNiMjFhZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKQjEYdhwBDLXcJn6ORl9DZTEImuOicM0uFj omHM5g0diOjlEXrAgMpcMolvk62SXgtU3zI6DJf+Es+0sRB5NPr9dlxx6zh5kP89 Yr5E+Id5K1LVP4KklzpeaMfmQFa2EL37HERV4yeEEyPAu6qZjZoQ/OQbApfAymCb q5N8eYUhJze/Oz1j5LTMGyp8FKOYLWQCwF9khOrqNT4Tmr1iAE2Hd6wEQx0wVfUz 8qXBi20KkE8+OLJ3lp2wyRtrXzkQGbvYIJK6RaiprKiy8Dpb/4d7Lx2gtNoUIibM d25W4LVqI7EHP9eetZfNMg0e4cWka2dKkYqBoYSk3Gjw5aI+jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIu2znV3FvIbq4ygwh7Gwmz50odOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMThjMGQyOGMtZjZkMi0z MzBhLWFiNWQtMThhOTJjZDE2MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsGuB8CsWURahxVRoMFRVk1/hcmx/JafYCXZ4A/tkIpNUaY+Tj60/N4 OwRnpKHxQakGq4RRDhs62h8DESaO1GKbP0S/kAbQRPZH6DXSGy0nN97HZp/Hl1XI WF1iwETBK/BfJ9u6M73YGl80NU6DdtCRtWl/oXgcH8gywpJWIko6XmnB9zn5ygMk bctKm166L0qlTl3ck6lTfNQvEO7T587Se/0gTiNvFJDDYFkR8rfFdtZFbQgpljP1 ZpgBjyGVO5zfLSem/a9JzoMDSN2NutkuM5VAQMr35lhzVZgmhrV1P/UlpzH+X1tD X4yESNoDmHqQQ8P/C6z+0aeA8+vwQk8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:02 2025 by rpki-client