$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa File: 1e069c73-4292-3ffe-a143-d91bade4b8f5.roa (raw, json) Hash identifier: QTolAiw9oYt/O5UANrLt8q/nXuWESNsPZDCTBJHSOgM= Subject key identifier: 1A:12:E6:3E:8C:48:69:C6:58:72:30:EA:BA:6B:99:F1:90:BD:5D:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112369E871F7A8C8B3CFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.211.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:23:69:e8:71:f7:a8:c8:b3:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=485db17a-5851-4d2e-a8a5-3c3f0cd63b12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:60:f9:ad:f3:e2:c1:91:eb:06:12:9a:d7:5f: aa:4a:83:ee:8f:55:cc:ee:a3:52:75:9a:41:02:b5: 9b:7a:c2:51:2d:09:19:4a:d8:d7:27:d2:31:fa:83: 2c:36:4b:7b:72:e6:61:92:85:38:2b:2a:08:cc:10: c4:a0:35:e2:09:cf:ba:b4:f3:64:41:c1:61:be:bc: 7f:23:5d:5c:1f:a8:e2:2f:16:5f:c6:ad:30:ae:bc: 3f:6b:d9:45:72:14:9b:19:2c:f2:a8:bc:ae:e3:b5: ff:ef:c2:86:f4:69:12:18:8a:22:34:f7:28:c6:c4: 71:7a:4d:a9:76:49:22:ce:65:e7:87:cf:c3:03:8e: ee:24:fd:e1:81:61:6b:ec:a6:74:58:77:99:2f:ab: 28:17:3d:45:c5:d6:87:1d:28:69:bd:62:25:5b:92: 2f:e2:82:f3:bd:0e:84:98:6c:82:8e:c7:9f:e1:0a: 9f:a3:72:f5:83:be:16:4f:a1:13:06:6f:07:d3:55: ba:b9:a9:0d:4d:43:c5:20:0b:6c:57:25:b6:b2:f5: 78:24:9c:9e:38:9e:df:4f:7e:95:89:7d:ea:f3:61: 3f:19:2a:3e:58:ce:3a:55:35:83:a8:fc:b3:f1:8c: 92:93:ef:66:90:9d:18:df:a3:ce:b7:05:dd:3a:e8: e7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:12:E6:3E:8C:48:69:C6:58:72:30:EA:BA:6B:99:F1:90:BD:5D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1e069c73-4292-3ffe-a143-d91bade4b8f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.211.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:7a:65:da:db:66:97:99:2f:14:75:74:32:f8:c6:10:d8:26: e5:7f:d0:6c:aa:ba:9a:2d:19:8e:68:b7:5a:a0:1c:8b:1e:60: 4a:9e:56:56:a5:8b:31:5d:cc:0c:ef:48:4a:29:ba:f1:8e:f4: 74:e7:2b:7b:7d:1b:95:85:ea:20:dd:d7:bd:a4:89:fa:7b:72: 9a:fd:f7:03:85:bf:e5:e5:c9:89:fc:d6:e4:8d:dc:23:33:0b: 5e:68:17:ca:80:4c:27:7e:ae:92:83:08:f2:4b:42:e1:01:c1: 98:5a:9f:42:4b:31:9b:7b:e5:cc:40:5f:07:ae:d7:ce:68:5b: 46:f1:55:95:99:d2:7e:c1:e7:79:85:b3:f4:34:dd:ed:3a:23: f7:52:23:f4:b5:01:bf:b6:50:b4:bd:91:ed:4b:b1:db:8d:42: dc:f4:0e:a6:b6:a0:16:63:a9:59:45:62:9f:18:e9:c2:70:00: 5b:80:86:b8:e0:86:3c:b1:a5:f4:c6:11:b5:c6:b6:a1:5d:f8: 5d:d0:33:bf:21:bc:67:bb:95:12:87:19:56:ae:6e:71:5f:42: 8f:0d:92:75:7d:25:ef:dd:1f:b2:fa:f8:6a:1b:29:db:7c:a2: bd:f3:89:49:0d:8a:4a:d4:c9:01:20:1a:f3:56:b4:2c:56:e1: 37:0c:50:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESNp6HH3qMizz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDg1ZGIxN2EtNTg1MS00ZDJlLWE4YTUtM2MzZjBjZDYzYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GD5rfPiwZHrBhKa11+qSoPuj1XM7qNSdZpB ArWbesJRLQkZStjXJ9Ix+oMsNkt7cuZhkoU4KyoIzBDEoDXiCc+6tPNkQcFhvrx/ I11cH6jiLxZfxq0wrrw/a9lFchSbGSzyqLyu47X/78KG9GkSGIoiNPcoxsRxek2p dkkizmXnh8/DA47uJP3hgWFr7KZ0WHeZL6soFz1FxdaHHShpvWIlW5Iv4oLzvQ6E mGyCjsef4Qqfo3L1g74WT6ETBm8H01W6uakNTUPFIAtsVyW2svV4JJyeOJ7fT36V iX3q82E/GSo+WM46VTWDqPyz8YySk+9mkJ0Y36POtwXdOujnMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBoS5j6MSGnGWHIw6rprmfGQvV1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWUwNjljNzMtNDI5Mi0z ZmZlLWExNDMtZDkxYmFkZTRiOGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrdPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACR6ZdrbZpeZLxR1dDL4xhDYJuV/0GyqupotGY5ot1qgHIseYEqeVlal izFdzAzvSEopuvGO9HTnK3t9G5WF6iDd172kifp7cpr99wOFv+XlyYn81uSN3CMz C15oF8qATCd+rpKDCPJLQuEBwZhan0JLMZt75cxAXweu185oW0bxVZWZ0n7B53mF s/Q03e06I/dSI/S1Ab+2ULS9ke1LsduNQtz0Dqa2oBZjqVlFYp8Y6cJwAFuAhrjg hjyxpfTGEbXGtqFd+F3QM78hvGe7lRKHGVaubnFfQo8NknV9Je/dH7L6+GobKdt8 or3ziUkNikrUyQEgGvNWtCxW4TcMUNg= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:21 2025 by rpki-client