$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d2ed64-4dca-3052-806a-aeb61c712d28.roa File: 20d2ed64-4dca-3052-806a-aeb61c712d28.roa (raw, json) Hash identifier: uc/IvhkvkCBmMn4xtawNmiVF0iXybmmPwl2W5e94N18= Subject key identifier: 1E:17:72:4F:00:1A:63:F0:F5:5A:33:A8:0D:10:AF:56:12:6E:77:13 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB575136DD3ADE355DB1C40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d2ed64-4dca-3052-806a-aeb61c712d28.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.30.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:75:13:6d:d3:ad:e3:55:db:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=ea050c8d-0f12-4c6f-831a-a33c06e2bd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f8:c5:89:9b:b1:79:ca:9f:ef:f0:7f:e9:c8: 76:3d:76:8a:a8:de:c4:a5:b2:6f:75:d7:82:69:a6: dd:77:93:3b:3b:dd:59:5f:83:d1:46:11:e0:f0:0f: 27:18:da:08:03:dc:5a:cf:d4:75:74:84:74:a1:83: 3c:c3:e4:fd:34:4e:1d:2a:92:70:1f:13:a0:ff:dc: 52:e1:05:70:b0:c0:4a:73:41:70:6a:b7:65:80:e1: cd:c1:25:1e:12:20:a9:bd:08:d1:cf:ce:1d:d4:5b: a2:49:04:98:98:3a:3a:0b:51:4b:92:9f:1d:b5:a7: 6f:68:3c:a3:5c:c2:5f:ff:88:bd:6b:1f:5d:7a:6b: b9:b6:84:1c:ce:b6:31:95:ed:35:0f:dc:d0:41:f6: 8d:3a:cb:72:0b:83:a6:57:2c:66:10:0c:61:21:7d: 38:ab:37:30:6e:cf:21:52:05:e8:0e:ba:34:c9:b5: dc:a1:5b:b0:d6:c0:ef:70:5f:09:a2:db:59:1a:e7: 60:de:58:fd:c9:53:d4:f1:5d:b4:04:a9:06:41:3e: 2a:8d:c0:7c:77:f0:4b:e0:fb:b0:7f:44:24:1a:9d: ea:90:38:e4:a1:27:9d:8b:a4:97:a9:bd:17:b1:86: d5:d5:7a:41:8d:94:b0:a1:89:34:34:50:00:54:89: 84:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:17:72:4F:00:1A:63:F0:F5:5A:33:A8:0D:10:AF:56:12:6E:77:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20d2ed64-4dca-3052-806a-aeb61c712d28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.30.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c3:fc:58:0b:cb:02:92:6f:53:34:7f:9c:66:04:ee:da:8c: 61:29:a2:7f:9b:93:23:fb:da:22:e9:5d:7a:d3:ca:ee:a1:85: ff:dc:77:4e:6b:cb:3f:e8:dd:96:97:5a:35:d9:7c:6e:93:d5: 1a:0d:36:34:79:0e:6c:74:de:3a:77:0c:cb:32:86:53:c7:66: a8:7b:59:68:eb:0a:08:f4:42:e6:4d:6f:0a:05:1d:ab:0a:c4: bd:37:07:c1:28:63:19:5a:b7:c9:a6:7c:16:fd:f3:bd:ec:4a: 7f:f3:f1:56:61:08:0e:26:f5:3b:36:67:e8:7d:ac:c3:34:a2: ff:71:1f:ca:a0:2e:96:db:d3:ba:59:de:23:bc:c5:4e:ca:fd: fa:52:40:ce:8f:7b:55:c1:b6:77:58:37:1e:81:eb:d2:18:35: 52:9e:a8:f5:c4:91:01:12:b2:01:32:49:28:26:50:95:c8:7a: 80:0e:e9:7e:b7:4d:bb:27:e5:5d:35:1e:f0:e4:da:9b:33:44: 5e:a3:7d:01:6c:37:c0:31:9d:7e:30:7f:df:44:b7:72:3a:f3: 15:fb:b1:28:2d:bc:97:a3:b6:64:ad:39:63:2d:05:1b:c8:2e: a0:09:be:2e:f2:f1:ed:34:be:04:b2:b1:41:7e:ad:04:fd:44: 51:d0:78:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXUTbdOt41XbHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk ZWEwNTBjOGQtMGYxMi00YzZmLTgzMWEtYTMzYzA2ZTJiZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofjFiZuxecqf7/B/6ch2PXaKqN7EpbJvddeC aabdd5M7O91ZX4PRRhHg8A8nGNoIA9xaz9R1dIR0oYM8w+T9NE4dKpJwHxOg/9xS 4QVwsMBKc0FwardlgOHNwSUeEiCpvQjRz84d1FuiSQSYmDo6C1FLkp8dtadvaDyj XMJf/4i9ax9demu5toQczrYxle01D9zQQfaNOstyC4OmVyxmEAxhIX04qzcwbs8h UgXoDro0ybXcoVuw1sDvcF8JottZGudg3lj9yVPU8V20BKkGQT4qjcB8d/BL4Puw f0QkGp3qkDjkoSedi6SXqb0XsYbV1XpBjZSwoYk0NFAAVImE1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4Xck8AGmPw9VozqA0Qr1YSbncTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjBkMmVkNjQtNGRjYS0z MDUyLTgwNmEtYWViNjFjNzEyZDI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRR64MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDD/FgLywKSb1M0f5xmBO7ajGEpon+bkyP72iLpXXrTyu6hhf/cd05r yz/o3ZaXWjXZfG6T1RoNNjR5Dmx03jp3DMsyhlPHZqh7WWjrCgj0QuZNbwoFHasK xL03B8EoYxlat8mmfBb9873sSn/z8VZhCA4m9Ts2Z+h9rMM0ov9xH8qgLpbb07pZ 3iO8xU7K/fpSQM6Pe1XBtndYNx6B69IYNVKeqPXEkQESsgEySSgmUJXIeoAO6X63 Tbsn5V01HvDk2pszRF6jfQFsN8AxnX4wf99Et3I68xX7sSgtvJejtmStOWMtBRvI LqAJvi7y8e00vgSysUF+rQT9RFHQeFE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:10 2025 by rpki-client