$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22eca8c5-820d-3188-9b2c-56b236f1b806.roa File: 22eca8c5-820d-3188-9b2c-56b236f1b806.roa (raw, json) Hash identifier: goSQxl+04ZfLdBk0rcd/E8okBGL+78s6fnz+pkUdEHk= Subject key identifier: C7:41:F8:A3:EF:69:1C:57:06:3A:B6:4E:06:60:9D:6B:94:7C:49:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F335888BD3657B91C480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22eca8c5-820d-3188-9b2c-56b236f1b806.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 139.55.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f3:35:88:8b:d3:65:7b:91:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c3c13d2b-fcdd-4d60-a62a-418e7e2fadca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:e7:71:3e:27:57:b1:ee:a3:57:cf:5c:80: 5f:9d:35:d6:65:2c:e6:1b:db:cd:18:e1:ee:a4:9c: 30:7a:5e:92:fe:fc:a2:ee:e7:06:61:09:b1:f0:41: 8e:87:a2:eb:05:f9:ed:c6:61:2c:f8:76:a6:36:38: 6d:f6:c8:66:3f:b8:cc:b4:e5:c1:9c:9e:25:6c:8e: 12:ce:88:ec:2c:ac:1c:b7:4e:0b:cf:87:b4:76:45: fb:b0:69:71:4b:b0:1d:9d:e7:cb:ad:09:57:89:7f: 1b:3c:04:2c:e0:ae:fb:e0:08:43:56:01:1a:0b:10: 91:79:eb:84:35:be:d9:e4:1f:1b:8c:40:eb:af:e4: 7d:22:1c:8c:56:9a:16:e1:b7:fe:6c:50:d6:8c:f4: 17:f5:6b:da:cc:d5:a4:d1:a1:2a:67:9c:47:6f:06: 21:f5:cc:67:49:b3:c1:29:04:38:12:d5:2c:21:4c: 66:8c:e8:36:bf:87:33:52:f9:0c:1a:76:b8:f1:4e: 45:59:3e:38:cd:f0:79:61:a7:e1:31:06:9b:e9:93: d0:6f:82:ae:1c:30:05:cb:95:6c:67:80:a8:5d:59: 95:9d:fb:b6:25:a5:96:6e:80:38:20:b6:5d:2d:12: ac:7a:e4:16:8e:60:fb:2a:ab:92:d1:e7:a1:e3:34: d8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:41:F8:A3:EF:69:1C:57:06:3A:B6:4E:06:60:9D:6B:94:7C:49:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/22eca8c5-820d-3188-9b2c-56b236f1b806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:9b:6a:a5:c1:39:09:59:75:b6:7f:3f:30:bb:5f:e6:02:26: 8f:21:6b:a8:61:23:f5:11:b0:0b:3f:0d:7d:6d:b1:80:32:73: 8e:a9:35:a6:14:59:a7:04:cb:99:cf:74:54:74:c2:87:3e:7c: 0f:11:56:19:ed:1a:a9:d4:43:0b:bb:38:73:47:6c:03:96:2c: 19:4e:10:66:61:f1:f3:a4:55:b9:26:ef:c7:55:a8:03:2f:18: 08:ad:d8:0c:60:7a:7a:24:46:07:e4:bb:04:1c:27:c2:43:96: d1:f7:bd:43:d5:50:a5:78:5d:2a:ff:a4:46:cd:16:8b:be:0b: ad:1b:80:27:2f:a3:38:86:1c:28:57:d6:34:69:57:4c:2e:28: 76:85:0d:e3:60:c4:73:71:35:87:5f:06:a5:05:fb:ca:34:8d: 93:58:f2:03:8c:50:7c:41:f6:71:4b:f3:6b:6c:da:75:c9:ee: 3b:21:f0:09:f0:87:aa:7f:2c:b8:89:79:af:bf:49:72:6f:ef: 4c:aa:af:eb:b3:df:f7:7b:1e:5f:35:a8:2e:cb:e4:b7:d3:14: 32:79:9d:e9:97:c4:66:5c:42:98:e5:ca:03:e6:de:e0:1c:9e: 29:cb:70:e5:c6:2e:6a:ea:0b:d1:84:95:d8:fd:16:04:f6:8a: 69:9b:3d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPM1iIvTZXuRxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzNjMTNkMmItZmNkZC00ZDYwLWE2MmEtNDE4ZTdlMmZhZGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwjncT4nV7Huo1fPXIBfnTXWZSzmG9vNGOHu pJwwel6S/vyi7ucGYQmx8EGOh6LrBfntxmEs+HamNjht9shmP7jMtOXBnJ4lbI4S zojsLKwct04Lz4e0dkX7sGlxS7AdnefLrQlXiX8bPAQs4K774AhDVgEaCxCReeuE Nb7Z5B8bjEDrr+R9IhyMVpoW4bf+bFDWjPQX9WvazNWk0aEqZ5xHbwYh9cxnSbPB KQQ4EtUsIUxmjOg2v4czUvkMGna48U5FWT44zfB5YafhMQab6ZPQb4KuHDAFy5Vs Z4CoXVmVnfu2JaWWboA4ILZdLRKseuQWjmD7KquS0eeh4zTY1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdB+KPvaRxXBjq2TgZgnWuUfEl8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjJlY2E4YzUtODIwZC0z MTg4LTliMmMtNTZiMjM2ZjFiODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizc4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKbaqXBOQlZdbZ/PzC7X+YCJo8ha6hhI/URsAs/DX1tsYAyc46pNaYU WacEy5nPdFR0woc+fA8RVhntGqnUQwu7OHNHbAOWLBlOEGZh8fOkVbkm78dVqAMv GAit2AxgenokRgfkuwQcJ8JDltH3vUPVUKV4XSr/pEbNFou+C60bgCcvoziGHChX 1jRpV0wuKHaFDeNgxHNxNYdfBqUF+8o0jZNY8gOMUHxB9nFL82ts2nXJ7jsh8Anw h6p/LLiJea+/SXJv70yqr+uz3/d7Hl81qC7L5LfTFDJ5nemXxGZcQpjlygPm3uAc ninLcOXGLmrqC9GEldj9FgT2immbPZU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:30 2025 by rpki-client