$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa File: 2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa (raw, json) Hash identifier: Ki1vMszfh1AjpA1GcpzCmtRmKk22C7Cyi+czvQSUMRU= Subject key identifier: 9E:40:6F:EB:A4:F4:E0:9F:C1:5B:0F:00:47:0F:62:23:12:FA:2D:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11D57A612B1865A04E200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.191.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1d:57:a6:12:b1:86:5a:04:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=8ee144e7-9357-4343-93c0-838bf5d11c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a1:78:cc:85:97:82:e9:10:a0:c9:71:4a:a7: 6b:f5:99:87:e2:7a:0b:10:c5:81:48:28:fa:3b:9a: 8f:a9:82:81:15:26:96:5c:48:e6:dc:2e:5c:63:ab: 34:a4:0e:86:27:ac:4b:e4:eb:30:92:8f:45:f8:80: 5e:46:ed:4d:83:58:fd:c8:01:c4:a9:64:31:67:c4: cd:5e:d8:68:be:39:0a:76:87:fa:80:48:d6:10:9f: 85:56:92:e0:2f:11:54:74:4a:22:92:cf:a1:6f:19: 49:55:b8:9d:4d:bc:ff:99:de:48:d3:b6:f3:17:e2: 0d:17:2d:d1:eb:30:0b:93:b3:5b:92:78:0b:64:61: 6c:eb:ba:93:eb:9a:9b:c1:4e:1b:69:77:ab:e0:6e: e4:33:c3:11:3d:43:58:be:19:1f:d1:7c:92:2d:67: 55:35:64:e7:5f:db:85:90:d8:c6:ed:8c:ed:cf:c1: 68:b1:e3:22:c9:57:dd:78:f2:07:c3:a8:be:3b:27: 03:65:69:7c:40:fd:ce:c8:ed:5f:ee:12:19:cb:f3: bc:a6:4b:7a:de:9e:e0:fe:25:68:6a:2c:b2:09:e1: b1:1d:8b:04:61:fe:cc:e4:2f:13:3d:39:fb:73:65: a0:54:9d:72:06:5f:db:ce:83:9a:38:16:35:5f:3d: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:40:6F:EB:A4:F4:E0:9F:C1:5B:0F:00:47:0F:62:23:12:FA:2D:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2a7c337e-9213-3cd4-b972-bbf9b41815c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b3:fe:f0:37:8d:47:05:41:2b:d6:64:e3:ba:ce:27:73:ec: 65:ff:1e:ab:1a:3a:e6:8f:f2:2c:f0:e5:b2:69:fb:78:72:68: b4:02:31:08:95:a4:4d:f3:a5:96:70:32:14:bd:9e:0a:d6:91: 7b:9a:db:b1:69:53:3e:49:e2:6f:79:a5:39:8c:e0:2b:f7:72: 70:8a:8c:65:9c:88:1d:b5:fd:ce:a0:93:bd:1e:45:7e:2b:96: 9f:ac:97:ea:65:71:d1:80:20:be:77:26:47:f9:25:49:f6:37: 54:96:c7:de:3f:30:3d:d2:e4:df:0f:6b:84:fd:27:90:92:39: 7a:2f:88:b7:c9:41:38:36:e9:43:d5:ef:4b:41:1f:c2:68:2a: da:18:05:f9:7e:3a:67:58:30:b0:84:fe:cd:d8:cb:c5:37:52: 7a:83:fb:dd:69:d0:12:38:af:6e:f9:91:ef:79:4c:4d:4a:53: 1e:8c:cf:10:cf:84:42:6c:f3:57:9d:da:68:2c:ce:7c:7e:f3: b9:eb:3a:b6:87:21:1f:72:24:fb:5d:f0:5a:cc:a3:4f:6b:a6: 51:b2:e3:df:a7:d7:09:e1:ef:df:2b:c5:6c:95:43:d9:9e:8c: 20:b2:da:66:10:43:fb:6c:de:e4:45:06:30:61:06:4e:df:b8: ec:3d:bf:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R1XphKxhloE4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk OGVlMTQ0ZTctOTM1Ny00MzQzLTkzYzAtODM4YmY1ZDExYzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqF4zIWXgukQoMlxSqdr9ZmH4noLEMWBSCj6 O5qPqYKBFSaWXEjm3C5cY6s0pA6GJ6xL5Oswko9F+IBeRu1Ng1j9yAHEqWQxZ8TN XthovjkKdof6gEjWEJ+FVpLgLxFUdEoiks+hbxlJVbidTbz/md5I07bzF+INFy3R 6zALk7NbkngLZGFs67qT65qbwU4baXer4G7kM8MRPUNYvhkf0XySLWdVNWTnX9uF kNjG7Yztz8FoseMiyVfdePIHw6i+OycDZWl8QP3OyO1f7hIZy/O8pkt63p7g/iVo aiyyCeGxHYsEYf7M5C8TPTn7c2WgVJ1yBl/bzoOaOBY1Xz0tKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5Ab+uk9OCfwVsPAEcPYiMS+i1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmE3YzMzN2UtOTIxMy0z Y2Q0LWI5NzItYmJmOWI0MTgxNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmz/vA3jUcFQSvWZOO6zidz7GX/HqsaOuaP8izw5bJp+3hyaLQCMQiV pE3zpZZwMhS9ngrWkXua27FpUz5J4m95pTmM4Cv3cnCKjGWciB21/c6gk70eRX4r lp+sl+plcdGAIL53Jkf5JUn2N1SWx94/MD3S5N8Pa4T9J5CSOXoviLfJQTg26UPV 70tBH8JoKtoYBfl+OmdYMLCE/s3Yy8U3UnqD+91p0BI4r275ke95TE1KUx6MzxDP hEJs81ed2mgsznx+87nrOraHIR9yJPtd8FrMo09rplGy49+n1wnh798rxWyVQ9me jCCy2mYQQ/ts3uRFBjBhBk7fuOw9vwI= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:01 2025 by rpki-client