$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa File: 3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa (raw, json) Hash identifier: CPOKPaMTe58zPs9i/45USZOPvZDz/6oM+8BoLAzk5ws= Subject key identifier: 8A:A4:B3:DD:74:87:2C:4F:8E:84:EA:71:57:29:D0:C8:64:FC:9D:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EE643C170A427DFEBFE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ee:64:3c:17:0a:42:7d:fe:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=9ba307b6-59b9-4ef8-8eab-6612cab2b4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:24:96:1d:f1:e2:a2:4a:3b:81:9f:43:3e:6e: dd:6f:c9:a3:ea:ef:83:66:07:21:f8:76:39:4e:f5: ef:2c:a5:4a:9e:53:7c:61:4b:75:55:1a:37:6e:52: 23:cc:79:54:5a:97:78:80:f8:b6:e1:b5:da:d0:ba: 63:fe:0e:f0:96:90:0f:04:c9:f0:e9:ed:b2:54:4b: 4d:af:ab:7b:16:76:e4:56:67:7f:18:4f:c2:87:d4: 06:f3:bd:59:8a:25:cc:65:ce:06:cf:bf:3a:18:82: 1f:ef:07:74:31:5b:bb:99:6c:34:b4:50:9f:ed:20: f4:37:43:8b:7f:03:08:6b:af:c9:28:ca:95:e5:46: ed:c3:cf:b0:dd:a9:6a:16:b4:17:76:19:cb:36:09: 01:70:16:ab:ae:68:26:82:9a:11:3b:d3:4d:21:09: 64:34:9d:fe:4b:3d:b5:df:bb:53:04:5e:53:80:b5: 6e:dc:65:62:4a:ae:b5:8b:86:c2:f2:65:c6:ce:b0: 1b:52:fd:27:f6:1c:f9:7e:9d:74:31:08:f8:e0:c8: 55:d3:a2:c8:cb:4b:3a:c9:36:dd:15:e8:61:38:d8: 0f:cd:41:39:42:81:ed:a8:6f:70:16:a1:ac:20:86: 8d:e6:e3:21:f4:45:9a:69:0b:5d:36:10:4c:01:7f: 31:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A4:B3:DD:74:87:2C:4F:8E:84:EA:71:57:29:D0:C8:64:FC:9D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3611ae14-c367-3f02-83f5-e9996eb1e1e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.0.0/14 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:a7:92:9d:b4:05:91:ef:97:1e:85:4e:8e:94:77:07:ff:c2: 2f:10:2b:d3:4a:35:02:04:3d:c0:b9:01:96:d7:6b:4f:82:a9: cb:86:63:57:0c:00:6f:51:95:8e:81:5b:c0:fa:57:3e:d0:da: b3:3e:3f:0a:50:15:2e:3c:89:c4:e5:fa:6f:cc:b7:bc:c6:27: 46:d8:0e:dc:83:d4:e6:d2:c2:e9:10:27:40:fb:74:76:fe:a6: 77:e5:df:4c:d9:8c:4e:b2:76:5a:70:d6:81:9a:aa:2f:57:37: 56:f7:d6:7b:e4:96:da:03:9c:28:00:c8:53:c6:0f:57:5b:bd: a7:b4:e6:c6:37:a4:c4:d5:43:1b:fe:21:07:e1:bc:ce:59:a5: cd:c1:56:8e:f2:c4:29:cd:e8:0e:22:63:58:58:d6:c5:87:d5: b4:8c:15:df:a2:92:7f:34:bb:38:07:88:2c:cc:c8:cc:a0:c4: 95:c8:65:c3:76:94:81:9c:d7:be:4e:81:53:88:14:25:b6:0e: ce:1b:40:bc:9d:32:69:1c:8d:99:52:36:96:80:67:a2:e8:3d: 61:57:42:37:8e:df:1a:5e:37:e2:85:00:31:32:9f:0a:2a:3f: 60:2a:70:53:71:e7:e3:45:0e:3b:59:1c:70:c8:c0:37:7f:14: 0c:40:56:0e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEO5kPBcKQn3+v+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OWJhMzA3YjYtNTliOS00ZWY4LThlYWItNjYxMmNhYjJiNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniSWHfHioko7gZ9DPm7db8mj6u+DZgch+HY5 TvXvLKVKnlN8YUt1VRo3blIjzHlUWpd4gPi24bXa0Lpj/g7wlpAPBMnw6e2yVEtN r6t7FnbkVmd/GE/Ch9QG871ZiiXMZc4Gz786GIIf7wd0MVu7mWw0tFCf7SD0N0OL fwMIa6/JKMqV5Ubtw8+w3alqFrQXdhnLNgkBcBarrmgmgpoRO9NNIQlkNJ3+Sz21 37tTBF5TgLVu3GViSq61i4bC8mXGzrAbUv0n9hz5fp10MQj44MhV06LIy0s6yTbd FehhONgPzUE5QoHtqG9wFqGsIIaN5uMh9EWaaQtdNhBMAX8xGwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFIqks910hyxPjoTqcVcp0Mhk/J1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzYxMWFlMTQtYzM2Ny0z ZjAyLTgzZjUtZTk5OTZlYjFlMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCRxwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABaeSnbQFke+XHoVOjpR3B//CLxAr00o1AgQ9wLkBltdrT4Kpy4ZjVwwA b1GVjoFbwPpXPtDasz4/ClAVLjyJxOX6b8y3vMYnRtgO3IPU5tLC6RAnQPt0dv6m d+XfTNmMTrJ2WnDWgZqqL1c3VvfWe+SW2gOcKADIU8YPV1u9p7TmxjekxNVDG/4h B+G8zlmlzcFWjvLEKc3oDiJjWFjWxYfVtIwV36KSfzS7OAeILMzIzKDElchlw3aU gZzXvk6BU4gUJbYOzhtAvJ0yaRyNmVI2loBnoug9YVdCN47fGl434oUAMTKfCio/ YCpwU3Hn40UOO1kccMjAN38UDEBWDg== -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:05 2025 by rpki-client