$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa File: 37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa (raw, json) Hash identifier: fyWja6Grp/74fFJvCp6KHhP1L5u6BdgZ6vHuJw8Jzww= Subject key identifier: 7C:F5:7F:C0:32:1D:2E:20:66:CC:27:C6:2D:D6:22:5E:00:F2:EA:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B72E6BA159DB874A6D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 198.14.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b7:2e:6b:a1:59:db:87:4a:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=c2d6659d-b12b-46dc-8cf2-eccb6767e23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:73:87:13:e6:bb:82:ab:4b:75:3d:93:b9:95: c1:b3:0b:2b:08:11:11:d3:35:33:15:07:81:89:5c: 1c:4a:a5:a4:d8:f7:b0:ee:ff:af:9b:7b:55:f9:d8: 6d:80:d7:d1:4e:86:d7:7c:69:2d:7d:fc:f3:f1:ce: 58:cd:a3:2f:ec:a0:fc:b9:0f:91:63:46:6b:c3:b8: 88:76:02:7f:ee:4f:dc:04:d5:72:bc:ab:f0:ef:6a: 89:d1:77:b8:53:d2:5a:12:4c:19:e1:56:02:7f:2d: 66:85:de:42:2f:c2:00:b1:06:a8:de:4b:31:c7:83: 41:24:41:d8:0f:21:ec:05:e7:ea:cb:87:be:e4:8b: 18:98:5b:18:de:9d:7e:ef:99:d4:c5:14:65:d3:fb: 8e:27:b7:4d:af:c2:64:ca:34:f6:b1:c6:46:f6:ad: 13:2f:2e:33:80:67:50:52:16:2d:ea:89:0c:2b:df: 47:59:23:8e:83:c2:9b:2d:de:ad:07:fd:e4:cb:a8: a6:36:71:4b:36:3e:52:04:8f:d9:fb:4b:49:f0:75: e1:2d:47:6a:e5:77:35:8d:b1:65:d9:a0:02:26:06: f8:6c:58:f6:83:4d:37:cb:44:1e:95:0a:5e:89:d8: e8:44:ee:41:75:5e:b3:58:9b:e0:25:87:d6:cd:4e: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F5:7F:C0:32:1D:2E:20:66:CC:27:C6:2D:D6:22:5E:00:F2:EA:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37b59c4e-a071-35be-9c7a-4ecb0b1feb77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:fb:cd:8b:03:5b:bd:51:8f:29:f8:c6:5c:b1:8f:ac:52:a3: a9:14:11:1d:a6:7a:a6:a5:15:55:6a:d9:1e:a8:7c:b2:45:b6: ce:f0:eb:40:19:95:41:2e:66:65:36:da:d9:08:fc:aa:72:96: b0:94:73:06:77:49:77:4f:30:e6:b1:81:f5:b6:46:46:ad:e0: b2:8b:3c:e6:ef:a7:32:6f:f3:22:45:ec:2e:9b:14:8b:cb:5e: dc:66:68:9e:22:82:c2:fb:35:18:9b:8e:ad:88:da:41:8b:45: 44:27:47:56:45:1f:4c:f3:96:b7:81:9e:44:f9:79:dc:60:4a: 18:e6:3a:32:c0:2e:b2:85:16:2b:db:58:3c:3a:c5:47:81:79: 5a:71:94:d4:1b:e8:a7:ca:f6:e9:05:08:1a:24:cc:bb:b5:26: 02:0a:3a:6a:35:02:fb:f7:e6:ee:95:1c:34:28:fd:19:d2:86: 5d:b7:0e:b7:54:b6:08:e5:52:dd:60:fa:4f:5b:f9:c6:93:6c: 97:c5:b8:4c:36:88:78:c4:ec:04:53:4c:6d:1a:72:c4:e6:81: c6:02:96:bf:5e:6b:fe:b4:e9:c7:c4:b5:77:cb:a0:59:74:f4: a0:b3:4c:23:40:7f:6d:1e:17:35:a1:0a:9e:9c:25:99:4a:a1: 2a:62:c8:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4Lcua6FZ24dKbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk YzJkNjY1OWQtYjEyYi00NmRjLThjZjItZWNjYjY3NjdlMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXOHE+a7gqtLdT2TuZXBswsrCBER0zUzFQeB iVwcSqWk2Pew7v+vm3tV+dhtgNfRTobXfGktffzz8c5YzaMv7KD8uQ+RY0Zrw7iI dgJ/7k/cBNVyvKvw72qJ0Xe4U9JaEkwZ4VYCfy1mhd5CL8IAsQao3ksxx4NBJEHY DyHsBefqy4e+5IsYmFsY3p1+75nUxRRl0/uOJ7dNr8JkyjT2scZG9q0TLy4zgGdQ UhYt6okMK99HWSOOg8KbLd6tB/3ky6imNnFLNj5SBI/Z+0tJ8HXhLUdq5Xc1jbFl 2aACJgb4bFj2g003y0QelQpeidjoRO5BdV6zWJvgJYfWzU499wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHz1f8AyHS4gZswnxi3WIl4A8upAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdiNTljNGUtYTA3MS0z NWJlLTljN2EtNGVjYjBiMWZlYjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABn7zYsDW71Rjyn4xlyxj6xSo6kUER2meqalFVVq2R6ofLJFts7w60AZ lUEuZmU22tkI/KpylrCUcwZ3SXdPMOaxgfW2Rkat4LKLPObvpzJv8yJF7C6bFIvL XtxmaJ4igsL7NRibjq2I2kGLRUQnR1ZFH0zzlreBnkT5edxgShjmOjLALrKFFivb WDw6xUeBeVpxlNQb6KfK9ukFCBokzLu1JgIKOmo1Avv35u6VHDQo/RnShl23DrdU tgjlUt1g+k9b+caTbJfFuEw2iHjE7ARTTG0acsTmgcYClr9ea/606cfEtXfLoFl0 9KCzTCNAf20eFzWhCp6cJZlKoSpiyO4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:31 2025 by rpki-client