$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa File: 39a5344c-552c-36c7-a942-272e3d77ba5d.roa (raw, json) Hash identifier: uLRu67Z6DPQnl7USPO42rMT4BIYlIjechqLDNCWHNP8= Subject key identifier: 95:77:60:E7:31:02:80:D2:82:A5:FD:2E:10:90:74:41:70:4F:70:14 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11D0F048441191013C600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.189.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1d:0f:04:84:41:19:10:13:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=3eab4313-a54c-4998-8810-3b5a628819cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c3:e9:ad:33:fb:63:9c:e9:70:ff:dd:8b:b0: e9:64:9d:84:bb:5a:72:ab:8b:75:9c:19:64:e4:3a: cc:21:57:d3:72:cf:dd:b1:9e:54:28:83:39:4a:85: db:4d:53:f3:2d:bd:c7:81:3f:ca:65:2b:64:5f:88: 35:af:80:43:e0:81:62:c8:6f:a8:99:63:22:77:25: ae:c4:7a:0f:f0:83:9b:63:79:5d:85:f5:7e:4e:17: b7:89:70:35:86:de:cb:b2:3f:09:88:f0:38:39:c9: 2a:1b:95:08:2e:ca:2e:05:bb:4d:88:23:a9:19:72: 84:62:5d:c8:d8:a0:e5:3f:04:a6:f5:41:84:5b:d1: 75:4a:2b:91:14:dd:94:90:2e:9b:77:0e:6d:ce:2e: c8:4e:39:7f:69:3a:a5:a2:38:a6:72:c3:24:8d:ff: 4d:2c:d1:97:70:f9:31:fe:b9:31:bb:3b:d8:1d:21: f2:4f:af:11:0a:2f:af:be:2f:97:bb:b4:1c:61:1e: 47:b5:98:77:6a:77:44:31:f4:2b:34:01:3e:99:6a: 43:45:dc:00:0a:04:c2:1a:6f:7b:aa:b3:35:3e:47: c3:be:a2:68:a7:39:8a:54:7f:73:d4:39:61:e2:ce: 3c:89:19:ad:e5:fd:b2:4e:c8:ab:89:e5:a1:49:d3: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:77:60:E7:31:02:80:D2:82:A5:FD:2E:10:90:74:41:70:4F:70:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a5344c-552c-36c7-a942-272e3d77ba5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:b3:5f:2c:50:0a:b9:43:29:82:c1:62:a5:c2:ff:54:ec:60: d3:07:bc:fc:aa:13:59:0d:5d:e4:9a:50:29:20:bf:aa:94:d6: 63:71:88:f3:cd:cb:15:54:3b:d4:4e:3b:e8:d6:97:c6:de:6e: 9a:4e:e3:44:1c:9f:07:6a:aa:da:99:2f:a9:77:2a:f2:43:42: 18:b0:74:91:18:9c:3e:1b:2b:49:9d:14:0c:92:d6:1b:3e:77: b0:b9:d3:cd:4c:7e:5c:84:58:91:b5:5a:e5:72:97:73:db:84: 2f:f1:07:e9:0f:b3:cd:10:b5:01:4a:26:d7:bf:48:29:af:a4: 54:75:d4:2d:43:08:33:e3:5a:3b:77:4f:bf:8e:2b:ab:2e:70: 1e:d0:61:d0:e5:d2:a9:3e:1a:5b:a1:c0:a7:82:2d:54:d1:dd: d6:05:52:77:8e:7a:23:8a:e5:6c:bf:9e:80:c3:72:df:36:b7: 27:3d:9f:5f:94:c4:cb:87:4f:d2:74:bb:0e:17:9b:9c:58:79: d2:1b:3d:99:83:33:e4:99:65:9f:42:2a:5e:52:5a:5d:aa:fd: c8:f1:8e:44:e3:f0:0a:36:c9:f7:e3:d1:89:2c:cc:d5:4a:48: fa:5c:05:23:7a:cf:33:27:d1:68:58:06:00:a3:eb:33:6b:3c: af:e0:c8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R0PBIRBGRATxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk M2VhYjQzMTMtYTU0Yy00OTk4LTg4MTAtM2I1YTYyODgxOWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMPprTP7Y5zpcP/di7DpZJ2Eu1pyq4t1nBlk 5DrMIVfTcs/dsZ5UKIM5SoXbTVPzLb3HgT/KZStkX4g1r4BD4IFiyG+omWMidyWu xHoP8IObY3ldhfV+The3iXA1ht7Lsj8JiPA4OckqG5UILsouBbtNiCOpGXKEYl3I 2KDlPwSm9UGEW9F1SiuRFN2UkC6bdw5tzi7ITjl/aTqlojimcsMkjf9NLNGXcPkx /rkxuzvYHSHyT68RCi+vvi+Xu7QcYR5HtZh3andEMfQrNAE+mWpDRdwACgTCGm97 qrM1PkfDvqJopzmKVH9z1Dlh4s48iRmt5f2yTsirieWhSdMXIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJV3YOcxAoDSgqX9LhCQdEFwT3AUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzlhNTM0NGMtNTUyYy0z NmM3LWE5NDItMjcyZTNkNzdiYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECzXyxQCrlDKYLBYqXC/1TsYNMHvPyqE1kNXeSaUCkgv6qU1mNxiPPN yxVUO9ROO+jWl8bebppO40QcnwdqqtqZL6l3KvJDQhiwdJEYnD4bK0mdFAyS1hs+ d7C5081MflyEWJG1WuVyl3PbhC/xB+kPs80QtQFKJte/SCmvpFR11C1DCDPjWjt3 T7+OK6sucB7QYdDl0qk+GluhwKeCLVTR3dYFUneOeiOK5Wy/noDDct82tyc9n1+U xMuHT9J0uw4Xm5xYedIbPZmDM+SZZZ9CKl5SWl2q/cjxjkTj8Ao2yffj0YkszNVK SPpcBSN6zzMn0WhYBgCj6zNrPK/gyII= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:26 2025 by rpki-client