$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46091a86-0e6b-3cf1-9a8b-b1956d5549ad.roa File: 46091a86-0e6b-3cf1-9a8b-b1956d5549ad.roa (raw, json) Hash identifier: rMSA5wQ23W/6PevFrjX1uLgTF8SYCXwyctUUPNn1X88= Subject key identifier: DD:70:CD:76:2D:4A:61:9A:D9:CD:D5:04:66:99:77:E1:DC:A7:62:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848EE72A13C84EB9F1B9B2F3500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46091a86-0e6b-3cf1-9a8b-b1956d5549ad.roa Signing time: Wed 19 Feb 2025 06:00:14 +0000 ROA not before: Wed 19 Feb 2025 06:00:14 +0000 ROA not after: Tue 20 May 2025 05:00:14 +0000 asID: 7029 IP address blocks: 139.55.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ee:72:a1:3c:84:eb:9f:1b:9b:2f:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 19 06:00:14 2025 GMT Not After : May 20 05:00:14 2025 GMT Subject: CN=32b73808-c45c-4a42-91c2-1746864d35bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:16:d9:5e:3b:07:5c:1b:0c:f8:ea:23:b5:ef: b2:82:97:2a:0d:df:ea:ae:10:86:bd:b1:5f:31:c2: ed:6d:3d:fa:71:62:4d:05:2b:c9:50:30:d5:78:61: a4:29:42:21:d1:ff:4a:fc:85:b1:4b:95:01:fb:2e: 81:62:10:bb:22:5e:c3:7e:4e:b8:e8:7b:a7:1c:8e: b1:f8:90:42:b8:10:44:a0:c9:07:aa:87:63:4f:fe: 06:49:c6:75:1d:41:c6:d6:59:6d:83:4d:47:c8:ce: dc:a0:06:26:ec:a6:b0:4e:2d:24:13:59:46:8f:9a: de:77:d1:b2:23:68:31:09:c7:47:ec:fc:93:cd:a4: 85:c8:63:17:fd:d7:d1:4b:6c:41:69:e9:bc:18:9a: 47:a5:f5:4b:1a:6b:3e:ae:f3:ea:2e:00:21:3d:dc: fc:59:52:ba:f9:3a:73:47:ae:51:ba:3d:09:60:70: f9:fc:8e:48:6d:ac:31:54:e2:a1:dc:13:69:8d:41: 02:ff:19:0a:b7:e7:2e:b9:d5:d1:ea:51:76:25:3e: 3a:21:56:ad:eb:ca:2d:a1:a9:e4:e7:cb:c3:35:6d: 84:bc:a7:60:30:3c:95:c4:be:69:96:08:8c:7a:30: 72:5c:de:d8:4a:59:00:d4:d2:59:03:1e:0e:4b:cb: 23:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:70:CD:76:2D:4A:61:9A:D9:CD:D5:04:66:99:77:E1:DC:A7:62:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/46091a86-0e6b-3cf1-9a8b-b1956d5549ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:c0:bc:9f:b8:7a:cd:e7:b9:fb:4b:1e:bb:4b:bd:17:4c:81: 3d:36:ce:d2:65:6c:ca:b0:e3:b1:c9:85:bf:01:fe:a4:3b:3d: 97:ee:f2:ce:ab:c9:03:7f:09:04:41:f5:5a:d6:f4:ea:52:1f: 27:d9:3a:60:66:87:85:08:32:62:c4:1c:e4:21:30:8b:3f:d5: fc:33:ee:c6:da:d9:c9:eb:1f:fb:61:df:59:d4:b6:75:f9:e2: 41:d6:9c:fe:05:31:61:78:4e:18:0d:44:64:a3:04:ef:49:11: ef:f7:81:69:ce:66:80:5a:83:c3:3c:f5:d0:4c:c1:be:8e:c6: 1b:9b:9f:6f:0d:f6:21:58:64:7d:ff:14:b4:75:72:05:cf:06: 17:3a:f8:28:0e:53:94:18:54:38:e0:b1:56:27:23:73:46:a0: 02:ca:3b:d7:d1:6d:2b:e6:fc:79:9b:db:8b:36:a1:e4:ad:e3: a5:cf:ce:40:41:aa:64:18:31:e9:e5:1a:d6:38:6d:98:af:8b: df:8d:4e:63:1c:9d:68:e6:34:e5:bc:3c:e1:e6:af:e6:d0:4b: e3:73:1c:d4:15:0d:9c:22:8e:5b:5b:ce:07:a8:bb:e9:8a:09: 4b:64:10:8e:02:12:b3:69:71:d8:56:e5:d3:fb:33:b5:ab:a2: 0a:bd:da:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjucqE8hOufG5svNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxOTA2MDAxNFoXDTI1MDUyMDA1MDAxNFowLzEtMCsGA1UEAxMk MzJiNzM4MDgtYzQ1Yy00YTQyLTkxYzItMTc0Njg2NGQzNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihbZXjsHXBsM+Oojte+ygpcqDd/qrhCGvbFf McLtbT36cWJNBSvJUDDVeGGkKUIh0f9K/IWxS5UB+y6BYhC7Il7Dfk646HunHI6x +JBCuBBEoMkHqodjT/4GScZ1HUHG1lltg01HyM7coAYm7KawTi0kE1lGj5red9Gy I2gxCcdH7PyTzaSFyGMX/dfRS2xBaem8GJpHpfVLGms+rvPqLgAhPdz8WVK6+Tpz R65Ruj0JYHD5/I5IbawxVOKh3BNpjUEC/xkKt+cuudXR6lF2JT46IVat68otoank 58vDNW2EvKdgMDyVxL5plgiMejByXN7YSlkA1NJZAx4OS8sjyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1wzXYtSmGa2c3VBGaZd+Hcp2K9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDYwOTFhODYtMGU2Yi0z Y2YxLTlhOGItYjE5NTZkNTU0OWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizfUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDAvJ+4es3nuftLHrtLvRdMgT02ztJlbMqw47HJhb8B/qQ7PZfu8s6r yQN/CQRB9VrW9OpSHyfZOmBmh4UIMmLEHOQhMIs/1fwz7sba2cnrH/th31nUtnX5 4kHWnP4FMWF4ThgNRGSjBO9JEe/3gWnOZoBag8M89dBMwb6Oxhubn28N9iFYZH3/ FLR1cgXPBhc6+CgOU5QYVDjgsVYnI3NGoALKO9fRbSvm/Hmb24s2oeSt46XPzkBB qmQYMenlGtY4bZivi9+NTmMcnWjmNOW8POHmr+bQS+NzHNQVDZwijltbzgeou+mK CUtkEI4CErNpcdhW5dP7M7Wrogq92js= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:11 2025 by rpki-client