$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa File: 4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa (raw, json) Hash identifier: v6gcGKHrmF81K0sYoXVT3FmtLqvcEAftw0SIhoccUp0= Subject key identifier: AA:2D:54:23:70:9A:71:9E:69:A7:B7:E3:05:5F:0E:94:2B:4D:66:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21126239F87FF2D513C3800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 207.155.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:26:23:9f:87:ff:2d:51:3c:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=263dfaa0-316c-439b-9b49-6b845ffe033e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:b4:6c:d6:30:c6:71:f6:a5:fd:f3:29:b6:37: d1:f9:69:af:d8:b0:8c:b3:f2:ce:95:90:37:6d:01: 71:3c:36:29:86:ec:d6:2d:d8:13:eb:fa:ef:00:2a: 56:16:0d:e8:f8:4d:8d:eb:1a:db:88:07:b3:f2:aa: 22:c5:b1:0f:ee:a6:cb:8e:6a:a5:7a:06:95:ae:0e: 11:46:2c:77:da:4d:21:fd:0f:43:d9:7b:a1:31:15: 38:27:a9:a5:ce:6e:ff:16:f4:25:26:1e:00:c9:23: df:72:70:f3:b8:f9:d8:b9:83:91:d0:82:a8:f3:df: 8c:b3:82:54:5c:14:4f:9c:e1:58:1f:8e:76:1d:74: de:29:97:f6:77:f0:73:10:60:f4:21:a7:8d:7a:81: e5:52:fb:a2:92:f8:31:ea:c0:5f:df:5f:15:47:b6: 93:24:fa:87:20:12:f7:db:ed:42:bb:45:05:1c:2e: a7:b4:b8:e7:a5:3e:c0:fb:81:04:67:07:10:67:2b: 63:e8:88:f0:1b:20:ab:29:34:f9:77:f3:88:c7:70: 74:db:e9:b3:72:df:f6:42:56:36:2f:79:1b:1b:5f: 09:c7:ba:36:82:5f:b7:9f:08:c4:5b:c3:0f:83:90: f6:d1:37:18:db:3c:c1:41:60:cf:98:61:8f:93:8f: 30:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:2D:54:23:70:9A:71:9E:69:A7:B7:E3:05:5F:0E:94:2B:4D:66:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:02:db:0b:f8:b7:50:23:4f:e8:3e:59:4d:56:0b:0d:ca:fe: c7:c1:f8:c9:8b:ea:d7:fa:be:22:0c:fd:ec:7f:64:5c:76:e6: 11:78:81:4d:4e:e8:2f:33:f0:b7:c8:ac:b4:42:25:18:51:37: bd:dd:c0:71:2f:51:14:fc:67:2d:33:4a:2a:23:2f:06:0e:7b: 97:ab:5f:6b:6d:f1:2f:4a:6d:c5:bd:36:93:e6:9a:5d:e5:f8: 1a:0b:f4:9b:50:f8:3b:3e:0c:e9:8a:3a:18:00:a9:76:13:bd: 40:70:c5:61:f5:65:69:cf:76:7a:e3:3c:0d:bc:4d:10:7e:cf: 50:4c:c0:26:91:b1:74:b4:66:45:68:79:21:d6:49:6d:98:88: 0b:35:b6:b3:5d:30:a8:12:0f:a4:0d:5a:7d:58:9c:97:9f:81: 2e:09:32:4c:46:3d:8d:89:70:4f:82:1a:1e:20:bf:e5:66:e7: 3e:4a:bc:10:4c:58:37:bb:4c:a3:9c:7e:b1:2e:b6:97:c7:6a: 48:e1:7a:b7:84:40:05:63:e3:6b:1a:e4:bc:cc:48:d2:62:3f: 72:56:d6:ac:61:4c:2b:06:27:09:57:c9:b6:ec:8c:d7:07:50: 7e:f9:47:27:02:8f:d6:52:b9:17:d3:53:c2:1a:42:87:83:31: b3:5c:68:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESYjn4f/LVE8OAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjYzZGZhYTAtMzE2Yy00MzliLTliNDktNmI4NDVmZmUwMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLRs1jDGcfal/fMptjfR+Wmv2LCMs/LOlZA3 bQFxPDYphuzWLdgT6/rvACpWFg3o+E2N6xrbiAez8qoixbEP7qbLjmqlegaVrg4R Rix32k0h/Q9D2XuhMRU4J6mlzm7/FvQlJh4AySPfcnDzuPnYuYOR0IKo89+Ms4JU XBRPnOFYH452HXTeKZf2d/BzEGD0IaeNeoHlUvuikvgx6sBf318VR7aTJPqHIBL3 2+1Cu0UFHC6ntLjnpT7A+4EEZwcQZytj6IjwGyCrKTT5d/OIx3B02+mzct/2QlY2 L3kbG18Jx7o2gl+3nwjEW8MPg5D20TcY2zzBQWDPmGGPk48wjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKotVCNwmnGeaae34wVfDpQrTWY9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM3ODY1OGMtMTFhYi0z MTI1LWIyZmUtNGJiMjcxYzdmM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz5sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIC2wv4t1AjT+g+WU1WCw3K/sfB+MmL6tf6viIM/ex/ZFx25hF4gU1O 6C8z8LfIrLRCJRhRN73dwHEvURT8Zy0zSiojLwYOe5erX2tt8S9KbcW9NpPmml3l +BoL9JtQ+Ds+DOmKOhgAqXYTvUBwxWH1ZWnPdnrjPA28TRB+z1BMwCaRsXS0ZkVo eSHWSW2YiAs1trNdMKgSD6QNWn1YnJefgS4JMkxGPY2JcE+CGh4gv+Vm5z5KvBBM WDe7TKOcfrEutpfHakjhereEQAVj42sa5LzMSNJiP3JW1qxhTCsGJwlXybbsjNcH UH75RycCj9ZSuRfTU8IaQoeDMbNcaOQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:18 2025 by rpki-client