$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a5e550f-8687-3e50-8876-e1f855d933da.roa File: 5a5e550f-8687-3e50-8876-e1f855d933da.roa (raw, json) Hash identifier: 0/pPI2RkJadueWH9HzAIjxdo7bYzU1E8maHb2RbWohA= Subject key identifier: 67:B1:5C:22:18:4C:39:A9:3A:BF:AF:F8:0C:9C:01:5F:94:C8:2D:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21127EA6EF1C0691FEEC980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a5e550f-8687-3e50-8876-e1f855d933da.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.236.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:27:ea:6e:f1:c0:69:1f:ee:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f9d4c503-0348-45c3-b48b-7ecda38b1d36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d3:ff:1e:e7:8f:49:52:cf:6d:b6:ad:0a:b6: 4d:35:81:97:14:6c:50:62:ce:95:13:f1:37:6b:aa: 9d:61:7b:f5:06:16:fe:3b:11:82:ee:a2:21:9b:3f: 4c:b7:33:54:47:aa:b4:2d:ae:03:ff:a7:47:35:7a: bc:9c:00:53:2d:ea:57:33:7b:85:5d:42:8a:34:5e: 42:23:d2:8f:ab:46:0e:fd:a6:bc:9d:de:86:a5:88: 48:56:b3:5a:30:93:59:1d:92:9a:15:de:bb:2f:b0: 94:a3:77:12:aa:92:0d:7c:21:db:97:82:fb:fd:60: b9:a3:4e:60:da:09:89:a6:76:fd:50:80:44:0c:80: bc:34:7f:c2:66:68:97:0f:bf:db:aa:8e:63:2a:bb: 6b:e2:1f:78:06:81:4c:de:0f:db:ee:94:f2:61:6e: 81:ad:db:d4:5b:ae:06:1a:15:0e:5a:ff:4c:3d:ef: 1f:58:4e:e3:51:14:13:01:e3:13:27:37:65:50:8d: 3c:2b:30:54:ef:46:65:7a:67:73:d2:77:41:65:74: 5e:a9:73:f0:9b:19:a5:6e:34:4c:d6:49:e7:fe:05: 6d:95:f8:73:df:72:2d:1c:06:6c:a5:47:d2:a3:a0: e4:04:1d:67:c9:e3:e8:56:fd:2c:1d:3e:73:71:7d: a4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B1:5C:22:18:4C:39:A9:3A:BF:AF:F8:0C:9C:01:5F:94:C8:2D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5a5e550f-8687-3e50-8876-e1f855d933da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.236.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b8:2a:ac:42:e2:13:36:47:ac:34:10:60:91:49:33:d3:1c: 88:b1:0c:20:28:c1:76:50:c9:c4:d7:f1:d6:2b:a6:1d:34:f5: 2c:07:cf:f7:ce:ac:93:35:61:86:e5:19:98:9f:1f:60:8e:82: 55:c0:f3:23:6d:32:cd:72:6b:17:aa:95:8b:c9:17:9b:13:2c: f4:42:ec:c7:a1:69:02:ca:bc:ad:6f:09:bb:21:86:8b:93:8e: e8:23:bd:0a:a0:b2:9b:89:b0:71:af:38:ef:6f:74:4c:fa:63: 52:82:52:e1:28:0a:90:ae:5d:40:1b:cb:a2:5d:d3:a5:cf:c6: 69:c0:14:b1:6f:b6:dc:f2:ef:eb:72:a9:3c:57:c9:ff:eb:34: de:2e:f9:76:ba:f1:44:f0:8b:16:be:99:a1:b3:20:d2:4c:91: 87:1c:78:b6:40:6c:04:2d:3b:a0:f3:0a:ca:ec:aa:68:ad:0a: 22:f4:37:79:62:0f:19:80:49:0c:d4:ab:5e:a1:db:a3:d2:f7: 4d:2e:ee:12:00:b1:9e:31:9f:07:71:11:4c:0d:81:12:75:d4: 80:ef:3a:5e:fc:89:46:c0:9c:a9:c2:ce:75:a1:c3:e6:08:00: 0e:38:59:79:61:59:53:f1:13:6b:1d:f0:d5:cf:2e:16:84:f7: 1b:bb:b1:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESfqbvHAaR/uyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjlkNGM1MDMtMDM0OC00NWMzLWI0OGItN2VjZGEzOGIxZDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndP/HuePSVLPbbatCrZNNYGXFGxQYs6VE/E3 a6qdYXv1Bhb+OxGC7qIhmz9MtzNUR6q0La4D/6dHNXq8nABTLepXM3uFXUKKNF5C I9KPq0YO/aa8nd6GpYhIVrNaMJNZHZKaFd67L7CUo3cSqpINfCHbl4L7/WC5o05g 2gmJpnb9UIBEDIC8NH/CZmiXD7/bqo5jKrtr4h94BoFM3g/b7pTyYW6BrdvUW64G GhUOWv9MPe8fWE7jURQTAeMTJzdlUI08KzBU70Zlemdz0ndBZXReqXPwmxmlbjRM 1knn/gVtlfhz33ItHAZspUfSo6DkBB1nyePoVv0sHT5zcX2kgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGexXCIYTDmpOr+v+AycAV+UyC0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWE1ZTU1MGYtODY4Ny0z ZTUwLTg4NzYtZTFmODU1ZDkzM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0eyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa4KqxC4hM2R6w0EGCRSTPTHIixDCAowXZQycTX8dYrph009SwHz/fO rJM1YYblGZifH2COglXA8yNtMs1yaxeqlYvJF5sTLPRC7MehaQLKvK1vCbshhouT jugjvQqgspuJsHGvOO9vdEz6Y1KCUuEoCpCuXUAby6Jd06XPxmnAFLFvttzy7+ty qTxXyf/rNN4u+Xa68UTwixa+maGzINJMkYcceLZAbAQtO6DzCsrsqmitCiL0N3li DxmASQzUq16h26PS900u7hIAsZ4xnwdxEUwNgRJ11IDvOl78iUbAnKnCznWhw+YI AA44WXlhWVPxE2sd8NXPLhaE9xu7sUo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:25 2025 by rpki-client