$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d98bab3-b498-3077-aadd-44336e8274c4.roa File: 5d98bab3-b498-3077-aadd-44336e8274c4.roa (raw, json) Hash identifier: GyEukNLAcWqZvR3UJ7W0Kym3rjlU1ZFRUfAXTeTShcc= Subject key identifier: 37:BD:06:D9:73:92:E0:DC:9D:0F:EF:E2:6E:61:35:60:30:D2:52:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EF9120DEC5C01DCD3780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d98bab3-b498-3077-aadd-44336e8274c4.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.31.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ef:91:20:de:c5:c0:1d:cd:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ff26662a-6167-41af-a351-18b552a72f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:d2:0c:a8:b8:fe:31:51:3b:0e:e7:c3:e2: 19:87:e2:ad:ca:56:24:51:e9:5c:88:1c:4a:41:43: 82:34:00:7e:a9:4b:ed:08:ff:f5:c0:36:ec:1b:7a: dc:2d:24:15:97:22:d4:15:6c:a2:d5:e7:3b:88:37: 7f:33:c9:3b:bf:bf:75:fe:30:0a:db:17:4d:85:7a: 12:81:6c:35:08:9a:08:02:a9:d8:9b:d7:11:7e:d9: aa:3f:c8:d1:46:b0:f2:ba:a4:ab:b1:6d:7b:b8:4f: da:d1:a5:52:5d:4d:8f:dd:01:a6:33:9a:21:ef:00: 82:23:9a:cc:11:8a:43:6d:0f:45:f0:78:05:3b:2c: 88:7d:3b:26:67:ba:88:a2:a0:be:d6:40:4c:1d:d0: 1a:13:aa:b3:ac:86:c2:89:17:f8:06:46:72:e4:cc: b9:cd:9c:58:6d:46:14:db:35:dd:ff:9c:0c:fb:06: 78:82:a7:23:25:dd:5f:44:ed:1d:60:a0:43:0a:35: d3:6b:bd:ec:77:bf:e4:b0:f9:41:f7:dc:e1:e2:ba: 56:4d:b1:c8:01:8a:4e:fb:b0:3f:73:e1:94:2a:de: a0:7c:c7:05:59:41:48:5d:b2:ef:b5:9c:a1:3e:98: 3f:d3:75:20:f0:de:8e:51:08:e9:58:9b:04:a2:bd: d2:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BD:06:D9:73:92:E0:DC:9D:0F:EF:E2:6E:61:35:60:30:D2:52:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5d98bab3-b498-3077-aadd-44336e8274c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e5:ca:c2:49:ac:54:7b:1c:7d:1d:32:92:1c:fe:4b:ee:5c: f0:9e:df:4f:71:76:a4:95:ba:f3:53:d4:8e:16:b9:a0:a0:d6: 6e:2c:e3:f4:80:de:17:9b:f9:46:00:43:13:12:00:64:6f:73: a6:73:68:e3:e7:a3:d8:f4:e5:61:bf:13:d8:9f:70:4f:83:15: bd:c3:42:2f:44:15:80:c2:74:19:c3:54:7f:15:d0:b9:58:7b: fd:65:8f:59:cd:fc:11:b5:7d:71:8f:62:f0:77:14:b8:d0:dd: 16:09:8c:12:78:7b:c2:ff:e8:5b:ec:00:5f:ee:03:e5:c5:20: 26:31:e5:db:89:64:71:0a:61:ea:af:04:19:14:b4:60:5e:19: f8:62:15:99:33:f8:da:ea:ad:5f:9e:cc:71:8d:71:18:40:c7: d1:f3:92:09:ea:b1:17:6e:73:22:a6:88:61:67:cb:13:0f:d5: e4:8e:38:53:bd:f0:fd:26:13:4e:02:01:c7:e2:04:9d:d4:15: 28:15:84:ff:5f:c2:61:e2:e3:47:5f:95:f3:bf:63:68:f7:0b: 32:4b:56:05:bd:f9:7e:cc:54:7f:60:ec:06:e3:bd:cc:48:6e: c4:57:46:e4:9d:0b:6a:5b:95:9e:3a:49:49:af:ad:0a:1a:fb: 54:39:d9:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO+RIN7FwB3NN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZmYyNjY2MmEtNjE2Ny00MWFmLWEzNTEtMThiNTUyYTcyZjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoELSDKi4/jFROw7nw+IZh+KtylYkUelciBxK QUOCNAB+qUvtCP/1wDbsG3rcLSQVlyLUFWyi1ec7iDd/M8k7v791/jAK2xdNhXoS gWw1CJoIAqnYm9cRftmqP8jRRrDyuqSrsW17uE/a0aVSXU2P3QGmM5oh7wCCI5rM EYpDbQ9F8HgFOyyIfTsmZ7qIoqC+1kBMHdAaE6qzrIbCiRf4BkZy5My5zZxYbUYU 2zXd/5wM+wZ4gqcjJd1fRO0dYKBDCjXTa73sd7/ksPlB99zh4rpWTbHIAYpO+7A/ c+GUKt6gfMcFWUFIXbLvtZyhPpg/03Ug8N6OUQjpWJsEor3STQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDe9BtlzkuDcnQ/v4m5hNWAw0lLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWQ5OGJhYjMtYjQ5OC0z MDc3LWFhZGQtNDQzMzZlODI3NGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx9gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjlysJJrFR7HH0dMpIc/kvuXPCe309xdqSVuvNT1I4WuaCg1m4s4/SA 3heb+UYAQxMSAGRvc6ZzaOPno9j05WG/E9ifcE+DFb3DQi9EFYDCdBnDVH8V0LlY e/1lj1nN/BG1fXGPYvB3FLjQ3RYJjBJ4e8L/6FvsAF/uA+XFICYx5duJZHEKYeqv BBkUtGBeGfhiFZkz+NrqrV+ezHGNcRhAx9HzkgnqsRducyKmiGFnyxMP1eSOOFO9 8P0mE04CAcfiBJ3UFSgVhP9fwmHi40dflfO/Y2j3CzJLVgW9+X7MVH9g7AbjvcxI bsRXRuSdC2pblZ46SUmvrQoa+1Q52Yw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:00 2025 by rpki-client