$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa File: 5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa (raw, json) Hash identifier: Pyl1MQE0KlwmjEj/VguROgvqAJ0U3ErTzvepno/48fY= Subject key identifier: FC:F8:E6:85:E5:0A:B4:80:BE:8D:E2:53:01:5B:0A:22:D0:FB:BC:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211326B3FBEF99EF185E640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 397560 IP address blocks: 74.11.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:32:6b:3f:be:f9:9e:f1:85:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2c645ef5-3844-45f8-a402-1d5616175faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:7b:ad:d8:81:76:5f:cd:aa:c0:f1:ba:49: ba:5d:5e:95:cc:cb:6e:f2:5b:cb:83:a2:39:03:4d: b4:a7:10:80:4c:41:ea:b4:0c:e6:cb:9c:8d:d0:b8: de:16:f3:af:28:bf:a3:f0:78:cb:29:3b:53:17:44: 17:54:30:b7:5b:0f:76:91:eb:8e:9c:e9:fc:ee:a7: 83:e5:5c:44:09:c1:7d:54:22:06:a4:55:d4:09:a0: d2:08:b6:93:02:39:e9:2a:56:68:05:64:0e:40:76: 41:f2:39:ad:cb:c3:42:cb:3a:28:4a:95:e5:a4:af: b3:f1:73:e9:d7:bf:f4:20:4c:55:26:08:3d:75:43: 23:9c:00:c0:58:59:99:72:88:0d:5b:3e:bd:af:be: 58:1f:9c:8d:d9:12:1f:1c:7e:8b:db:aa:ed:57:65: 7d:26:ed:dc:cd:9e:2b:8c:99:8c:8d:03:e5:bc:e8: 80:35:06:b4:73:7d:8a:e0:80:dc:0a:4f:8a:33:1e: 47:34:c3:bc:8d:0e:6e:b0:4d:78:de:fd:26:49:84: 72:bd:71:00:72:bc:4d:a3:63:59:03:7b:0e:e0:cb: c1:d8:bb:30:d2:04:bc:34:5f:ab:17:b4:0c:c7:ef: b4:0b:ff:14:25:c9:4b:09:0e:6b:d0:da:29:d5:04: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F8:E6:85:E5:0A:B4:80:BE:8D:E2:53:01:5B:0A:22:D0:FB:BC:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.11.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f0:cf:a6:0a:c2:46:ff:43:99:4b:c0:c0:1a:cb:54:e1:82: 8e:e9:86:8f:47:6d:5c:49:29:bd:0a:f0:ec:49:d6:a7:f2:af: 04:cf:ef:a2:69:ee:3c:70:db:21:0a:b3:b0:9d:38:04:74:cc: dc:57:1e:56:b1:66:bd:c9:dd:85:25:71:8a:39:e8:eb:7a:8e: e2:d2:9d:bc:df:6f:c1:63:e2:ee:23:92:52:f8:e8:7a:fe:21: 03:22:68:a9:02:dd:d8:cd:db:27:5b:b6:a9:11:9e:c1:38:6a: 3c:95:cd:27:e2:a3:93:7c:0d:c9:8e:6d:35:1e:0f:34:fa:33: 85:e3:ab:93:f4:29:24:39:d9:83:2d:d8:19:32:5c:a4:b1:9b: 63:c4:5f:8e:de:a0:93:8b:72:88:9e:9b:33:f6:d3:d3:28:7b: 8b:52:27:32:ba:46:9e:2f:98:43:8f:85:78:95:3b:d6:1c:05: e8:f2:18:02:42:37:a3:a6:1a:10:ab:44:a9:2f:be:f4:c4:d6: e4:c8:25:4f:ef:78:21:ca:27:8d:c5:17:9c:9c:22:d7:59:61: a5:e9:54:e8:1e:e1:04:2b:14:21:b0:a6:c5:0c:51:6a:b8:e5: 0f:14:3b:3e:b5:1f:c1:98:1c:27:19:4f:a2:19:d0:08:f9:9d: f6:fd:81:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETJrP775nvGF5kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MmM2NDVlZjUtMzg0NC00NWY4LWE0MDItMWQ1NjE2MTc1ZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTR7rdiBdl/NqsDxukm6XV6VzMtu8lvLg6I5 A020pxCATEHqtAzmy5yN0LjeFvOvKL+j8HjLKTtTF0QXVDC3Ww92keuOnOn87qeD 5VxECcF9VCIGpFXUCaDSCLaTAjnpKlZoBWQOQHZB8jmty8NCyzooSpXlpK+z8XPp 17/0IExVJgg9dUMjnADAWFmZcogNWz69r75YH5yN2RIfHH6L26rtV2V9Ju3czZ4r jJmMjQPlvOiANQa0c32K4IDcCk+KMx5HNMO8jQ5usE143v0mSYRyvXEAcrxNo2NZ A3sO4MvB2Lsw0gS8NF+rF7QMx++0C/8UJclLCQ5r0Nop1QQ4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPz45oXlCrSAvo3iUwFbCiLQ+7yfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWZkOThiNDQtMmVkMi0z NTUwLWI1ZDAtNWI4NGE1MTJmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbwz6YKwkb/Q5lLwMAay1Thgo7pho9HbVxJKb0K8OxJ1qfyrwTP76Jp 7jxw2yEKs7CdOAR0zNxXHlaxZr3J3YUlcYo56Ot6juLSnbzfb8Fj4u4jklL46Hr+ IQMiaKkC3djN2ydbtqkRnsE4ajyVzSfio5N8DcmObTUeDzT6M4Xjq5P0KSQ52YMt 2BkyXKSxm2PEX47eoJOLcoiemzP209Moe4tSJzK6Rp4vmEOPhXiVO9YcBejyGAJC N6OmGhCrRKkvvvTE1uTIJU/veCHKJ43FF5ycItdZYaXpVOge4QQrFCGwpsUMUWq4 5Q8UOz61H8GYHCcZT6IZ0Aj5nfb9gf0= -----END CERTIFICATE-----Generated at Sun Feb 16 20:16:35 2025 by rpki-client