$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa File: 64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa (raw, json) Hash identifier: uZm/QmBns4njBm8itG5c09mmkOtaEqMw7tgn2a2RsFM= Subject key identifier: A9:29:6C:0A:D8:DB:B6:69:76:0E:B2:4C:2E:48:A5:2C:64:A0:9F:D3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB56A9AC4763E5B0EC8C680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 40.137.2.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:6a:9a:c4:76:3e:5b:0e:c8:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=a6fb9784-0467-4099-827b-668f92a35a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:4a:b0:20:4d:c2:8a:b6:77:a8:4c:c5:27:71: 1c:2b:72:f5:57:93:3b:8d:f4:a7:dd:b8:a7:50:cb: 74:a0:af:9e:6d:4e:44:72:b2:55:1f:bd:7b:04:c9: 9d:37:9d:20:52:98:43:83:e5:ac:ce:3c:52:60:60: c5:2b:2b:3f:59:bc:81:8a:2d:f1:62:f5:e9:cd:a1: 3e:c1:7e:25:3d:d4:38:a6:79:79:df:9e:fd:61:92: 0a:40:32:aa:d1:a1:04:c7:bc:d3:52:fe:08:54:86: d7:64:ca:2a:94:cd:85:d0:00:f8:66:bf:2a:93:c8: 45:41:78:b2:1d:37:3b:01:c6:36:9c:f6:5e:5b:d5: a2:94:8e:09:1d:ff:7b:d1:78:ea:99:94:ed:fa:96: 6b:3c:ff:2f:32:b3:97:78:c7:b3:bd:7f:76:37:92: 5e:25:d2:83:53:ba:ec:ca:61:84:65:40:e6:e2:f8: c5:1f:92:b5:90:01:0a:52:e4:4a:58:6c:2a:b2:c5: 1a:22:da:a6:af:4b:7e:bb:b0:1f:fc:f7:a7:fe:ed: fd:0e:a2:d2:e8:8c:80:85:ad:fc:a3:2f:60:53:2d: 0a:4d:81:42:98:ac:9f:c1:d7:2b:88:b5:38:b9:57: 65:51:52:f5:e6:fa:2e:9a:61:8e:b6:17:b1:40:90: 91:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:29:6C:0A:D8:DB:B6:69:76:0E:B2:4C:2E:48:A5:2C:64:A0:9F:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64d99eef-c0c4-3bdb-bb05-43e7319a5d24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.137.2.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b7:44:8e:01:1a:11:4c:6b:7b:4c:0c:c5:4c:46:ad:4c:f9: 6b:cf:30:8f:10:55:08:86:98:e5:52:3a:60:63:39:fe:66:f3: 1c:78:50:7d:99:2e:cf:07:82:d2:5f:b2:7b:75:8b:66:36:e5: 42:8e:c5:6c:3a:f7:88:c4:92:8a:40:45:fd:07:57:3e:2b:37: 02:20:61:7c:53:55:63:ac:a1:95:b2:6c:04:b9:41:2c:14:48: c2:13:16:75:e8:96:13:47:e8:15:06:f3:48:63:b4:7b:57:79: b7:be:fc:f2:ea:c0:9f:8c:c1:7a:78:3f:24:d9:40:2d:fc:49: 86:58:8d:bd:5e:77:01:7c:76:3c:20:b0:08:26:8c:10:91:b8: 7b:03:3d:d6:26:92:3c:bb:6a:53:1e:91:c4:e6:d0:dd:e5:55: 09:71:75:3a:1c:bb:eb:88:dd:7c:ca:07:1d:8f:22:69:89:16: db:59:47:7b:d4:13:41:64:75:db:9c:77:11:c4:ea:ef:05:e7: 44:93:0b:57:38:e7:8f:ca:a6:da:23:dc:e3:23:90:ed:47:d1: ab:f5:a0:54:88:06:06:f7:9e:66:0c:36:b1:eb:29:ea:a4:f2: cd:92:58:7c:65:21:35:36:df:ab:e7:6e:93:e4:a7:6a:c4:38: d6:16:39:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tWqaxHY+Ww7IxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk YTZmYjk3ODQtMDQ2Ny00MDk5LTgyN2ItNjY4ZjkyYTM1YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0qwIE3CirZ3qEzFJ3EcK3L1V5M7jfSn3bin UMt0oK+ebU5EcrJVH717BMmdN50gUphDg+WszjxSYGDFKys/WbyBii3xYvXpzaE+ wX4lPdQ4pnl53579YZIKQDKq0aEEx7zTUv4IVIbXZMoqlM2F0AD4Zr8qk8hFQXiy HTc7AcY2nPZeW9WilI4JHf970XjqmZTt+pZrPP8vMrOXeMezvX92N5JeJdKDU7rs ymGEZUDm4vjFH5K1kAEKUuRKWGwqssUaItqmr0t+u7Af/Pen/u39DqLS6IyAha38 oy9gUy0KTYFCmKyfwdcriLU4uVdlUVL15voummGOthexQJCRLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkpbArY27Zpdg6yTC5IpSxkoJ/TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRkOTllZWYtYzBjNC0z YmRiLWJiMDUtNDNlNzMxOWE1ZDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBKIkCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy3RI4BGhFMa3tMDMVMRq1M+WvPMI8QVQiGmOVSOmBjOf5m8xx4UH2Z Ls8HgtJfsnt1i2Y25UKOxWw694jEkopARf0HVz4rNwIgYXxTVWOsoZWybAS5QSwU SMITFnXolhNH6BUG80hjtHtXebe+/PLqwJ+MwXp4PyTZQC38SYZYjb1edwF8djwg sAgmjBCRuHsDPdYmkjy7alMekcTm0N3lVQlxdTocu+uI3XzKBx2PImmJFttZR3vU E0FkdducdxHE6u8F50STC1c454/Kptoj3OMjkO1H0av1oFSIBgb3nmYMNrHrKeqk 8s2SWHxlITU236vnbpPkp2rEONYWOTk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:36 2025 by rpki-client