$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa File: 67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa (raw, json) Hash identifier: aNdfz/q8GkvEiDfqGLSjE+8M5/hr+WLbG1xxH/kOU9w= Subject key identifier: 73:47:5E:19:AC:0A:91:5E:F3:EC:70:61:E6:51:C3:53:73:2B:14:AF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EF0999B37C1955A39880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.29.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ef:09:99:b3:7c:19:55:a3:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c0ac60b0-5a87-4d00-9ed9-a9ac4c411757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c3:b0:85:cf:60:88:8f:85:ff:c8:8b:a1:eb: 75:66:c8:c6:c4:61:38:d2:91:32:3d:2a:af:5f:58: bd:6f:de:4e:e2:1f:49:4b:e0:d9:36:a3:b0:f9:f2: 23:b0:c3:d6:1d:2c:10:49:00:21:aa:c4:7a:a8:20: 02:b5:d7:ba:66:43:ca:5a:04:b7:7f:b0:15:33:54: 28:53:09:83:9f:26:d5:76:3e:7b:c3:a6:56:dc:58: 3c:46:ef:71:ce:96:d8:b1:e7:e8:8d:22:70:c8:9e: 68:92:62:37:99:aa:63:9a:da:01:2f:28:74:a0:42: cd:ed:9d:4b:40:89:bb:6d:1c:86:9a:b2:e5:8a:e3: 5d:40:ca:8d:38:63:47:04:29:47:21:33:3a:db:b1: 32:78:15:81:dd:66:f0:86:72:3a:3e:c4:b8:b5:50: d8:3e:27:fe:ae:15:63:bd:6a:41:0a:22:25:7a:3e: d7:a8:b7:ed:4e:70:ff:d0:e3:91:94:db:4a:95:28: 61:15:b9:0c:9d:08:0e:52:ae:47:e6:e3:2c:aa:5e: 95:da:76:16:0e:cd:c0:5d:7e:23:e8:e2:cb:04:d0: 97:e8:f5:14:74:7e:ca:2c:36:12:8f:6b:52:b7:b1: 12:91:f1:4a:93:c8:5a:13:4a:7a:78:c7:d1:3f:88: 18:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:47:5E:19:AC:0A:91:5E:F3:EC:70:61:E6:51:C3:53:73:2B:14:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/67f31af4-21cb-3c4b-a1c4-e3e7c3103533.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:ec:2a:d3:b9:b8:29:5c:7a:5a:97:5e:2f:af:95:c4:fa:1b: 19:15:a6:ce:4a:1e:65:d2:52:eb:93:c5:e4:61:f9:a0:93:96: 7b:ae:d4:e8:ce:a0:a4:a0:4d:8f:47:bf:72:69:a1:35:5a:d4: b3:f1:19:9c:43:48:d2:d8:76:dc:e7:0f:2c:40:c2:c1:b5:1b: 82:83:10:67:59:75:13:b9:20:2f:33:15:51:18:c3:ea:4c:91: e5:c0:98:00:d7:01:d2:d8:8b:e3:b4:e4:40:e4:86:4e:63:70: 7d:ba:9b:ac:54:10:f6:d1:1e:ad:19:ba:64:b0:9b:40:1b:8f: 25:5a:05:52:d3:17:78:3e:85:d9:ce:2a:9b:fb:a1:84:8e:e3: 5b:17:b6:c0:37:fd:cc:e3:36:90:fc:e0:5f:eb:f8:21:d0:32: a2:62:67:ea:56:e4:04:55:8e:d7:64:97:96:81:e6:5a:b5:c0: 4b:1b:43:4d:2f:3c:44:87:79:53:bc:1b:7a:8d:69:f3:56:07: 6d:81:72:a1:49:83:e9:59:f5:81:3a:af:da:45:f0:83:da:0e: 1a:8c:b5:dd:90:93:db:62:22:2e:95:7d:9e:0c:47:16:08:48: 74:88:f7:2a:89:cc:05:a0:26:f8:ff:07:74:43:1b:88:8d:9a: 56:8a:b6:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO8JmbN8GVWjmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzBhYzYwYjAtNWE4Ny00ZDAwLTllZDktYTlhYzRjNDExNzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsOwhc9giI+F/8iLoet1ZsjGxGE40pEyPSqv X1i9b95O4h9JS+DZNqOw+fIjsMPWHSwQSQAhqsR6qCACtde6ZkPKWgS3f7AVM1Qo UwmDnybVdj57w6ZW3Fg8Ru9xzpbYsefojSJwyJ5okmI3mapjmtoBLyh0oELN7Z1L QIm7bRyGmrLliuNdQMqNOGNHBClHITM627EyeBWB3WbwhnI6PsS4tVDYPif+rhVj vWpBCiIlej7XqLftTnD/0OORlNtKlShhFbkMnQgOUq5H5uMsql6V2nYWDs3AXX4j 6OLLBNCX6PUUdH7KLDYSj2tSt7ESkfFKk8haE0p6eMfRP4gY4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNHXhmsCpFe8+xwYeZRw1NzKxSvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjdmMzFhZjQtMjFjYi0z YzRiLWExYzQtZTNlN2MzMTAzNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDsKtO5uClcelqXXi+vlcT6GxkVps5KHmXSUuuTxeRh+aCTlnuu1OjO oKSgTY9Hv3JpoTVa1LPxGZxDSNLYdtznDyxAwsG1G4KDEGdZdRO5IC8zFVEYw+pM keXAmADXAdLYi+O05EDkhk5jcH26m6xUEPbRHq0ZumSwm0AbjyVaBVLTF3g+hdnO Kpv7oYSO41sXtsA3/czjNpD84F/r+CHQMqJiZ+pW5ARVjtdkl5aB5lq1wEsbQ00v PESHeVO8G3qNafNWB22BcqFJg+lZ9YE6r9pF8IPaDhqMtd2Qk9tiIi6VfZ4MRxYI SHSI9yqJzAWgJvj/B3RDG4iNmlaKthE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:20 2025 by rpki-client