$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6869c5cb-3e98-35c8-99cf-1d993c4c3fe6.roa File: 6869c5cb-3e98-35c8-99cf-1d993c4c3fe6.roa (raw, json) Hash identifier: ezDwGG3veobFjiUvoHePtB7I6HI3fV6Om/ZJh3U6BZ0= Subject key identifier: B0:D4:7B:2B:F0:B0:53:D3:F5:CA:F7:53:B4:06:72:9A:51:18:BC:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11E94C376BEF9720DAE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6869c5cb-3e98-35c8-99cf-1d993c4c3fe6.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.185.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:94:c3:76:be:f9:72:0d:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=a778b41f-fd90-4075-b838-3ab6ca4cc96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:53:04:42:5f:13:19:61:3b:15:06:6a:08: bb:5d:c0:a5:95:e4:6d:64:bc:53:5e:51:1b:ec:63: 97:39:65:b5:85:83:83:51:1e:8c:0d:85:40:43:21: be:e6:0e:e5:11:3f:70:17:58:2d:d4:59:c9:f2:56: 7c:4d:c5:c4:68:95:18:24:75:c8:22:91:99:f1:a3: 87:23:2d:42:58:2d:35:49:0c:e5:35:44:9e:17:3d: 01:61:19:6b:e4:a6:e5:33:b9:38:f7:ef:a4:39:dd: 72:7d:fc:04:c9:5b:0f:11:14:b1:54:75:b4:ed:42: 5a:44:b3:d7:55:7b:3b:29:3b:f2:8a:a1:d8:90:42: 8c:bb:4b:38:6a:5e:eb:2c:fb:e6:25:3b:63:f7:b1: 1f:7f:9b:56:a6:4c:f9:15:16:b3:01:35:3d:1f:52: d5:b1:c1:cc:12:7a:dc:d9:a7:1d:a0:76:b7:d2:20: b5:f6:61:fb:1c:66:a3:72:6b:98:86:38:37:6e:3b: 79:3b:52:2f:1a:59:27:89:88:b9:22:5c:83:44:da: 02:13:5b:2f:f5:13:f7:10:3b:c1:d8:b8:29:bc:20: 00:a9:96:01:43:99:79:e0:73:aa:51:7a:aa:4f:a2: 2b:07:d5:b8:8a:f5:56:c3:a0:e0:8a:f4:66:43:1d: 89:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:D4:7B:2B:F0:B0:53:D3:F5:CA:F7:53:B4:06:72:9A:51:18:BC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6869c5cb-3e98-35c8-99cf-1d993c4c3fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:47:18:bd:47:33:c5:97:49:30:97:c8:14:c6:8f:50:6e:80: 46:6d:67:70:40:6b:c3:1f:19:9e:05:14:03:11:cc:19:3d:de: e8:07:a6:9d:94:d0:98:f8:6e:1e:99:11:8a:17:aa:62:1e:9c: 7d:40:6b:c3:61:09:43:77:64:ea:32:a8:45:0c:cf:06:05:e6: be:dd:37:9c:0f:4d:38:f5:eb:e6:2c:99:49:56:14:be:a2:79: ca:37:30:ab:0e:e8:93:22:3f:28:d6:51:cb:a9:19:4a:1f:fc: 59:60:cb:67:dd:07:17:62:96:19:cb:84:7e:0c:47:4c:93:7b: d9:83:53:1a:90:fa:a1:a7:66:c0:f3:2a:cb:1d:e0:07:d6:84: a8:12:87:fc:29:79:7b:4d:6e:6b:74:5d:fe:d6:33:1c:1b:b5: b6:eb:6a:36:28:07:7c:27:98:a1:58:b4:08:3b:fa:b8:9b:4a: 09:43:05:ce:d6:e0:c8:c7:46:65:49:63:95:e4:bd:f8:ff:30: fd:d5:76:e9:5e:a7:5f:c1:ab:ab:98:1d:8d:86:98:51:f9:20: 35:0c:48:d1:6a:5d:dd:cb:62:9a:9f:1d:3e:8d:4f:bf:07:51: e7:a1:03:a1:59:7e:92:35:ec:1e:53:d1:be:a0:5d:50:20:92: 6c:18:b4:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R6Uw3a++XINrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YTc3OGI0MWYtZmQ5MC00MDc1LWI4MzgtM2FiNmNhNGNjOTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs1TBEJfExlhOxUGagi7XcClleRtZLxTXlEb 7GOXOWW1hYODUR6MDYVAQyG+5g7lET9wF1gt1FnJ8lZ8TcXEaJUYJHXIIpGZ8aOH Iy1CWC01SQzlNUSeFz0BYRlr5KblM7k49++kOd1yffwEyVsPERSxVHW07UJaRLPX VXs7KTvyiqHYkEKMu0s4al7rLPvmJTtj97Eff5tWpkz5FRazATU9H1LVscHMEnrc 2acdoHa30iC19mH7HGajcmuYhjg3bjt5O1IvGlkniYi5IlyDRNoCE1sv9RP3EDvB 2LgpvCAAqZYBQ5l54HOqUXqqT6IrB9W4ivVWw6DgivRmQx2J8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDUeyvwsFPT9cr3U7QGcppRGLyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg2OWM1Y2ItM2U5OC0z NWM4LTk5Y2YtMWQ5OTNjNGMzZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbkIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFHGL1HM8WXSTCXyBTGj1BugEZtZ3BAa8MfGZ4FFAMRzBk93ugHpp2U 0Jj4bh6ZEYoXqmIenH1Aa8NhCUN3ZOoyqEUMzwYF5r7dN5wPTTj16+YsmUlWFL6i eco3MKsO6JMiPyjWUcupGUof/Flgy2fdBxdilhnLhH4MR0yTe9mDUxqQ+qGnZsDz Kssd4AfWhKgSh/wpeXtNbmt0Xf7WMxwbtbbrajYoB3wnmKFYtAg7+ribSglDBc7W 4MjHRmVJY5Xkvfj/MP3Vdulep1/Bq6uYHY2GmFH5IDUMSNFqXd3LYpqfHT6NT78H UeehA6FZfpI17B5T0b6gXVAgkmwYtMk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:06 2025 by rpki-client