$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa File: 68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa (raw, json) Hash identifier: uKXW0sTEGEg2RiPTiamUfJn7SK4MjJ++7SrszuIOfFw= Subject key identifier: A7:E7:DB:CA:B7:28:6A:F1:41:AD:B0:73:B4:DC:6A:90:5B:72:8D:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848116FB70C96AF896671CCC700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 71.28.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:b7:0c:96:af:89:66:71:cc:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=ef1c81ad-7c46-4cc1-ac1d-367fc549bebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ef:da:52:d0:3e:10:db:e8:a9:ba:45:b4:25: 0f:f1:0d:a8:75:10:8b:7d:b4:32:8c:f0:3a:b1:03: 86:1e:78:e5:0d:3f:b2:ff:af:24:37:52:17:bc:4f: 3c:8f:a4:63:2d:d2:2e:f9:bb:cd:d1:96:1a:bd:d4: 7c:09:af:5e:5b:e2:62:7b:b7:bc:3a:d7:81:bd:31: 50:79:5e:11:40:45:de:14:b2:d8:91:bb:db:f4:ba: 16:0b:ec:2e:be:f6:70:cc:c7:d7:12:37:30:58:13: ce:d7:48:d1:d9:ee:80:3d:7a:7c:7b:09:ab:39:00: 3c:b7:56:1d:21:78:f1:d0:51:ed:a8:0f:eb:0c:c0: 34:86:a0:56:48:a0:c0:0a:52:b7:e4:2a:b3:f3:ae: ba:39:fd:3a:dc:6e:ec:06:14:42:2d:bc:f4:66:a8: 40:70:f0:17:d0:ef:ca:06:05:ea:08:a1:99:2b:83: 41:52:2a:00:a7:9c:08:7f:09:c9:6d:ae:c1:51:6b: e9:c4:32:5e:81:0c:65:4f:63:f8:ab:7f:81:7d:37: 94:fc:d8:f0:34:15:ab:40:53:07:7a:69:e1:ed:a0: fc:7d:f5:97:3f:50:03:ff:32:b5:d3:13:e8:25:d8: 8a:4b:a9:a4:5c:26:9d:0e:28:fa:9a:7d:8e:ae:f4: 02:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E7:DB:CA:B7:28:6A:F1:41:AD:B0:73:B4:DC:6A:90:5B:72:8D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/68850c15-aa56-3ecd-ba8d-07e4f69fc0e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ad:93:81:62:8a:68:2a:74:63:0a:88:ab:70:69:3d:87:1c: 55:77:b7:44:8c:01:7e:a5:19:bf:bb:e8:71:20:53:37:48:db: b8:aa:ab:f6:41:96:30:8e:53:f8:b2:25:19:a4:4d:d3:2a:1e: 3a:b6:17:44:85:35:71:ba:49:73:1a:83:af:0c:f5:84:0b:c8: a4:6d:aa:e6:d1:f3:08:de:1e:4b:6d:a3:29:f9:b1:60:b9:90: 99:4a:f8:8e:0c:14:ad:66:c0:20:c6:e0:5f:0f:44:28:1d:3c: 34:1f:c2:3f:59:ed:1e:86:39:c4:14:dd:51:40:d7:e1:18:e2: c2:87:79:4c:4c:c1:a0:ac:9d:43:02:3e:97:da:0b:9d:f6:00: fa:f2:b5:5d:24:a3:97:5b:d3:34:11:4e:0a:d7:67:77:d1:99: 94:cd:c7:75:27:56:51:37:dd:a6:55:34:8e:f4:89:75:c4:1d: 4c:4b:0c:21:69:1b:1f:54:b2:8d:ca:94:a8:ca:77:3f:62:50: c8:f3:16:c8:a5:b4:6a:1e:6d:8d:45:55:6d:9c:8d:b1:c8:5b: 98:ca:09:67:5d:a2:bb:35:d2:6a:59:fa:0e:f7:fc:1a:ad:82: b7:87:0c:9f:50:ac:3f:f7:2b:58:3b:39:ba:fa:8a:bb:e3:44: 0b:b5:22:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7cMlq+JZnHMxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk ZWYxYzgxYWQtN2M0Ni00Y2MxLWFjMWQtMzY3ZmM1NDliZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+/aUtA+ENvoqbpFtCUP8Q2odRCLfbQyjPA6 sQOGHnjlDT+y/68kN1IXvE88j6RjLdIu+bvN0ZYavdR8Ca9eW+Jie7e8OteBvTFQ eV4RQEXeFLLYkbvb9LoWC+wuvvZwzMfXEjcwWBPO10jR2e6APXp8ewmrOQA8t1Yd IXjx0FHtqA/rDMA0hqBWSKDAClK35Cqz8666Of063G7sBhRCLbz0ZqhAcPAX0O/K BgXqCKGZK4NBUioAp5wIfwnJba7BUWvpxDJegQxlT2P4q3+BfTeU/NjwNBWrQFMH emnh7aD8ffWXP1AD/zK10xPoJdiKS6mkXCadDij6mn2OrvQCOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfn28q3KGrxQa2wc7TcapBbco1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg4NTBjMTUtYWE1Ni0z ZWNkLWJhOGQtMDdlNGY2OWZjMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6tk4FiimgqdGMKiKtwaT2HHFV3t0SMAX6lGb+76HEgUzdI27iqq/ZB ljCOU/iyJRmkTdMqHjq2F0SFNXG6SXMag68M9YQLyKRtqubR8wjeHkttoyn5sWC5 kJlK+I4MFK1mwCDG4F8PRCgdPDQfwj9Z7R6GOcQU3VFA1+EY4sKHeUxMwaCsnUMC PpfaC532APrytV0ko5db0zQRTgrXZ3fRmZTNx3UnVlE33aZVNI70iXXEHUxLDCFp Gx9Uso3KlKjKdz9iUMjzFsiltGoebY1FVW2cjbHIW5jKCWddors10mpZ+g73/Bqt greHDJ9QrD/3K1g7Obr6irvjRAu1IsM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:40 2025 by rpki-client