$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c56e6d0-0168-3adf-80cb-30118b4008bf.roa File: 7c56e6d0-0168-3adf-80cb-30118b4008bf.roa (raw, json) Hash identifier: Qktl6a5ivx6vj46xtd3VtbufPU783aGqNslm+A/LH4c= Subject key identifier: 43:0D:36:6C:45:78:B3:DA:CE:D9:64:7F:89:18:16:85:2E:22:80:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111E308DAAFAE81DE62000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c56e6d0-0168-3adf-80cb-30118b4008bf.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.31.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1e:30:8d:aa:fa:e8:1d:e6:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=1fffec61-5721-4fbf-8ab0-caaad8da311b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:d3:a2:e9:ba:61:af:f7:7a:a0:0c:96:64: ee:d5:d6:61:97:7b:e4:4e:fe:83:c7:9b:9c:6a:ee: ce:64:02:51:ca:5a:87:18:42:03:ab:a6:f0:97:3a: 3d:73:16:77:bd:7a:07:45:07:ac:7d:5c:04:3a:59: 7a:91:54:88:4b:d9:74:00:b2:4a:d8:c3:dd:d7:8e: 20:0f:89:38:f0:73:6c:94:d5:86:b5:40:b4:bb:00: fa:0c:94:96:34:65:88:0d:87:de:3f:61:4e:66:81: 59:a8:63:8f:37:32:e6:1a:3f:db:55:b6:d2:df:4d: 1e:3b:12:e6:38:a6:f1:5f:67:33:bf:b9:6b:71:73: 30:14:5b:09:bb:38:4f:4b:d3:4c:0e:60:47:28:6c: 2b:76:82:a3:45:05:41:32:7a:44:5a:84:46:15:6c: eb:d4:bb:5e:8e:90:02:5d:b0:5a:5b:4a:12:28:f9: 8a:85:12:a4:6f:b2:45:d4:4f:03:a7:9f:bb:6d:9f: 3d:c9:d5:1b:81:07:ae:81:cc:13:24:06:e7:a9:d7: 92:19:23:83:ac:06:e0:22:c3:6b:fb:e0:f4:ec:f0: 44:78:91:93:1b:64:2b:58:25:b9:42:71:dc:c9:06: 1b:5d:d5:07:0e:92:18:c9:6a:fa:76:db:bd:83:3d: 48:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0D:36:6C:45:78:B3:DA:CE:D9:64:7F:89:18:16:85:2E:22:80:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7c56e6d0-0168-3adf-80cb-30118b4008bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:41:ca:c5:fa:e3:42:d3:bc:06:e7:b4:b7:81:dd:f6:11:a9: 5f:50:2f:6a:bc:f3:1c:26:bf:e3:57:1b:2c:60:fc:73:bb:e1: 54:f5:2b:37:9c:95:60:b2:a5:67:cf:71:8a:a2:99:73:d7:a0: ac:7b:5d:be:58:7f:0f:48:0b:ff:7a:25:99:96:5f:ae:81:9a: e5:53:de:99:74:ef:eb:c3:5b:3f:c6:b2:20:0d:c6:9b:0e:60: db:02:cf:e0:6b:25:19:5f:b4:b6:cd:a9:78:02:eb:4b:8a:51: a0:51:58:c7:b2:bc:46:88:44:fe:f2:fa:8b:e8:da:dc:d2:0d: 75:ad:db:3e:4f:99:51:8a:31:67:c7:3e:9d:a0:7e:19:39:5a: 90:c2:f6:85:5f:95:3b:25:92:a8:d2:d1:05:11:8c:e6:01:80: d7:04:15:da:5b:11:38:32:e4:3c:f1:13:f1:c2:a1:50:15:31: 62:2f:79:34:c8:d0:eb:a7:b9:47:34:24:46:41:ef:60:a3:b8: c9:6e:64:bc:2d:89:22:2f:ee:38:51:3f:ad:29:1f:51:01:c5: 22:37:dc:3c:90:e3:6d:2c:08:22:0d:6b:e0:95:dc:3e:0e:74: c6:6c:73:df:be:25:b8:ce:ad:b7:f9:b8:e1:0d:c4:05:ea:0c: 90:8e:12:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER4wjar66B3mIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MWZmZmVjNjEtNTcyMS00ZmJmLThhYjAtY2FhYWQ4ZGEzMTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN/Toum6Ya/3eqAMlmTu1dZhl3vkTv6Dx5uc au7OZAJRylqHGEIDq6bwlzo9cxZ3vXoHRQesfVwEOll6kVSIS9l0ALJK2MPd144g D4k48HNslNWGtUC0uwD6DJSWNGWIDYfeP2FOZoFZqGOPNzLmGj/bVbbS300eOxLm OKbxX2czv7lrcXMwFFsJuzhPS9NMDmBHKGwrdoKjRQVBMnpEWoRGFWzr1LtejpAC XbBaW0oSKPmKhRKkb7JF1E8Dp5+7bZ89ydUbgQeugcwTJAbnqdeSGSODrAbgIsNr ++D07PBEeJGTG2QrWCW5QnHcyQYbXdUHDpIYyWr6dtu9gz1IqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMNNmxFeLPaztlkf4kYFoUuIoAyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2M1NmU2ZDAtMDE2OC0z YWRmLTgwY2ItMzAxMThiNDAwOGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdBysX640LTvAbntLeB3fYRqV9QL2q88xwmv+NXGyxg/HO74VT1Kzec lWCypWfPcYqimXPXoKx7Xb5Yfw9IC/96JZmWX66BmuVT3pl07+vDWz/GsiANxpsO YNsCz+BrJRlftLbNqXgC60uKUaBRWMeyvEaIRP7y+ovo2tzSDXWt2z5PmVGKMWfH Pp2gfhk5WpDC9oVflTslkqjS0QURjOYBgNcEFdpbETgy5DzxE/HCoVAVMWIveTTI 0OunuUc0JEZB72CjuMluZLwtiSIv7jhRP60pH1EBxSI33DyQ420sCCINa+CV3D4O dMZsc9++JbjOrbf5uOENxAXqDJCOEos= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:29 2025 by rpki-client