$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85b64629-1b7f-3911-8082-952cf287c054.roa File: 85b64629-1b7f-3911-8082-952cf287c054.roa (raw, json) Hash identifier: ChewEB9dK81dhZXY68LdkNTRwLDtrpIzjtEjNqkOxuA= Subject key identifier: A8:B4:54:1E:E4:C1:8C:42:8E:84:1B:E3:B8:E9:15:35:71:D1:59:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F4B6F1D2DCD3345C69E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85b64629-1b7f-3911-8082-952cf287c054.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.184.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f4:b6:f1:d2:dc:d3:34:5c:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=94d5de03-31ec-45be-a11c-1584ac905020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:16:7d:f8:39:15:95:ae:67:83:07:c3:21:18: 47:65:62:fb:b7:e9:c0:f2:7a:2b:e7:c5:3c:6a:b1: 71:8c:08:90:79:64:30:ec:20:d5:d2:4a:d1:ae:22: e5:29:10:f4:38:7a:eb:90:3e:82:e8:e5:92:4b:3c: 38:30:92:00:96:bc:cc:c7:78:67:af:64:bd:43:d2: 4d:45:74:07:45:38:22:9c:c5:28:a9:b6:07:56:b1: 7a:1b:a9:1f:7b:02:69:73:b9:51:1d:23:31:f5:8c: 79:d6:32:72:e7:cd:16:74:68:e1:ac:c7:d1:ca:68: 8e:7e:4d:d4:2e:c5:af:67:af:d4:b0:98:a4:82:87: 94:48:41:f7:e8:59:61:94:15:9c:4c:fb:7d:34:1f: 95:ec:02:2b:07:d1:84:09:1d:18:6d:9b:cd:37:1d: 50:88:57:df:2f:34:6a:6d:85:a7:49:8d:99:f6:bb: 41:50:f2:9e:6a:ec:21:bb:78:6b:d2:fa:fd:f9:b6: 3d:1b:a0:9a:ca:a5:a2:4f:4c:23:96:4d:0b:c9:64: 22:05:f2:c8:05:ee:dd:84:5d:00:cf:c6:8b:1b:2e: 0b:ea:54:e1:05:bc:03:8a:9b:1e:38:0f:a4:c1:51: 15:05:9a:1b:e5:ef:b3:5c:89:36:23:9d:bc:f5:67: 8b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B4:54:1E:E4:C1:8C:42:8E:84:1B:E3:B8:E9:15:35:71:D1:59:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/85b64629-1b7f-3911-8082-952cf287c054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ef:09:12:fa:6b:fe:13:2c:61:45:f5:07:0d:e4:ba:df:88: 69:ae:95:cd:d1:60:f3:85:7d:bc:bf:40:d6:5e:9f:0c:31:77: 5b:69:1c:1b:e6:d9:85:fb:0a:65:58:f1:a0:13:c8:55:b0:ce: f9:98:aa:a3:ff:dd:9e:e4:2d:42:da:61:f7:5b:bc:da:c0:81: f7:5b:4e:9c:55:9a:5c:92:50:66:38:27:09:7c:e0:19:8b:4a: 41:11:05:4e:d3:27:4b:85:54:05:d7:c3:c5:e4:94:8e:c7:36: b7:53:15:18:c1:09:b0:6f:a6:6c:e9:47:2c:41:ce:46:66:6e: 76:60:ca:ff:33:4a:9b:93:d0:4c:98:91:4d:ea:95:7b:9a:25: 42:46:00:9a:b6:f9:77:6e:9a:93:ea:2d:39:80:72:48:90:e0: 35:da:08:1c:35:78:89:f7:b3:6d:7b:cf:d5:e2:64:ee:39:4d: 1b:50:be:29:6a:2f:e9:40:e0:96:8d:a9:71:8e:f8:0f:e4:51: b6:bc:3e:b8:3c:69:a1:ec:c3:67:b4:19:35:42:f2:7e:85:e8: ce:73:39:22:3e:8f:ac:9b:bb:e6:3c:1d:bc:b1:ea:36:3c:7f: b6:76:fe:06:7c:4c:8e:2d:08:b5:e9:2b:bf:d8:27:96:f9:a9: 81:60:ca:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPS28dLc0zRcaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk OTRkNWRlMDMtMzFlYy00NWJlLWExMWMtMTU4NGFjOTA1MDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+BZ9+DkVla5ngwfDIRhHZWL7t+nA8nor58U8 arFxjAiQeWQw7CDV0krRriLlKRD0OHrrkD6C6OWSSzw4MJIAlrzMx3hnr2S9Q9JN RXQHRTginMUoqbYHVrF6G6kfewJpc7lRHSMx9Yx51jJy580WdGjhrMfRymiOfk3U LsWvZ6/UsJikgoeUSEH36FlhlBWcTPt9NB+V7AIrB9GECR0YbZvNNx1QiFffLzRq bYWnSY2Z9rtBUPKeauwhu3hr0vr9+bY9G6CayqWiT0wjlk0LyWQiBfLIBe7dhF0A z8aLGy4L6lThBbwDipseOA+kwVEVBZob5e+zXIk2I5289WeLTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKi0VB7kwYxCjoQb47jpFTVx0VlwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODViNjQ2MjktMWI3Zi0z OTExLTgwODItOTUyY2YyODdjMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPvCRL6a/4TLGFF9QcN5LrfiGmulc3RYPOFfby/QNZenwwxd1tpHBvm 2YX7CmVY8aATyFWwzvmYqqP/3Z7kLULaYfdbvNrAgfdbTpxVmlySUGY4Jwl84BmL SkERBU7TJ0uFVAXXw8XklI7HNrdTFRjBCbBvpmzpRyxBzkZmbnZgyv8zSpuT0EyY kU3qlXuaJUJGAJq2+XdumpPqLTmAckiQ4DXaCBw1eIn3s217z9XiZO45TRtQvilq L+lA4JaNqXGO+A/kUba8Prg8aaHsw2e0GTVC8n6F6M5zOSI+j6ybu+Y8Hbyx6jY8 f7Z2/gZ8TI4tCLXpK7/YJ5b5qYFgym4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:34 2025 by rpki-client