$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa File: 86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa (raw, json) Hash identifier: FgAjZkGOpuzhrNFkPI1Og3zLS73FuierK1A51/Z01u0= Subject key identifier: 37:7F:67:1D:84:26:23:F3:25:E3:06:C1:7B:22:66:D1:C0:7D:AB:6A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0AC668F2D36D5B35A4EC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 69.40.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:ac:66:8f:2d:36:d5:b3:5a:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=b7433685-1449-431c-93d1-b6f9b24c8a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bf:07:83:81:e8:15:e3:a2:45:79:32:cb:2d: bb:b5:39:66:f2:a6:50:f9:db:d7:1d:f0:d3:1e:9c: 9f:4f:76:3e:78:46:7b:d5:5e:64:89:52:c3:1c:ef: d8:d9:28:85:ab:54:e2:76:c4:97:6a:fb:78:e6:d0: 28:e2:24:69:c1:9e:00:fa:52:5d:93:d9:27:70:28: ce:42:c9:9b:74:5c:8b:e2:dc:9e:73:80:44:af:f0: 31:1b:e8:fa:52:27:30:fa:3f:88:95:c6:32:fa:ea: 38:55:de:fc:5c:82:2d:7e:f5:06:25:8e:eb:e8:d0: c4:4b:fd:7f:71:a3:be:5e:87:53:c1:9b:92:39:51: d2:ae:1e:5d:5a:d5:54:91:4e:b9:4f:57:d3:2a:6a: 14:5f:c8:3d:b0:1c:05:ec:02:4f:db:f3:77:ef:ab: a3:54:f9:d5:2d:aa:9f:e3:38:dd:ce:a6:50:d6:92: 81:a1:99:40:0c:40:b6:4c:36:56:d1:57:92:4d:c7: 0c:63:d8:c3:0e:36:62:78:be:74:f7:65:4e:c8:79: 3d:13:2e:37:b5:75:0d:14:8e:83:a9:cd:58:8f:c6: 63:cf:b7:28:32:49:31:db:f9:66:68:df:65:93:e3: b7:0e:50:d9:e8:63:e9:55:19:9d:79:83:a2:44:29: 21:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:7F:67:1D:84:26:23:F3:25:E3:06:C1:7B:22:66:D1:C0:7D:AB:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/86daa0b9-a1af-3e9b-9277-1811ff6b1cf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5e:f7:a8:37:de:45:dd:4c:44:4a:c3:49:8e:e7:62:6b:f3: d4:f5:1d:b2:48:0a:d6:da:e6:5a:d3:93:1c:f4:13:4b:6d:d1: 3d:d7:63:fa:4e:5e:77:03:7f:e3:42:13:31:6f:42:22:ff:37: 29:e2:2c:5a:b3:f4:78:89:a2:2a:58:1a:0e:10:66:2b:fb:12: a2:27:f0:5a:7b:62:86:ea:14:66:3e:e4:e1:ec:4a:50:93:71: ac:7a:ab:c0:19:91:32:b7:07:b0:b4:9a:3c:b9:3a:33:ae:91: 24:2a:10:04:c4:97:67:0f:b4:79:d7:25:66:22:6f:bc:c0:b5: ef:80:cf:b5:d6:ae:24:a9:75:14:42:7b:eb:bf:a1:1f:b5:d8: e8:c7:5f:1d:86:bc:1b:94:d1:c7:2f:13:20:41:8b:6f:79:dc: 13:e2:cc:1e:b8:17:f8:47:39:26:c3:3a:17:2a:c3:0f:4d:d1: 51:de:79:90:5a:d5:79:b1:98:64:b3:f9:3a:61:f1:e0:07:29: ef:47:fe:44:9f:e5:18:5e:14:25:c0:fa:9b:77:db:48:cd:39: c5:9d:d3:ac:ba:78:92:a9:42:86:26:4b:34:57:09:bb:32:1e: 6a:40:d4:67:27:2b:2d:ba:01:12:38:4b:f5:2c:7f:5c:c0:51: 06:76:d3:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4Kxmjy021bNaTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk Yjc0MzM2ODUtMTQ0OS00MzFjLTkzZDEtYjZmOWIyNGM4YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir8Hg4HoFeOiRXkyyy27tTlm8qZQ+dvXHfDT HpyfT3Y+eEZ71V5kiVLDHO/Y2SiFq1TidsSXavt45tAo4iRpwZ4A+lJdk9kncCjO QsmbdFyL4tyec4BEr/AxG+j6Uicw+j+IlcYy+uo4Vd78XIItfvUGJY7r6NDES/1/ caO+XodTwZuSOVHSrh5dWtVUkU65T1fTKmoUX8g9sBwF7AJP2/N376ujVPnVLaqf 4zjdzqZQ1pKBoZlADEC2TDZW0VeSTccMY9jDDjZieL5092VOyHk9Ey43tXUNFI6D qc1Yj8Zjz7coMkkx2/lmaN9lk+O3DlDZ6GPpVRmdeYOiRCkhKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDd/Zx2EJiPzJeMGwXsiZtHAfatqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODZkYWEwYjktYTFhZi0z ZTliLTkyNzctMTgxMWZmNmIxY2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACde96g33kXdTERKw0mO52Jr89T1HbJICtba5lrTkxz0E0tt0T3XY/pO XncDf+NCEzFvQiL/NyniLFqz9HiJoipYGg4QZiv7EqIn8Fp7YobqFGY+5OHsSlCT cax6q8AZkTK3B7C0mjy5OjOukSQqEATEl2cPtHnXJWYib7zAte+Az7XWriSpdRRC e+u/oR+12OjHXx2GvBuU0ccvEyBBi2953BPizB64F/hHOSbDOhcqww9N0VHeeZBa 1XmxmGSz+Tph8eAHKe9H/kSf5RheFCXA+pt320jNOcWd06y6eJKpQoYmSzRXCbsy HmpA1GcnKy26ARI4S/Usf1zAUQZ201s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:38 2025 by rpki-client