$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa File: 871d8d50-3938-3054-a9bb-27338048e4d9.roa (raw, json) Hash identifier: QxNdFVb7wW5sVQ0T8NfzNngYhTtj55JB4L8HeVSKbDY= Subject key identifier: F9:F1:BD:C5:E3:97:16:E8:F9:E2:0E:FF:CF:86:A9:A7:5A:E9:A7:CA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABBF8CD98011DC7497CD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.213.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bf:8c:d9:80:11:dc:74:97:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=5b3727e0-930d-4c6c-8509-48ddcb8bba8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1c:d9:ab:27:4b:00:23:7b:dd:e3:73:18:16: 7f:e1:f7:b0:70:cc:de:b5:b9:09:75:89:0f:0f:b7: ac:a4:86:51:e5:06:8d:2c:c6:03:87:5c:b4:21:7a: b0:70:79:95:dc:a0:39:61:37:67:5d:b6:02:75:b6: 40:3e:8d:00:c3:32:4a:45:9b:04:e1:ef:26:fc:e5: f1:6b:35:a0:e9:6a:ca:36:60:1f:eb:28:7b:a7:ef: 84:28:f9:62:fc:eb:be:01:05:e7:c2:e6:6e:9e:3d: 89:f6:d1:e8:b4:72:d5:60:5d:71:a0:4b:8b:9d:19: 23:f6:3f:71:09:a8:aa:ae:32:60:24:25:4d:0e:60: 71:3d:da:96:12:b5:64:e9:0c:37:9a:e4:bd:da:8d: e2:2b:f9:65:5b:03:45:23:e2:a1:c0:c6:df:c9:04: 42:71:80:bb:ff:84:a0:03:d9:55:b0:18:ba:ea:1f: 53:7b:34:c1:cb:ba:48:e0:12:11:c5:17:0a:78:78: bf:0f:e1:d8:7e:dd:df:6b:1e:dd:54:4f:d6:ff:a2: 1b:ca:c1:b1:88:14:61:47:68:85:c4:91:a2:78:38: 3c:b5:26:07:f8:53:73:e2:dd:32:b1:51:5d:93:8b: 4e:19:93:78:bb:6d:62:a9:df:8b:98:cf:93:0e:0f: fd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F1:BD:C5:E3:97:16:E8:F9:E2:0E:FF:CF:86:A9:A7:5A:E9:A7:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/871d8d50-3938-3054-a9bb-27338048e4d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.213.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:a2:75:35:21:36:4f:e0:74:7d:f4:36:b7:6b:19:a4:59:19: 46:af:0d:2f:88:b5:92:51:0c:07:47:78:f4:56:05:58:2d:d4: f3:ee:bc:05:ab:52:38:cf:e8:01:cd:4f:4d:1c:2a:02:c9:f5: b3:6d:8b:70:9d:4f:bd:0d:10:9a:77:9c:f3:fc:8f:5a:84:95: 4e:de:bf:30:10:48:ff:3f:87:e4:a9:ed:ed:65:21:ba:8b:49: 88:91:8c:6b:f2:74:ca:e0:6b:ff:63:a8:5c:54:d6:1d:4d:c4: e1:d3:4e:f6:c2:19:3b:6c:da:97:1a:05:fb:5a:ae:3b:5d:af: 2e:fc:a8:13:cb:a1:d2:89:4f:68:83:cc:34:37:30:76:99:a5: 08:00:36:cc:3e:da:2b:60:0a:0e:4b:cc:8e:3c:37:ed:61:d7: ac:92:b2:54:6c:1a:29:57:7d:c8:3b:64:ca:cf:d4:0d:54:42: 61:92:84:29:29:1f:7c:16:6f:58:4f:31:74:b1:5b:63:90:0b: 0a:93:b4:45:15:df:96:5f:ab:55:92:ee:ae:8a:c9:45:d2:81: 18:7e:ac:4f:84:d7:e4:1d:27:6a:9b:10:76:dd:0a:4b:04:7a: 46:7b:bf:42:a6:ba:a8:c6:81:3a:86:a9:00:f6:f4:c7:94:b3: af:99:5a:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7+M2YAR3HSXzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NWIzNzI3ZTAtOTMwZC00YzZjLTg1MDktNDhkZGNiOGJiYThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBzZqydLACN73eNzGBZ/4fewcMzetbkJdYkP D7espIZR5QaNLMYDh1y0IXqwcHmV3KA5YTdnXbYCdbZAPo0AwzJKRZsE4e8m/OXx azWg6WrKNmAf6yh7p++EKPli/Ou+AQXnwuZunj2J9tHotHLVYF1xoEuLnRkj9j9x CaiqrjJgJCVNDmBxPdqWErVk6Qw3muS92o3iK/llWwNFI+KhwMbfyQRCcYC7/4Sg A9lVsBi66h9TezTBy7pI4BIRxRcKeHi/D+HYft3fax7dVE/W/6IbysGxiBRhR2iF xJGieDg8tSYH+FNz4t0ysVFdk4tOGZN4u21iqd+LmM+TDg/9lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnxvcXjlxbo+eIO/8+Gqada6afKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODcxZDhkNTAtMzkzOC0z MDU0LWE5YmItMjczMzgwNDhlNGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErdWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAImidTUhNk/gdH30NrdrGaRZGUavDS+ItZJRDAdHePRWBVgt1PPuvAWr UjjP6AHNT00cKgLJ9bNti3CdT70NEJp3nPP8j1qElU7evzAQSP8/h+Sp7e1lIbqL SYiRjGvydMrga/9jqFxU1h1NxOHTTvbCGTts2pcaBftarjtdry78qBPLodKJT2iD zDQ3MHaZpQgANsw+2itgCg5LzI48N+1h16ySslRsGilXfcg7ZMrP1A1UQmGShCkp H3wWb1hPMXSxW2OQCwqTtEUV35Zfq1WS7q6KyUXSgRh+rE+E1+QdJ2qbEHbdCksE ekZ7v0KmuqjGgTqGqQD29MeUs6+ZWiM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:20 2025 by rpki-client