$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe85862-c43f-3109-ac36-36ce14128779.roa File: 8fe85862-c43f-3109-ac36-36ce14128779.roa (raw, json) Hash identifier: 3q8ubvn10hC0BQzSPQrE3d906XcdkCzvOKqhlVnqmIU= Subject key identifier: C2:CB:07:19:A5:30:0C:60:D8:C7:E5:4D:F7:5A:EA:A1:8E:38:36:92 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F3442EB88B4E4985A800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe85862-c43f-3109-ac36-36ce14128779.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 139.55.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f3:44:2e:b8:8b:4e:49:85:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=10897dd0-c95c-4f4a-8449-57a91c910277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:16:c7:d5:f2:f1:59:b8:91:46:2d:c1:a5: be:2a:05:53:f5:42:ef:90:bd:ce:aa:21:dd:b1:ac: 35:b5:20:6c:23:69:ef:a6:4b:31:a6:b0:db:b4:e6: 60:4b:94:f5:b0:c8:d3:dc:93:a2:f7:9a:a4:c8:ae: 7c:fe:e0:66:d5:04:ea:ab:d3:85:2c:88:6c:21:f0: 9a:b1:93:d6:6a:c7:4d:e5:cc:1a:27:97:4c:9c:10: be:e9:3c:4c:41:87:85:96:2f:90:68:af:a6:76:0d: 65:c4:85:ee:8c:d5:0e:25:0f:fc:16:35:04:f9:de: 18:4c:2b:c8:14:4d:67:25:a5:4c:5e:60:a3:da:11: 64:ce:3b:e4:e2:c9:66:c8:7d:2a:ec:ac:2a:79:2d: fa:e1:dd:d6:67:11:c2:20:91:f9:b7:8b:05:cc:4b: 1b:20:1d:a7:f8:4a:75:ca:4f:3b:3a:62:e7:21:6e: 26:bb:f5:3d:fc:62:84:a3:67:ec:09:67:36:72:37: 8a:6c:81:ae:df:9c:cb:4d:95:af:3d:1c:4d:0c:f6: ac:2c:80:88:9d:19:b2:ab:5d:a1:2e:23:12:60:2e: 86:86:66:b9:1e:9b:3b:ca:df:a5:45:e7:28:e8:0f: b1:f8:e2:02:26:9f:fb:23:7e:35:59:9c:35:b9:43: e2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CB:07:19:A5:30:0C:60:D8:C7:E5:4D:F7:5A:EA:A1:8E:38:36:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8fe85862-c43f-3109-ac36-36ce14128779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c8:5d:17:0a:d6:41:0c:2e:22:a6:c6:de:46:41:53:84:58: 1b:9c:5f:24:01:15:67:78:34:20:a7:44:50:3e:df:29:3c:b5: a5:7e:c5:5c:b5:0f:98:20:83:93:62:c9:c9:1e:e8:b3:fa:a6: 8f:1f:8d:cc:ee:27:fa:86:26:e6:3d:59:f5:95:aa:0f:8e:55: 2a:cf:74:5c:f4:2b:ae:91:ff:c6:a1:ed:f9:25:12:7b:61:3a: 9e:29:a4:fe:33:86:ae:47:8a:2f:48:64:4b:fd:c0:ee:d5:85: 9f:47:fd:69:c1:7d:0b:fb:19:be:3c:8c:ac:b7:4a:e7:fb:ab: 43:04:ca:9d:00:12:3a:ac:de:a3:ce:e8:e0:eb:85:7c:d7:f0: ff:16:4d:3f:44:a5:cd:97:45:7b:0d:f6:55:4d:3a:3f:d2:81: 82:cc:d8:e6:d9:a7:72:c5:b3:a1:c9:3c:cd:8c:31:ee:ba:f5: 30:66:42:0a:a8:fd:27:fa:43:73:95:30:e6:9f:8e:58:4e:5d: 1b:7c:ed:6b:60:57:c9:c9:22:34:34:22:3d:22:e6:6b:ba:08: f1:03:61:a8:cf:a6:c9:9f:63:9b:22:36:8b:68:12:c4:cd:47: e9:33:ad:5d:40:86:88:39:7c:ea:43:40:b7:98:74:d9:e7:e1: 22:73:8f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPNELriLTkmFqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MTA4OTdkZDAtYzk1Yy00ZjRhLTg0NDktNTdhOTFjOTEwMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6roWx9Xy8Vm4kUYtwaW+KgVT9ULvkL3OqiHd saw1tSBsI2nvpksxprDbtOZgS5T1sMjT3JOi95qkyK58/uBm1QTqq9OFLIhsIfCa sZPWasdN5cwaJ5dMnBC+6TxMQYeFli+QaK+mdg1lxIXujNUOJQ/8FjUE+d4YTCvI FE1nJaVMXmCj2hFkzjvk4slmyH0q7KwqeS364d3WZxHCIJH5t4sFzEsbIB2n+Ep1 yk87OmLnIW4mu/U9/GKEo2fsCWc2cjeKbIGu35zLTZWvPRxNDPasLICInRmyq12h LiMSYC6Ghma5Hps7yt+lReco6A+x+OICJp/7I341WZw1uUPiFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLLBxmlMAxg2MflTfda6qGOODaSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGZlODU4NjItYzQzZi0z MTA5LWFjMzYtMzZjZTE0MTI4Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizeuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXIXRcK1kEMLiKmxt5GQVOEWBucXyQBFWd4NCCnRFA+3yk8taV+xVy1 D5ggg5Niycke6LP6po8fjczuJ/qGJuY9WfWVqg+OVSrPdFz0K66R/8ah7fklEnth Op4ppP4zhq5Hii9IZEv9wO7VhZ9H/WnBfQv7Gb48jKy3Suf7q0MEyp0AEjqs3qPO 6ODrhXzX8P8WTT9Epc2XRXsN9lVNOj/SgYLM2ObZp3LFs6HJPM2MMe669TBmQgqo /Sf6Q3OVMOafjlhOXRt87WtgV8nJIjQ0Ij0i5mu6CPEDYajPpsmfY5siNotoEsTN R+kzrV1Ahog5fOpDQLeYdNnn4SJzj2I= -----END CERTIFICATE-----Generated at Fri Mar 14 13:21:51 2025 by rpki-client