$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942442b3-c04c-308c-b253-fa2e7d4a7986.roa File: 942442b3-c04c-308c-b253-fa2e7d4a7986.roa (raw, json) Hash identifier: /GrqJ+PFBrEOfAujldjrGn+okGCkJFBW7d6p+esBsV0= Subject key identifier: A5:17:30:F1:97:C5:A2:84:8C:20:2C:6C:77:70:98:3A:DB:1A:09:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB571C0E412E194B428C600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942442b3-c04c-308c-b253-fa2e7d4a7986.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.191.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:71:c0:e4:12:e1:94:b4:28:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=f66e7510-8043-4044-aece-7dc10d4e2bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:b3:1b:0c:fa:e5:ff:60:f5:8d:4b:e4:29: 59:67:c4:9f:eb:96:53:83:3e:94:ed:f0:74:27:b4: 25:c8:0d:78:4b:c6:63:16:e4:09:a9:66:71:c7:8e: 51:64:47:8e:ae:ce:ef:57:45:0a:2c:d1:c8:14:ce: 65:a6:7d:4e:eb:bc:48:d7:3f:e6:ce:ad:cc:2d:5d: 5f:f4:da:e7:f3:d9:bd:8d:f3:31:10:8b:b8:0a:cc: 97:f6:05:cb:65:c5:00:bf:fe:77:4e:62:f8:24:4b: da:58:46:31:b4:e7:9b:ff:d5:d6:86:04:e7:42:70: 42:1a:37:c2:ff:f5:59:81:d3:3a:d3:f7:51:94:05: 2f:71:fe:b3:87:96:1d:ee:e2:e7:ad:54:5d:83:d8: 36:81:45:f8:e1:4b:d1:26:5d:a6:4d:ee:b5:78:58: 90:a3:41:ac:71:82:06:c9:7e:98:69:70:c7:a3:35: 97:b7:36:dd:e3:86:25:75:50:7b:58:52:fc:1c:9a: 4e:e2:88:75:37:57:4d:d1:bc:df:c5:d0:2a:6e:ba: f6:dd:ad:12:f8:ee:2e:99:01:cb:87:1e:c2:5f:d2: 27:24:1c:c2:c4:b0:8f:c5:de:6d:17:71:85:c0:01: 04:b0:88:e8:40:50:62:60:b8:99:d4:6c:fd:93:e7: b7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:17:30:F1:97:C5:A2:84:8C:20:2C:6C:77:70:98:3A:DB:1A:09:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/942442b3-c04c-308c-b253-fa2e7d4a7986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8a:5f:b6:e6:4a:86:0a:2c:69:8b:05:b5:ef:e6:26:00:05: 19:28:16:c0:69:bd:16:1f:56:a8:16:4a:6f:52:58:b1:9f:41: d5:22:3a:a5:b2:dd:81:61:c0:d6:a0:6f:15:08:5b:e6:49:b8: 97:2b:87:b7:a1:46:8e:2b:53:67:05:38:f4:5e:1e:5c:99:4e: 93:0a:ca:1c:d4:e8:56:e6:34:73:bf:0a:90:48:fb:5a:7f:09: a2:8f:09:3b:c1:64:8a:af:59:39:71:d5:ad:7a:02:21:e8:8f: b3:a6:da:be:7b:07:ed:98:40:60:be:9c:7d:b4:fd:3a:ad:5b: 56:56:4e:4e:7f:e0:03:91:37:3c:e9:23:a9:d3:02:20:e8:f8: 90:63:9d:5f:fd:e9:04:26:d5:bd:f6:17:eb:23:a2:89:63:87: 5a:b9:b4:45:48:89:b4:2f:9e:37:29:59:83:6f:4d:90:99:17: fe:9e:e7:87:13:ac:d7:6b:8e:56:ec:04:1d:79:37:09:13:2a: 59:63:e1:aa:c5:b6:7d:4b:ec:6c:a9:ea:fc:23:c9:01:a4:78: e7:a0:ae:9d:00:b7:43:59:4f:8d:5e:d9:42:3a:2b:b3:dc:1a: 18:8e:11:d4:0b:fc:f2:bc:a2:42:db:6f:41:71:87:86:67:a9: 8b:d7:da:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXHA5BLhlLQoxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjY2ZTc1MTAtODA0My00MDQ0LWFlY2UtN2RjMTBkNGUyYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3KzGwz65f9g9Y1L5ClZZ8Sf65ZTgz6U7fB0 J7QlyA14S8ZjFuQJqWZxx45RZEeOrs7vV0UKLNHIFM5lpn1O67xI1z/mzq3MLV1f 9Nrn89m9jfMxEIu4CsyX9gXLZcUAv/53TmL4JEvaWEYxtOeb/9XWhgTnQnBCGjfC //VZgdM60/dRlAUvcf6zh5Yd7uLnrVRdg9g2gUX44UvRJl2mTe61eFiQo0GscYIG yX6YaXDHozWXtzbd44YldVB7WFL8HJpO4oh1N1dN0bzfxdAqbrr23a0S+O4umQHL hx7CX9InJBzCxLCPxd5tF3GFwAEEsIjoQFBiYLiZ1Gz9k+e32QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUXMPGXxaKEjCAsbHdwmDrbGgkDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQyNDQyYjMtYzA0Yy0z MDhjLWIyNTMtZmEyZTdkNGE3OTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeKX7bmSoYKLGmLBbXv5iYABRkoFsBpvRYfVqgWSm9SWLGfQdUiOqWy 3YFhwNagbxUIW+ZJuJcrh7ehRo4rU2cFOPReHlyZTpMKyhzU6FbmNHO/CpBI+1p/ CaKPCTvBZIqvWTlx1a16AiHoj7Om2r57B+2YQGC+nH20/TqtW1ZWTk5/4AORNzzp I6nTAiDo+JBjnV/96QQm1b32F+sjooljh1q5tEVIibQvnjcpWYNvTZCZF/6e54cT rNdrjlbsBB15NwkTKllj4arFtn1L7Gyp6vwjyQGkeOegrp0At0NZT41e2UI6K7Pc GhiOEdQL/PK8okLbb0Fxh4ZnqYvX2t4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:21 2025 by rpki-client