$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa File: 9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa (raw, json) Hash identifier: 0xDW7Cfu+IvWMUk+LoVyOwPTR6osTabNlJzGAfYIY+A= Subject key identifier: 84:BC:DF:DB:32:FA:CC:25:F7:69:03:95:94:FC:63:49:2A:58:51:B8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21118F840FF71FDDB206DD0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 63.254.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:18:f8:40:ff:71:fd:db:20:6d:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=cdcbe5a0-9ab2-4ae8-82dc-a7afc005db5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:3d:08:2d:13:48:95:fc:03:bb:f7:43:48: 37:ca:f0:d4:cd:99:77:f2:45:6c:6f:d4:51:38:13: 04:74:09:70:2a:dd:8d:1a:1e:2b:73:0e:3a:c3:7e: f8:43:89:cf:14:ce:0d:1e:10:61:72:96:d2:02:f3: b4:43:53:35:be:2b:24:08:a9:db:98:eb:21:d3:85: 82:0a:af:7f:d2:91:5a:5b:d1:b7:75:91:49:ea:2a: ae:35:b6:5b:b8:89:3b:fc:b8:98:c4:3c:70:4b:6b: 79:f8:73:b4:fa:e0:8d:75:0b:b5:5a:a2:31:71:f6: ed:02:cc:c7:02:59:0b:1e:f1:b6:d0:c0:75:45:b4: ad:58:86:a6:59:19:59:c2:75:80:8d:10:c0:01:b1: 33:29:df:82:ef:71:be:b5:b4:bd:08:0d:96:70:67: 87:12:90:70:7a:12:15:5e:16:b3:b2:50:14:06:8a: 45:5c:e7:8a:4f:12:37:5a:b9:a4:79:3e:d6:56:92: 40:65:3d:c4:6c:48:75:d3:16:f0:06:8b:6d:40:c0: 63:42:29:b4:8b:1b:28:c9:8c:39:cd:e1:85:e7:a1: a5:cc:0a:55:c7:6a:3b:52:bb:85:c6:93:55:eb:74: 8e:a9:0d:83:21:c1:d9:a7:86:8d:9e:f4:bd:5e:8f: 58:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BC:DF:DB:32:FA:CC:25:F7:69:03:95:94:FC:63:49:2A:58:51:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9fbfc454-4acf-3c45-8bfc-384a6780f33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:cf:e8:89:4b:25:c9:55:08:47:97:eb:cc:b0:e4:da:78:26: 30:f9:92:ca:21:c0:4c:0a:e8:88:f9:ac:1d:da:1a:14:5c:7e: fc:ef:c2:af:4b:0c:06:1f:66:4c:45:52:b3:3d:05:a5:8a:51: e3:94:38:4d:6b:4a:76:45:27:a5:4c:2d:69:53:31:6e:64:0b: 8d:2a:81:ee:29:74:a1:8a:d3:ce:41:30:a4:cc:c1:0e:0d:bc: f2:c3:2d:75:ce:ab:6f:59:af:a4:1d:56:19:98:3c:c6:62:12: f0:a6:9c:39:22:c4:0d:70:93:b9:ac:f0:f4:e0:71:f1:67:67: b9:48:29:34:28:f4:6d:ff:3c:3e:01:69:ee:ae:ba:97:86:b5: 40:b2:26:64:1e:0c:cd:d8:0b:7d:1e:4e:d6:28:d2:72:3b:d4: 02:15:e4:ec:5c:44:08:f8:85:ec:3d:a7:ef:1e:00:7f:43:43: 94:a7:6c:05:a3:f7:6e:25:fc:67:dc:91:a7:51:d1:ac:8f:21: ff:b4:fa:a7:8c:6a:0b:9b:af:f2:13:2b:0b:25:12:51:45:2c: 93:a6:b2:0e:43:e9:cf:a6:f2:e6:27:c7:e9:60:83:1f:41:0b: 61:37:70:04:f4:0a:ba:51:fd:6c:9a:f6:3f:71:10:fe:18:aa: a6:e7:36:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERj4QP9x/dsgbdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2RjYmU1YTAtOWFiMi00YWU4LTgyZGMtYTdhZmMwMDVkYjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsw49CC0TSJX8A7v3Q0g3yvDUzZl38kVsb9RR OBMEdAlwKt2NGh4rcw46w374Q4nPFM4NHhBhcpbSAvO0Q1M1viskCKnbmOsh04WC Cq9/0pFaW9G3dZFJ6iquNbZbuIk7/LiYxDxwS2t5+HO0+uCNdQu1WqIxcfbtAszH AlkLHvG20MB1RbStWIamWRlZwnWAjRDAAbEzKd+C73G+tbS9CA2WcGeHEpBwehIV XhazslAUBopFXOeKTxI3WrmkeT7WVpJAZT3EbEh10xbwBottQMBjQim0ixsoyYw5 zeGF56GlzApVx2o7UruFxpNV63SOqQ2DIcHZp4aNnvS9Xo9YRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS839sy+swl92kDlZT8Y0kqWFG4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWZiZmM0NTQtNGFjZi0z YzQ1LThiZmMtMzg0YTY3ODBmMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEP/6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzP6IlLJclVCEeX68yw5Np4JjD5ksohwEwK6Ij5rB3aGhRcfvzvwq9L DAYfZkxFUrM9BaWKUeOUOE1rSnZFJ6VMLWlTMW5kC40qge4pdKGK085BMKTMwQ4N vPLDLXXOq29Zr6QdVhmYPMZiEvCmnDkixA1wk7ms8PTgcfFnZ7lIKTQo9G3/PD4B ae6uupeGtUCyJmQeDM3YC30eTtYo0nI71AIV5OxcRAj4hew9p+8eAH9DQ5SnbAWj 924l/GfckadR0ayPIf+0+qeMagubr/ITKwslElFFLJOmsg5D6c+m8uYnx+lggx9B C2E3cAT0CrpR/Wya9j9xEP4YqqbnNus= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:22 2025 by rpki-client