$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa File: a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa (raw, json) Hash identifier: tmsUhIsi5BmduIguMUlTzd8hgM9j/11+ShhqN9pmndw= Subject key identifier: 47:C9:71:2C:4F:AD:F1:09:6C:59:91:98:5B:E8:75:07:8E:9B:F5:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584898D61EC5D27B0D5419B93C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.187.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1e:c5:d2:7b:0d:54:19:b9:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=633a7684-9394-4a70-a311-02902604c6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:df:f1:0c:a3:25:d5:80:67:3b:d8:06:e4:be: 25:fd:74:e4:e3:ce:45:ac:f4:88:ba:71:a6:08:f3: 54:be:9a:a4:83:d1:03:19:fd:48:74:df:f3:c2:ff: 9d:f9:db:32:48:f4:2f:4c:7f:77:22:e3:98:8c:5b: 00:39:f7:2f:dd:3c:61:b5:f5:ee:fc:14:ae:01:18: 01:9f:2b:13:08:31:76:2a:6b:b4:76:3e:a6:54:e3: c7:f2:b1:23:1d:a8:b3:17:ff:d1:cd:e3:7e:54:7b: 1e:26:7f:a5:71:82:75:22:43:b8:7a:e6:82:36:c1: e3:9f:53:b8:3d:0d:5f:e0:7c:e0:ec:cc:3f:50:f2: 5e:dd:2e:19:8c:4c:38:bb:99:d1:e2:ea:96:53:cb: 80:00:92:bb:57:ae:38:7d:dc:a0:bc:39:23:c6:fc: 23:8c:5c:b2:db:c0:50:db:ed:44:d2:a5:d8:cd:70: 65:96:f5:95:53:47:88:5c:dd:85:07:f9:98:1d:0f: 18:50:b3:a7:87:f5:6c:74:8c:2b:07:48:7a:74:a1: 09:99:78:5f:27:dd:90:90:93:42:1a:fe:f8:e9:ff: e6:13:83:7c:1b:1d:88:4f:ef:d3:2b:21:d5:d2:b4: da:85:15:14:29:07:09:20:2c:ab:3c:b3:96:a8:43: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C9:71:2C:4F:AD:F1:09:6C:59:91:98:5B:E8:75:07:8E:9B:F5:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a22f7a2f-6d4a-314c-8ea8-713464efdb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:f6:a9:10:9d:4b:b3:a4:37:80:b8:65:03:c4:65:a4:2f:c9: 9b:e6:78:eb:a6:07:ec:41:7f:49:d5:87:f6:69:de:03:b9:ef: d4:a4:80:48:88:c7:90:58:ef:6a:be:aa:6d:58:24:b4:e6:69: fa:1d:09:b4:05:86:ea:d8:66:69:e7:c6:a5:3d:2a:57:7d:23: d6:73:c1:82:27:f9:32:75:36:cf:7f:e9:b0:f5:6a:6c:35:90: 95:a7:50:5c:15:83:22:f8:26:ad:5a:f0:63:8e:65:95:1e:47: 3d:a4:fe:f0:32:bf:54:0f:2c:e5:31:c7:f7:94:53:6f:37:6b: f5:c9:54:e4:6d:86:fa:fe:dd:63:74:cb:b3:a9:56:26:ee:fd: e5:15:6b:2a:a7:c5:e4:d2:5b:79:26:db:3b:59:53:69:bb:f0: 98:4b:fc:c1:1e:e8:b3:80:7e:a6:1a:85:73:fa:25:15:54:68: 6b:15:82:9d:71:aa:16:81:45:8a:87:5c:0d:46:74:bf:45:14: 1a:f3:16:8d:44:d9:0f:7f:43:5f:b1:31:4f:b0:d9:a5:b0:b2: 9e:8b:b9:a7:3a:16:02:77:a9:8a:90:6c:65:6b:3b:1b:0f:93: 98:03:09:30:62:9a:d8:d9:d6:0d:00:ef:58:b8:f3:d8:24:94: 68:59:dc:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1h7F0nsNVBm5PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk NjMzYTc2ODQtOTM5NC00YTcwLWEzMTEtMDI5MDI2MDRjNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9/xDKMl1YBnO9gG5L4l/XTk485FrPSIunGm CPNUvpqkg9EDGf1IdN/zwv+d+dsySPQvTH93IuOYjFsAOfcv3TxhtfXu/BSuARgB nysTCDF2Kmu0dj6mVOPH8rEjHaizF//RzeN+VHseJn+lcYJ1IkO4euaCNsHjn1O4 PQ1f4Hzg7Mw/UPJe3S4ZjEw4u5nR4uqWU8uAAJK7V644fdygvDkjxvwjjFyy28BQ 2+1E0qXYzXBllvWVU0eIXN2FB/mYHQ8YULOnh/VsdIwrB0h6dKEJmXhfJ92QkJNC Gv746f/mE4N8Gx2IT+/TKyHV0rTahRUUKQcJICyrPLOWqEODzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfJcSxPrfEJbFmRmFvodQeOm/WFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTIyZjdhMmYtNmQ0YS0z MTRjLThlYTgtNzEzNDY0ZWZkYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAb2qRCdS7OkN4C4ZQPEZaQvyZvmeOumB+xBf0nVh/Zp3gO579SkgEiI x5BY72q+qm1YJLTmafodCbQFhurYZmnnxqU9Kld9I9ZzwYIn+TJ1Ns9/6bD1amw1 kJWnUFwVgyL4Jq1a8GOOZZUeRz2k/vAyv1QPLOUxx/eUU283a/XJVORthvr+3WN0 y7OpVibu/eUVayqnxeTSW3km2ztZU2m78JhL/MEe6LOAfqYahXP6JRVUaGsVgp1x qhaBRYqHXA1GdL9FFBrzFo1E2Q9/Q1+xMU+w2aWwsp6Luac6FgJ3qYqQbGVrOxsP k5gDCTBimtjZ1g0A71i489gklGhZ3PE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:52 2025 by rpki-client