$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa File: a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa (raw, json) Hash identifier: pW/Pi+RSxQowW/G7JKnFpsAtR80tsbwbZJhORu+nHOc= Subject key identifier: F7:4E:03:EE:A2:1A:3F:CF:1F:43:20:5C:2D:41:02:B6:64:AC:E4:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11EE9DAA0D9B26BFA2728 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.189.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1e:e9:da:a0:d9:b2:6b:fa:27:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=d28b4054-b65f-49fd-b75e-23936f77953f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:77:28:4f:a3:4d:57:c2:d4:99:02:d6:d3: bf:53:51:d3:c2:e1:8b:5a:78:24:c4:e0:8e:74:81: ec:0e:c8:44:a1:9e:40:bd:c5:7c:91:41:ec:6f:6e: cb:fe:bb:38:0e:fe:ba:40:6c:2e:86:2a:fa:23:81: 42:85:c0:d9:00:5a:aa:46:33:4b:49:fa:07:ba:38: b3:34:6f:2b:48:38:c8:64:f5:6a:30:04:fe:30:12: 85:3f:af:f0:6e:be:a3:1b:d0:8d:95:92:2e:f6:68: dd:00:4c:a5:7e:09:85:ce:73:a3:f5:dd:64:8a:bf: bb:21:6c:46:ad:cc:d6:ca:2b:62:b3:5b:36:71:cb: 64:78:3d:e7:5d:7f:97:36:f9:15:9c:60:d3:f7:93: 72:ea:37:14:b4:b0:d0:e9:81:30:ef:e0:4c:26:9f: 37:04:88:76:78:6b:3e:be:b7:ac:e1:69:f9:5d:f4: 81:4c:e1:57:e9:6e:32:8f:f7:e8:7f:7e:9c:06:8d: bd:86:a3:9f:e3:f1:e3:32:14:51:1f:e0:79:bd:f3: a7:9c:4f:f4:56:86:26:7f:62:eb:31:c2:80:0f:62: d7:df:81:2e:3c:50:55:58:e8:c0:ad:2b:e8:a0:86: f9:a0:2b:a7:34:af:cc:61:81:47:fa:fe:18:2d:dc: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4E:03:EE:A2:1A:3F:CF:1F:43:20:5C:2D:41:02:B6:64:AC:E4:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a4bed1fe-746b-3c7d-ba13-4583b49a90d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b0:0f:2d:c2:db:a7:9c:a9:92:25:72:99:61:03:63:01:f1: ad:6b:65:1a:c5:bc:9a:4c:5e:70:ff:2d:12:2c:6b:cc:83:08: 57:b9:aa:e4:9d:2e:ea:98:63:de:1f:46:c6:88:45:fd:4a:26: 5f:6a:89:ec:61:a5:44:16:04:9f:47:35:a8:60:b8:0f:9a:4d: 9a:13:bf:ab:f0:c3:0c:e2:c2:d9:fd:ec:9c:83:48:04:87:09: c8:f8:7a:87:a2:2a:95:8c:77:35:c5:99:a7:98:c7:c5:51:9c: 84:7d:f9:dc:90:8a:c6:40:34:3a:cb:c8:f8:74:f5:dc:f2:fa: a1:14:f8:83:22:40:70:40:43:47:1e:39:0c:27:51:a7:6d:24: 76:35:cc:ef:7c:bc:91:78:82:e7:a7:0a:eb:2a:ca:1c:0b:44: 55:39:08:f0:27:d9:74:f0:42:73:f7:1f:9b:af:e4:16:8e:8b: c5:18:38:e4:c7:76:48:53:4e:e9:99:55:60:40:a1:3e:88:f4: a0:60:4e:9e:d0:eb:c1:9b:f6:49:c0:5b:59:ca:a8:4e:3c:ae: 3a:44:27:ba:fb:75:4a:81:c6:48:c4:ac:26:93:c7:0d:49:97: 70:73:fc:99:bc:f5:f7:64:a9:a9:37:de:ad:4a:c8:ea:9d:2a: 37:e2:5a:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R7p2qDZsmv6JygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZDI4YjQwNTQtYjY1Zi00OWZkLWI3NWUtMjM5MzZmNzc5NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJN3KE+jTVfC1JkC1tO/U1HTwuGLWngkxOCO dIHsDshEoZ5AvcV8kUHsb27L/rs4Dv66QGwuhir6I4FChcDZAFqqRjNLSfoHujiz NG8rSDjIZPVqMAT+MBKFP6/wbr6jG9CNlZIu9mjdAEylfgmFznOj9d1kir+7IWxG rczWyitis1s2cctkeD3nXX+XNvkVnGDT95Ny6jcUtLDQ6YEw7+BMJp83BIh2eGs+ vres4Wn5XfSBTOFX6W4yj/fof36cBo29hqOf4/HjMhRRH+B5vfOnnE/0VoYmf2Lr McKAD2LX34EuPFBVWOjArSvooIb5oCunNK/MYYFH+v4YLdyPwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdOA+6iGj/PH0MgXC1BArZkrOQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTRiZWQxZmUtNzQ2Yi0z YzdkLWJhMTMtNDU4M2I0OWE5MGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHewDy3C26ecqZIlcplhA2MB8a1rZRrFvJpMXnD/LRIsa8yDCFe5quSd LuqYY94fRsaIRf1KJl9qiexhpUQWBJ9HNahguA+aTZoTv6vwwwziwtn97JyDSASH Ccj4eoeiKpWMdzXFmaeYx8VRnIR9+dyQisZANDrLyPh09dzy+qEU+IMiQHBAQ0ce OQwnUadtJHY1zO98vJF4guenCusqyhwLRFU5CPAn2XTwQnP3H5uv5BaOi8UYOOTH dkhTTumZVWBAoT6I9KBgTp7Q68Gb9knAW1nKqE48rjpEJ7r7dUqBxkjErCaTxw1J l3Bz/Jm89fdkqak33q1KyOqdKjfiWoM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:42 2025 by rpki-client