$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa File: a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa (raw, json) Hash identifier: zljrSxAdieQ9SWHM9zDwxewiEO1bcHwR1Ir6btmhXiI= Subject key identifier: 31:69:72:76:E1:94:3F:34:53:CB:CF:76:69:82:C4:9C:B7:9F:89:20 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F22C5ED04ACC275AA60485AA Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa Signing time: Thu 20 Feb 2025 14:00:52 +0000 ROA not before: Thu 20 Feb 2025 14:00:52 +0000 ROA not after: Wed 21 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.191.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f2:2c:5e:d0:4a:cc:27:5a:a6:04:85:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 20 14:00:52 2025 GMT Not After : May 21 13:00:52 2025 GMT Subject: CN=d9ab556e-dec0-4d19-a5bf-285580cf0d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:3f:ce:f6:04:ba:47:27:c2:58:34:dd:9a: 82:e2:fb:4b:48:88:2b:4b:9d:b4:73:61:e5:cb:9d: ce:63:93:c0:42:1c:b3:50:00:ed:2c:86:7f:55:a5: 53:12:b3:5d:88:b9:74:0c:9f:9e:d6:da:9d:d0:72: 5a:ae:45:d9:79:12:93:c4:91:61:55:ff:a8:4c:f8: b4:3d:4b:3d:75:9a:37:a9:ce:68:3e:65:fb:1f:26: 19:09:a7:e7:3e:8d:1d:7f:42:82:59:87:1b:66:3a: 07:e7:b8:2b:80:13:ea:3b:32:72:7f:a5:3d:c2:6e: 17:94:17:b9:77:b8:a6:a0:4e:76:18:36:10:e5:cc: f5:a0:33:2c:53:43:ea:12:97:0e:1d:d9:97:9f:2f: 9b:29:9f:52:de:c9:03:83:3a:a9:0a:9c:86:73:7d: f4:ec:e8:ee:d0:04:79:a4:6f:71:5e:56:0b:97:80: db:3c:53:f6:b3:71:a1:d7:99:70:6b:43:b7:a5:e0: 69:8e:a5:17:b2:24:b4:ea:dc:cb:f9:37:50:86:0d: 77:e9:3e:f2:65:31:6e:c6:a9:aa:3b:39:e4:6f:2b: 97:6f:59:bc:96:a8:24:d6:da:5a:f7:f5:55:da:5a: f4:3a:5e:55:1c:33:be:59:5c:22:ef:ba:03:fd:b4: f8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:69:72:76:E1:94:3F:34:53:CB:CF:76:69:82:C4:9C:B7:9F:89:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4b:00:22:cb:b4:34:13:01:87:9e:b2:fd:25:12:20:df:1e: 64:49:4d:03:58:aa:41:18:61:4d:4d:20:e1:e7:4d:b9:61:e2: 5c:d2:a2:b8:33:80:18:42:af:30:0f:3c:62:dc:af:d5:07:ed: 53:b6:c4:05:e3:f5:e2:9c:55:17:9a:e1:6c:60:5d:bc:65:5b: 55:a5:f8:7c:64:c4:5e:6c:b6:6a:72:f2:7f:13:47:a9:2d:ff: 6d:1c:b6:aa:6d:02:ba:51:94:37:0a:ed:a8:72:cd:48:5c:3e: a3:44:9c:cf:7f:37:bf:9d:d0:2d:2d:b5:32:11:d1:b0:0d:04: dd:62:87:88:bc:54:33:fd:0f:ef:90:81:70:1c:61:ce:c3:6f: 90:06:6e:c2:61:ea:c9:c2:50:d1:ae:6f:3e:c5:6d:83:e4:ca: 7c:2b:79:45:16:63:79:19:54:2f:19:c2:ce:f4:b8:22:be:d4: 65:72:fb:71:13:37:6a:cf:7d:a1:4a:58:92:e8:e4:22:98:50: 01:23:39:86:3d:ad:0e:f7:34:a0:9a:57:19:00:a1:f1:79:ad: 58:1e:ba:90:14:7c:78:44:28:e2:8c:d8:8d:6d:2c:c2:1c:d1: 06:78:17:3d:f3:b9:67:7b:fa:4a:8c:97:d7:21:94:ff:99:30: ee:8b:b9:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLF7QSswnWqYEhaowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk ZDlhYjU1NmUtZGVjMC00ZDE5LWE1YmYtMjg1NTgwY2YwZDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxw/zvYEukcnwlg03ZqC4vtLSIgrS520c2Hl y53OY5PAQhyzUADtLIZ/VaVTErNdiLl0DJ+e1tqd0HJarkXZeRKTxJFhVf+oTPi0 PUs9dZo3qc5oPmX7HyYZCafnPo0df0KCWYcbZjoH57grgBPqOzJyf6U9wm4XlBe5 d7imoE52GDYQ5cz1oDMsU0PqEpcOHdmXny+bKZ9S3skDgzqpCpyGc3307Oju0AR5 pG9xXlYLl4DbPFP2s3Gh15lwa0O3peBpjqUXsiS06tzL+TdQhg136T7yZTFuxqmq OznkbyuXb1m8lqgk1tpa9/VV2lr0Ol5VHDO+WVwi77oD/bT4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFpcnbhlD80U8vPdmmCxJy3n4kgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5OGIyYjAtMTZlNS0z MGEzLWE4ZDAtZGY0ZGE1ZmIyMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpLACLLtDQTAYeesv0lEiDfHmRJTQNYqkEYYU1NIOHnTblh4lzSorgz gBhCrzAPPGLcr9UH7VO2xAXj9eKcVRea4WxgXbxlW1Wl+HxkxF5stmpy8n8TR6kt /20ctqptArpRlDcK7ahyzUhcPqNEnM9/N7+d0C0ttTIR0bANBN1ih4i8VDP9D++Q gXAcYc7Db5AGbsJh6snCUNGubz7FbYPkynwreUUWY3kZVC8Zws70uCK+1GVy+3ET N2rPfaFKWJLo5CKYUAEjOYY9rQ73NKCaVxkAofF5rVgeupAUfHhEKOKM2I1tLMIc 0QZ4Fz3zuWd7+kqMl9chlP+ZMO6LubQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:11 2025 by rpki-client