$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a818da9c-0041-314b-8b72-590627a9fca5.roa File: a818da9c-0041-314b-8b72-590627a9fca5.roa (raw, json) Hash identifier: xiWWY8Apn4LLhgE6IL3lhcwvtFD4FWfa/K4odBXNd4w= Subject key identifier: 8B:71:BB:E7:3E:56:09:15:E5:CA:04:A6:6D:D2:EB:6E:74:42:91:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21119653A56249FE77826C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a818da9c-0041-314b-8b72-590627a9fca5.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 64.24.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:19:65:3a:56:24:9f:e7:78:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=7b046d3e-a57f-48cc-b060-d571f4a302db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:99:33:d2:7f:f1:61:4c:5c:59:3e:c9:b2:e6: b5:88:e4:dc:25:bb:55:c4:98:5d:e6:e4:c9:f0:a3: 33:90:5a:e5:78:05:6a:7c:9c:60:47:80:fc:0b:7b: cb:d2:c3:f5:e4:5e:53:ab:71:05:dd:5e:63:f7:7d: 47:1d:34:75:11:4a:77:fb:b1:fb:22:c3:34:c0:ca: 8d:fe:6e:35:16:ec:c5:5a:da:6b:fa:ce:28:18:68: 70:9b:bc:12:95:90:08:ee:e0:e1:0c:ce:1f:d4:e7: e5:c8:7d:c5:1a:dd:7a:3c:3e:a3:e2:eb:1c:bf:f9: 88:fd:ac:15:7d:05:2e:97:bb:2f:8d:cd:1f:b9:1f: 16:65:9f:56:10:b0:e2:78:a4:b8:6d:9c:7f:ff:47: 32:d2:58:a2:37:cd:aa:c8:d9:26:db:7b:4f:21:05: 18:a4:57:f4:26:31:bc:46:c8:03:a6:ce:99:c8:fc: 4f:ed:52:ee:5a:a7:fe:33:2c:a1:4f:e2:63:37:bb: 38:8e:08:49:0f:55:b1:6f:8a:c7:3c:b7:4f:29:b0: af:67:c2:14:05:f9:ba:38:f0:da:64:0a:35:78:d4: 44:3a:58:80:95:28:4d:eb:66:c6:f6:4e:b4:41:3f: 6b:a9:2e:e3:ab:b0:83:4c:be:35:41:2d:31:28:95: 16:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:71:BB:E7:3E:56:09:15:E5:CA:04:A6:6D:D2:EB:6E:74:42:91:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a818da9c-0041-314b-8b72-590627a9fca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:8a:b1:b0:12:20:9a:ec:f5:77:1b:fc:e4:2b:b2:e7:98:f6: 4c:b4:02:42:26:27:63:8e:f7:ce:31:66:84:85:35:73:b6:2d: a6:a2:e1:6d:c2:0b:73:8a:85:21:2a:94:16:63:a5:f2:9a:10: c2:26:32:05:e7:16:8d:fa:f2:a8:5c:c1:1c:b1:e1:4b:2f:17: 36:2c:c4:da:e6:7d:68:49:f3:fa:31:a0:16:dd:cb:2c:f7:2a: e5:8f:59:28:de:a7:ae:12:77:99:1c:da:61:c0:eb:03:8e:f4: c3:dd:2a:48:4c:85:4e:d7:89:c6:52:ba:cb:1c:b6:6c:fd:86: 21:6b:cc:a7:15:89:cf:71:13:4e:ca:24:d3:98:00:31:f4:bb: fd:66:af:d6:35:7c:7f:90:69:46:92:e6:d3:2f:f3:96:31:c9: 6d:e2:3d:de:26:b0:c6:2d:62:58:5a:34:7e:dd:20:4f:da:75: f7:ee:9a:30:74:24:2c:15:21:69:a6:00:f9:2a:8a:c8:cc:74: 15:85:0b:8d:69:6c:0d:d5:3b:b9:55:e8:2a:d2:8b:71:1f:40: 6d:08:c9:57:ce:b4:f9:e3:2e:2d:64:1f:8d:f9:a7:3c:c1:1c: d8:2f:87:6d:42:7d:4b:32:1c:73:e6:b1:d3:1b:44:38:40:c4: 5f:a6:2f:c9 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSERllOlYkn+d4JsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk N2IwNDZkM2UtYTU3Zi00OGNjLWIwNjAtZDU3MWY0YTMwMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65kz0n/xYUxcWT7Jsua1iOTcJbtVxJhd5uTJ 8KMzkFrleAVqfJxgR4D8C3vL0sP15F5Tq3EF3V5j931HHTR1EUp3+7H7IsM0wMqN /m41FuzFWtpr+s4oGGhwm7wSlZAI7uDhDM4f1OflyH3FGt16PD6j4uscv/mI/awV fQUul7svjc0fuR8WZZ9WELDieKS4bZx//0cy0liiN82qyNkm23tPIQUYpFf0JjG8 RsgDps6ZyPxP7VLuWqf+MyyhT+JjN7s4jghJD1Wxb4rHPLdPKbCvZ8IUBfm6OPDa ZAo1eNREOliAlShN62bG9k60QT9rqS7jq7CDTL41QS0xKJUWwQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFItxu+c+VgkV5coEpm3S6250QpFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTgxOGRhOWMtMDA0MS0z MTRiLThiNzItNTkwNjI3YTlmY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQBgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAAIqxsBIgmuz1dxv85Cuy55j2TLQCQiYnY473zjFmhIU1c7YtpqLhbcIL c4qFISqUFmOl8poQwiYyBecWjfryqFzBHLHhSy8XNizE2uZ9aEnz+jGgFt3LLPcq 5Y9ZKN6nrhJ3mRzaYcDrA470w90qSEyFTteJxlK6yxy2bP2GIWvMpxWJz3ETTsok 05gAMfS7/Wav1jV8f5BpRpLm0y/zljHJbeI93iawxi1iWFo0ft0gT9p19+6aMHQk LBUhaaYA+SqKyMx0FYULjWlsDdU7uVXoKtKLcR9AbQjJV860+eMuLWQfjfmnPMEc 2C+HbUJ9SzIcc+ax0xtEOEDEX6YvyQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:41 2025 by rpki-client