$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a83572b8-d387-3086-8108-0bfdadaec965.roa File: a83572b8-d387-3086-8108-0bfdadaec965.roa (raw, json) Hash identifier: DCCHI6NxGSmOrH6+R0iqrFZ3oYiFofhQJ73SXNOEZAc= Subject key identifier: 28:44:A4:51:FA:F6:D8:31:9B:72:31:8C:B9:BB:8B:8C:20:66:A1:C0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111D923FFC1CEC8E2BD440 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a83572b8-d387-3086-8108-0bfdadaec965.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.29.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1d:92:3f:fc:1c:ec:8e:2b:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c781ac7e-5428-4e0b-8f42-f0fc05d28071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:5f:79:2b:22:47:88:a3:7c:70:fd:74:49: e9:79:58:08:52:3d:dc:62:d6:f3:c7:b3:58:2e:4b: 5c:f9:d6:af:58:f4:c5:6f:3e:d2:bd:a6:df:a6:da: 61:ad:f2:8d:cf:05:6e:b6:58:f8:99:72:88:e9:68: 26:18:a7:37:b5:19:1f:bb:08:7d:4f:63:ec:5d:a4: 60:96:2e:b0:a3:80:03:c4:87:65:88:3d:3a:c4:56: 21:1c:ef:61:d9:a4:b6:af:74:99:b4:fc:b8:6a:5d: 81:f7:5c:98:fe:b7:a2:57:2a:fe:a1:11:59:a5:89: e8:44:a1:06:f0:ff:3c:81:98:ad:dc:23:99:f5:69: 61:7f:fc:a9:fa:cf:be:03:86:5c:bc:43:8f:41:5b: 60:b6:f6:ab:0a:7d:57:a5:74:89:8c:4a:de:eb:c0: 22:23:b8:20:5a:94:70:34:c8:ef:7f:ec:87:11:eb: a6:31:45:e5:5e:50:5d:34:f5:f6:bd:c3:66:92:1c: 08:48:28:47:90:1d:d1:4b:e2:aa:ee:2d:f3:e2:9c: 6a:61:fa:ad:7b:e9:cf:96:89:b5:7b:1e:5f:38:de: 9d:a7:25:1f:8e:d4:a0:c3:63:35:44:4d:cc:df:02: 02:8e:d6:6b:5e:36:60:8a:9e:fa:60:f0:85:2e:a4: 19:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:A4:51:FA:F6:D8:31:9B:72:31:8C:B9:BB:8B:8C:20:66:A1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a83572b8-d387-3086-8108-0bfdadaec965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:ce:09:06:58:3c:63:1f:0a:37:5d:8f:72:85:92:56:05:64: 8d:d5:26:54:39:c2:ef:5b:96:7d:1f:60:d3:b5:06:58:bf:91: 7c:f6:79:8e:62:ec:72:6f:29:26:58:42:1c:28:da:1a:1a:76: 29:a4:f4:2d:3f:e4:50:d8:ce:8d:0a:99:dc:14:3d:3f:e5:8f: 75:4e:60:31:f7:a8:89:84:dc:b8:70:d2:2d:01:8d:ec:b7:66: 2a:66:d8:7f:64:16:31:39:5b:56:96:0a:78:09:8f:62:f5:79: 92:6b:67:e6:ff:7e:32:a6:33:83:f1:b2:72:ba:6b:3e:42:bc: 20:f8:8b:5a:6f:ee:c8:c1:8a:da:61:26:a5:82:6e:6c:7c:a2: b8:3c:37:1c:85:34:f6:b7:bb:a6:65:82:7f:d0:90:e6:bf:11: a6:9c:5a:f4:e5:be:52:60:ba:70:c9:7f:58:ca:b4:f4:bd:b1: 92:20:d1:1b:7b:6a:3a:a2:54:4b:93:8d:cb:09:b1:68:a9:f0: 59:eb:a9:57:cd:db:b9:27:87:a8:65:75:2e:31:0f:8b:9c:f8: e2:b2:ea:38:d1:4e:4a:ce:fa:9b:32:56:8f:da:7a:d5:8c:04: 27:4c:29:df:2e:7e:02:3a:e1:ec:38:2f:5f:df:72:4d:7c:8d: 43:7e:f1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER2SP/wc7I4r1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk Yzc4MWFjN2UtNTQyOC00ZTBiLThmNDItZjBmYzA1ZDI4MDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8pfeSsiR4ijfHD9dEnpeVgIUj3cYtbzx7NY Lktc+davWPTFbz7SvabfptphrfKNzwVutlj4mXKI6WgmGKc3tRkfuwh9T2PsXaRg li6wo4ADxIdliD06xFYhHO9h2aS2r3SZtPy4al2B91yY/reiVyr+oRFZpYnoRKEG 8P88gZit3COZ9Wlhf/yp+s++A4ZcvEOPQVtgtvarCn1XpXSJjEre68AiI7ggWpRw NMjvf+yHEeumMUXlXlBdNPX2vcNmkhwISChHkB3RS+Kq7i3z4pxqYfqte+nPlom1 ex5fON6dpyUfjtSgw2M1RE3M3wICjtZrXjZgip76YPCFLqQZXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChEpFH69tgxm3IxjLm7i4wgZqHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTgzNTcyYjgtZDM4Ny0z MDg2LTgxMDgtMGJmZGFkYWVjOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7OCQZYPGMfCjddj3KFklYFZI3VJlQ5wu9bln0fYNO1Bli/kXz2eY5i 7HJvKSZYQhwo2hoadimk9C0/5FDYzo0KmdwUPT/lj3VOYDH3qImE3Lhw0i0Bjey3 Zipm2H9kFjE5W1aWCngJj2L1eZJrZ+b/fjKmM4PxsnK6az5CvCD4i1pv7sjBitph JqWCbmx8org8NxyFNPa3u6Zlgn/QkOa/EaacWvTlvlJgunDJf1jKtPS9sZIg0Rt7 ajqiVEuTjcsJsWip8FnrqVfN27knh6hldS4xD4uc+OKy6jjRTkrO+psyVo/aetWM BCdMKd8ufgI64ew4L1/fck18jUN+8T0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:20 2025 by rpki-client