$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa File: aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa (raw, json) Hash identifier: JkVWAKxBcPejF4si/BUwmEjpg0oMFZS9ZQvl6+eVYB0= Subject key identifier: 3A:A1:5A:27:7E:D7:8E:B6:31:97:D2:EB:E9:BC:E9:79:6D:D0:22:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE119A5A9832C5D35D933C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.190.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:19:a5:a9:83:2c:5d:35:d9:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=d64239d0-396a-441a-8f04-49ced57a5b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:19:cd:aa:5f:9e:6e:c1:67:62:82:13:b7:1b: a5:e4:9d:64:28:2a:44:cd:7c:9c:4d:79:ee:d3:a7: 3c:bb:ef:5e:de:ab:55:e9:a0:fd:ef:27:fc:1b:43: f5:e7:11:a1:de:db:37:1d:e8:9b:67:f2:12:8a:a7: 2d:40:ce:22:12:1e:a0:a2:fd:b2:ae:5b:8f:01:ba: 0f:7c:ca:8a:c2:66:f3:98:91:56:44:d2:c8:75:ae: ac:22:c9:f0:8d:b6:dc:22:76:39:98:3e:64:ea:14: 56:68:e6:4d:fe:dd:9f:b3:8c:70:a8:58:7e:a4:7d: a6:03:f6:57:ac:14:a0:8d:79:f6:2c:3a:d5:7e:f7: fa:b2:37:b2:79:94:b8:bd:0a:5a:01:b5:3c:8d:38: ad:9f:a4:46:38:06:b5:d5:1a:c4:bf:92:38:2e:1d: 9e:42:42:65:e9:ca:4b:5e:08:0e:a6:b8:47:dc:72: 53:80:a0:02:eb:52:10:2d:e9:d0:2a:76:a6:82:fb: 77:5a:8d:23:76:02:91:ea:bf:54:99:ac:1b:03:4b: 24:2c:8f:39:c7:f9:2b:30:96:9a:6b:b9:2f:cc:66: 96:30:12:1d:4c:5c:96:32:05:6c:a2:8d:af:41:ef: b5:0d:56:74:9e:45:92:23:8b:4a:0e:78:f9:81:86: 7e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:A1:5A:27:7E:D7:8E:B6:31:97:D2:EB:E9:BC:E9:79:6D:D0:22:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aedfc36f-f9ab-38bc-8f1a-10883237ddc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.190.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:84:26:95:c1:0b:a9:b5:c1:99:56:11:31:d3:e9:ab:9a:59: 70:ed:27:48:49:74:12:29:3c:d8:84:8d:99:5d:19:be:09:b9: a6:b4:e5:f7:e0:4e:3a:8d:f6:21:74:6d:3b:ef:45:dd:9a:49: c1:8a:5a:f4:c0:d1:3e:8d:81:50:67:0b:c7:71:19:ff:e0:c4: 85:28:32:ff:89:da:cb:7b:00:c4:60:79:1a:14:90:74:a3:bf: 12:0c:1f:4e:0a:af:ea:9c:ae:11:fd:9d:ea:1c:e2:14:8c:45: e7:27:56:00:d6:84:81:69:e8:45:8c:74:e8:38:9f:4d:45:4c: 3b:52:20:b3:f0:37:43:e5:2a:72:ee:98:41:8a:30:3b:79:a4: b7:89:c6:02:dd:d7:91:f6:fc:55:fc:a6:80:67:7e:45:df:1f: 01:f5:8f:fd:95:ba:8c:d2:94:63:f5:04:51:93:fd:5e:eb:0a: 9e:3a:37:31:1f:0e:9a:e3:0f:3f:5f:60:ff:04:55:af:df:31: 23:b3:3b:7b:91:d8:35:1e:52:bb:2e:1a:8f:a1:72:7d:93:cf: a4:cb:19:7f:4f:66:8d:6d:ab:75:e8:fb:0a:f2:71:7b:30:13: 1d:1f:2c:82:56:35:2f:e7:b3:61:53:23:85:f9:9b:e1:4a:7a: 95:a7:1d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RmlqYMsXTXZM8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZDY0MjM5ZDAtMzk2YS00NDFhLThmMDQtNDljZWQ1N2E1YjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xnNql+ebsFnYoITtxul5J1kKCpEzXycTXnu 06c8u+9e3qtV6aD97yf8G0P15xGh3ts3HeibZ/ISiqctQM4iEh6gov2yrluPAboP fMqKwmbzmJFWRNLIda6sIsnwjbbcInY5mD5k6hRWaOZN/t2fs4xwqFh+pH2mA/ZX rBSgjXn2LDrVfvf6sjeyeZS4vQpaAbU8jTitn6RGOAa11RrEv5I4Lh2eQkJl6cpL XggOprhH3HJTgKAC61IQLenQKnamgvt3Wo0jdgKR6r9UmawbA0skLI85x/krMJaa a7kvzGaWMBIdTFyWMgVsoo2vQe+1DVZ0nkWSI4tKDnj5gYZ+YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqhWid+1462MZfS6+m86Xlt0CKhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWVkZmMzNmYtZjlhYi0z OGJjLThmMWEtMTA4ODMyMzdkZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErb6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOEJpXBC6m1wZlWETHT6auaWXDtJ0hJdBIpPNiEjZldGb4Juaa05ffg TjqN9iF0bTvvRd2aScGKWvTA0T6NgVBnC8dxGf/gxIUoMv+J2st7AMRgeRoUkHSj vxIMH04Kr+qcrhH9neoc4hSMRecnVgDWhIFp6EWMdOg4n01FTDtSILPwN0PlKnLu mEGKMDt5pLeJxgLd15H2/FX8poBnfkXfHwH1j/2VuozSlGP1BFGT/V7rCp46NzEf DprjDz9fYP8EVa/fMSOzO3uR2DUeUrsuGo+hcn2Tz6TLGX9PZo1tq3Xo+wrycXsw Ex0fLIJWNS/ns2FTI4X5m+FKepWnHQ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:15 2025 by rpki-client