$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa File: b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa (raw, json) Hash identifier: LjEsP9qxOwtgq2xieajg6PGbeglkGAqZofC+t0Iz0so= Subject key identifier: 55:A3:B8:58:71:EB:F4:06:C7:FF:1D:46:D1:05:9A:FF:B4:B5:8B:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB57591C205C50C1306A680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 71.28.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:75:91:c2:05:c5:0c:13:06:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=81707815-e279-4a3b-97ed-fdd21230abe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:41:23:0e:34:b7:7a:f8:a4:ac:41:13:38:cd: a2:50:b4:38:8f:6e:4f:e7:b1:28:76:9f:dd:3b:61: ea:d0:a8:80:d5:e8:f1:d1:85:96:f4:36:f8:69:c8: 87:23:b4:0e:18:e8:a2:85:27:f3:97:42:49:ea:75: a5:c9:6f:6f:8f:43:4c:a0:f3:1d:51:b0:e5:65:d0: a1:f9:fd:1b:0c:60:51:f0:79:4b:8a:4d:aa:3b:6d: 27:86:15:b2:19:19:4f:17:22:24:65:38:fa:9d:40: 16:8b:43:fb:4b:4a:27:31:e4:d6:c8:b1:e7:67:ab: 97:0c:2b:6a:4e:63:23:9e:b3:f6:e1:00:06:6f:30: b2:09:81:83:0b:15:94:03:f2:b0:43:48:a7:83:68: ce:90:f2:e7:6d:6a:44:78:2e:bc:81:23:94:59:0c: 9a:85:aa:69:19:51:a0:74:b4:65:c5:35:c2:ed:5f: f7:15:c7:cd:d5:93:e6:81:f2:af:3c:23:56:bc:42: 1c:24:59:a1:56:a9:f5:0a:22:b2:61:17:d7:66:12: 5c:bb:05:1c:77:bd:62:1b:60:83:2c:33:1c:1a:60: 70:4e:df:b9:b5:7b:c3:3d:bc:de:52:ca:c7:91:44: b8:a8:d5:c1:d9:63:25:06:20:94:2e:26:c7:74:1f: aa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A3:B8:58:71:EB:F4:06:C7:FF:1D:46:D1:05:9A:FF:B4:B5:8B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b2cf33c9-25e0-3b09-a352-e6188fa37ce2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f6:7d:80:17:46:8a:c7:f6:dc:a0:cf:19:25:d4:00:01:2d: 32:20:88:23:7c:01:99:52:0e:2c:38:7e:27:da:1d:ff:74:9e: ea:3b:da:7b:03:fa:d1:9b:a0:ff:b9:a1:49:9a:b5:92:71:24: 28:8a:53:96:fe:f2:c4:45:46:9b:64:ab:73:b5:dc:dc:32:07: 68:65:47:88:45:58:bf:74:82:64:dd:05:82:28:53:62:5c:43: be:49:91:e0:f5:ab:6c:22:d2:cb:88:bf:8b:ac:2c:36:16:05: 64:57:b8:56:41:e6:ec:89:ae:14:06:0e:54:52:a2:de:68:e1: 49:55:fc:52:3c:b1:c0:be:0d:a7:93:90:d6:93:a7:82:3b:4c: f8:44:b5:64:43:46:9b:bb:7e:45:21:93:da:3f:64:60:bd:8a: be:83:4e:e7:b9:6c:be:b5:cd:83:92:78:ee:4a:b3:30:4a:70: 57:d6:98:bd:0e:a7:34:d0:33:c2:20:89:02:b7:d2:d4:aa:39: eb:70:eb:de:3b:a2:1a:1c:42:8f:9e:d7:a2:cf:e6:4b:81:24: dc:27:aa:f5:90:22:80:3e:d2:fa:61:3d:e1:ac:45:e4:9a:36: 2d:60:a0:e4:86:72:76:34:31:65:a8:9d:64:aa:fc:51:54:d8: 5f:59:0c:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXWRwgXFDBMGpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk ODE3MDc4MTUtZTI3OS00YTNiLTk3ZWQtZmRkMjEyMzBhYmU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEEjDjS3evikrEETOM2iULQ4j25P57Eodp/d O2Hq0KiA1ejx0YWW9Db4aciHI7QOGOiihSfzl0JJ6nWlyW9vj0NMoPMdUbDlZdCh +f0bDGBR8HlLik2qO20nhhWyGRlPFyIkZTj6nUAWi0P7S0onMeTWyLHnZ6uXDCtq TmMjnrP24QAGbzCyCYGDCxWUA/KwQ0ing2jOkPLnbWpEeC68gSOUWQyahappGVGg dLRlxTXC7V/3FcfN1ZPmgfKvPCNWvEIcJFmhVqn1CiKyYRfXZhJcuwUcd71iG2CD LDMcGmBwTt+5tXvDPbzeUsrHkUS4qNXB2WMlBiCULibHdB+qywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWjuFhx6/QGx/8dRtEFmv+0tYtyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjJjZjMzYzktMjVlMC0z YjA5LWEzNTItZTYxODhmYTM3Y2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARxyEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB72fYAXRorH9tygzxkl1AABLTIgiCN8AZlSDiw4fifaHf90nuo72nsD +tGboP+5oUmatZJxJCiKU5b+8sRFRptkq3O13NwyB2hlR4hFWL90gmTdBYIoU2Jc Q75JkeD1q2wi0suIv4usLDYWBWRXuFZB5uyJrhQGDlRSot5o4UlV/FI8scC+DaeT kNaTp4I7TPhEtWRDRpu7fkUhk9o/ZGC9ir6DTue5bL61zYOSeO5KszBKcFfWmL0O pzTQM8IgiQK30tSqOetw6947ohocQo+e16LP5kuBJNwnqvWQIoA+0vphPeGsReSa Ni1goOSGcnY0MWWonWSq/FFU2F9ZDPs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:58 2025 by rpki-client