$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa File: b5356367-625f-35f1-a378-86cbb89c2343.roa (raw, json) Hash identifier: Jjcwb9q4FSlcOZBqJQzlhak9ZY6Q13iBCJMJAfYmO4o= Subject key identifier: E2:47:3D:5B:08:78:37:1A:25:92:D5:2A:40:CB:B3:E8:DB:EA:E5:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11B2FC481A6A665A7EBA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.188.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1b:2f:c4:81:a6:a6:65:a7:eb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=18b8cf85-3e82-4b25-b15a-a6cea195ea57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:57:8c:e1:1f:ea:5a:6c:aa:89:50:64:a2:01: 14:fb:ce:76:5b:8f:94:3b:75:68:54:45:b7:cc:95: 0c:5e:48:af:a4:77:94:9e:f0:24:78:e4:20:76:e1: 25:bd:31:29:31:dc:42:a3:83:32:96:39:b8:e7:db: a6:1f:1b:50:5d:c8:28:99:cb:1d:ed:b4:88:68:ab: 61:50:c3:a8:d6:52:0c:f3:25:b6:77:69:b7:00:e6: 83:3f:8a:46:ef:6d:93:49:9e:7c:bc:e8:fe:64:b4: e9:d3:b6:b1:f9:78:f6:de:0b:e0:5b:48:10:aa:b1: f9:59:f4:78:49:63:9d:01:e9:83:8f:47:84:42:ef: 02:f4:87:1c:a1:c4:51:cb:db:d8:82:a0:25:a1:17: f1:cd:56:91:2f:08:7a:72:2a:bd:61:e7:4e:67:1e: 9d:b4:94:66:18:ff:e8:38:97:22:73:a7:ad:7c:47: f8:35:c0:7e:fb:61:f5:9e:ff:e2:4e:31:b8:2a:54: ed:d4:73:be:8b:75:be:00:55:ec:5d:12:f3:31:77: 79:39:fb:78:f6:b7:4c:2e:75:21:79:ee:1f:41:1b: cf:76:c6:39:c2:cb:71:97:12:3d:b7:82:cd:1f:61: ef:49:4a:d6:82:de:59:49:d5:b3:58:92:56:25:79: 33:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:47:3D:5B:08:78:37:1A:25:92:D5:2A:40:CB:B3:E8:DB:EA:E5:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b5356367-625f-35f1-a378-86cbb89c2343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f5:88:ab:9d:02:6d:b3:f8:3c:45:4c:c8:bd:41:9d:b7:4d: d5:d6:b5:b5:bc:21:b7:0d:c8:ba:92:8d:f7:45:49:25:ea:c4: a0:91:e6:35:9d:43:0e:9a:05:e9:45:db:bf:8e:fa:84:50:a3: 9b:f9:73:d7:82:f5:31:28:77:fb:db:19:7e:81:c2:32:43:fe: 52:a4:76:58:56:6b:2f:ca:30:a4:bd:77:21:09:67:97:3c:c5: dc:09:1f:b8:10:5f:ef:9c:86:82:5e:61:51:50:97:44:f9:09: 4f:ab:83:8f:a4:fb:35:47:f5:58:be:01:1c:36:1f:0a:18:1b: 65:0b:1e:8c:c8:d5:b5:ea:03:6a:f8:5e:3d:83:ff:04:1c:06: 36:c3:77:1d:6a:1a:7e:a3:0b:80:69:78:fc:40:e0:29:77:97: f2:30:f1:d9:a8:ce:c4:62:31:76:f7:a1:4c:60:7d:6f:ec:e5: 5f:f7:cd:f2:d7:c1:7c:aa:1c:eb:10:46:0b:fe:50:51:ee:04: 2c:13:ca:11:cf:5b:fa:3c:d0:f5:b7:d6:52:90:2d:5c:49:53: 51:17:48:93:aa:fc:6b:44:8d:c8:de:34:c8:68:3a:03:dd:04: d8:39:57:ff:30:39:3b:91:ec:e0:4f:74:97:98:b3:46:c3:6b: 9b:0f:47:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4RsvxIGmpmWn66AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk MThiOGNmODUtM2U4Mi00YjI1LWIxNWEtYTZjZWExOTVlYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVeM4R/qWmyqiVBkogEU+852W4+UO3VoVEW3 zJUMXkivpHeUnvAkeOQgduElvTEpMdxCo4Myljm459umHxtQXcgomcsd7bSIaKth UMOo1lIM8yW2d2m3AOaDP4pG722TSZ58vOj+ZLTp07ax+Xj23gvgW0gQqrH5WfR4 SWOdAemDj0eEQu8C9IccocRRy9vYgqAloRfxzVaRLwh6ciq9YedOZx6dtJRmGP/o OJcic6etfEf4NcB++2H1nv/iTjG4KlTt1HO+i3W+AFXsXRLzMXd5Oft49rdMLnUh ee4fQRvPdsY5wstxlxI9t4LNH2HvSUrWgt5ZSdWzWJJWJXkz0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJHPVsIeDcaJZLVKkDLs+jb6uVyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUzNTYzNjctNjI1Zi0z NWYxLWEzNzgtODZjYmI4OWMyMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/1iKudAm2z+DxFTMi9QZ23TdXWtbW8IbcNyLqSjfdFSSXqxKCR5jWd Qw6aBelF27+O+oRQo5v5c9eC9TEod/vbGX6BwjJD/lKkdlhWay/KMKS9dyEJZ5c8 xdwJH7gQX++choJeYVFQl0T5CU+rg4+k+zVH9Vi+ARw2HwoYG2ULHozI1bXqA2r4 Xj2D/wQcBjbDdx1qGn6jC4BpePxA4Cl3l/Iw8dmozsRiMXb3oUxgfW/s5V/3zfLX wXyqHOsQRgv+UFHuBCwTyhHPW/o80PW31lKQLVxJU1EXSJOq/GtEjcjeNMhoOgPd BNg5V/8wOTuR7OBPdJeYs0bDa5sPR2c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:35 2025 by rpki-client