$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba302755-55d3-3982-90bf-f02de241e151.roa File: ba302755-55d3-3982-90bf-f02de241e151.roa (raw, json) Hash identifier: oIgZnUEvMbe6eWIOj8M3qXWZ3Vm7y8p/+KZCAIs9gfo= Subject key identifier: 3A:F6:39:A8:17:19:F5:FE:AA:0B:8B:3F:4C:5C:60:81:04:AF:5E:90 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21122B19D04C4BF22513700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba302755-55d3-3982-90bf-f02de241e151.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.187.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:22:b1:9d:04:c4:bf:22:51:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f4bed1e1-aa97-4730-9eef-98eaab1a237a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cc:52:90:b7:7d:70:e9:f7:ac:07:c4:64:55: 13:6c:3a:43:b9:f5:46:6b:6f:3e:a7:dd:26:a1:9d: 96:f5:98:4a:69:0d:95:20:0e:3d:e6:fe:58:6b:8a: 1f:32:05:2f:d3:b9:f2:2c:81:29:2e:6f:4f:f4:4e: b4:24:9c:10:a1:30:29:54:aa:22:a9:b0:c6:34:47: 28:a6:3b:a7:a0:c3:cc:9b:72:a6:b3:73:32:71:d5: e5:16:7e:7f:52:cf:60:b9:32:bf:0d:3f:57:7a:cb: f8:e5:5b:2e:23:a4:c0:21:78:bc:a2:4b:59:3f:72: ce:96:ca:c8:c1:f7:af:5a:43:f5:37:06:d5:ee:40: 3c:0a:2e:13:03:62:9c:e5:4b:62:46:da:f0:c6:a8: b6:6f:67:7d:bc:00:ab:a9:13:a7:10:d4:9e:4f:d0: f5:5c:f8:81:1b:12:fc:93:4f:d5:d9:53:a0:75:68: bf:a2:50:7c:6c:95:a6:c2:d8:9e:9a:d9:58:88:95: c6:57:70:03:98:e3:57:46:f3:1f:0b:c9:cc:fd:66: 4f:fa:c8:52:ee:7c:ef:54:bc:60:d5:7a:9a:d8:e8: db:81:10:da:27:10:73:9a:58:d0:33:73:7d:c9:9a: 21:cc:76:5f:c8:18:4d:48:2b:ec:da:87:a4:32:ea: ec:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:39:A8:17:19:F5:FE:AA:0B:8B:3F:4C:5C:60:81:04:AF:5E:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ba302755-55d3-3982-90bf-f02de241e151.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b6:6a:f2:22:68:54:d4:b0:1c:23:d4:5a:cd:70:44:b9:a8: c4:d4:b9:59:ab:d4:14:39:9e:01:04:58:79:84:03:33:eb:a3: 31:2f:c6:0d:3b:b0:76:15:cb:03:eb:4c:cc:be:83:d9:fb:d8: 4a:aa:06:96:f5:fd:7c:8b:b4:bc:45:1e:c2:2a:5a:4c:c5:de: 09:cb:1e:87:d2:f6:65:ff:f8:fd:fc:b0:01:d9:19:ea:56:d4: 11:9b:9c:6a:7e:eb:a2:28:2a:57:5e:e1:6d:39:35:b6:19:43: d2:ca:27:5b:61:91:cf:e0:52:bc:7f:13:0a:94:f5:7f:e9:22: 58:50:8e:b2:cd:f4:0b:23:06:95:a8:f7:07:99:15:d1:dd:29: d8:5d:80:78:4f:de:1d:6f:72:77:da:ad:cf:3a:79:77:34:2a: 0d:81:6d:84:56:67:62:62:b8:0b:73:ef:64:42:49:55:e3:39: a1:56:7a:10:08:e1:0d:98:00:5a:2a:a7:4e:9e:29:4a:09:af: 12:c4:b3:ae:44:2f:08:77:0c:5a:fb:6e:64:b9:2f:3d:61:f2: 18:5d:f8:28:25:cb:db:1e:85:20:83:aa:37:d6:66:4c:4d:4d: f8:e0:0f:66:9c:60:0a:14:a8:b6:38:b4:56:be:d3:47:40:0f: f2:39:52:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESKxnQTEvyJRNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjRiZWQxZTEtYWE5Ny00NzMwLTllZWYtOThlYWFiMWEyMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsxSkLd9cOn3rAfEZFUTbDpDufVGa28+p90m oZ2W9ZhKaQ2VIA495v5Ya4ofMgUv07nyLIEpLm9P9E60JJwQoTApVKoiqbDGNEco pjunoMPMm3Kms3MycdXlFn5/Us9guTK/DT9Xesv45VsuI6TAIXi8oktZP3LOlsrI wfevWkP1NwbV7kA8Ci4TA2Kc5UtiRtrwxqi2b2d9vACrqROnENSeT9D1XPiBGxL8 k0/V2VOgdWi/olB8bJWmwtiemtlYiJXGV3ADmONXRvMfC8nM/WZP+shS7nzvVLxg 1Xqa2OjbgRDaJxBzmljQM3N9yZohzHZfyBhNSCvs2oekMursbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr2OagXGfX+qguLP0xcYIEEr16QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmEzMDI3NTUtNTVkMy0z OTgyLTkwYmYtZjAyZGUyNDFlMTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbswMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF22avIiaFTUsBwj1FrNcES5qMTUuVmr1BQ5ngEEWHmEAzProzEvxg07 sHYVywPrTMy+g9n72EqqBpb1/XyLtLxFHsIqWkzF3gnLHofS9mX/+P38sAHZGepW 1BGbnGp+66IoKlde4W05NbYZQ9LKJ1thkc/gUrx/EwqU9X/pIlhQjrLN9AsjBpWo 9weZFdHdKdhdgHhP3h1vcnfarc86eXc0Kg2BbYRWZ2JiuAtz72RCSVXjOaFWehAI 4Q2YAFoqp06eKUoJrxLEs65ELwh3DFr7bmS5Lz1h8hhd+Cgly9sehSCDqjfWZkxN TfjgD2acYAoUqLY4tFa+00dAD/I5UoU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:28 2025 by rpki-client