$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcbe1b4a-3e5f-327e-8032-119aa6e087f7.roa File: bcbe1b4a-3e5f-327e-8032-119aa6e087f7.roa (raw, json) Hash identifier: wKMr+6Gz0gtn1dNKqtB54nyMbI6Q5M85kDusdZizEHo= Subject key identifier: 8A:69:0B:2A:84:54:EC:28:6D:FA:DF:C4:6B:FE:65:2E:67:3D:46:6D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F4C6212AF13DB5BDA0C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcbe1b4a-3e5f-327e-8032-119aa6e087f7.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.184.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f4:c6:21:2a:f1:3d:b5:bd:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=abfabad6-5a61-4a98-81c6-61e42fc25c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9d:59:e6:a5:0c:2e:9d:da:78:3d:7f:48:21: 22:64:ff:5f:00:4a:aa:76:e7:9c:9c:31:70:b9:39: a2:93:ff:a7:24:2e:2b:a1:6c:ae:aa:30:da:e2:6a: 92:52:e1:dc:a3:1a:aa:ec:ca:81:9d:f6:c3:3d:f0: c0:d7:a8:2d:13:94:16:d8:72:b0:45:ca:db:69:fa: 16:1c:f3:fd:f0:f9:ba:dc:1d:90:3d:36:85:87:ca: 52:6e:17:16:9d:a3:65:02:10:0d:a8:77:dd:ce:78: c6:00:a0:a2:25:14:58:8a:18:7b:4a:14:68:d8:a8: 67:ad:20:3b:e0:22:bb:7a:46:f8:e6:f9:8b:3b:3d: d8:ae:7b:75:f6:d6:15:a0:61:b1:11:7c:68:16:b7: e1:70:94:c9:da:94:a5:97:76:c8:03:72:01:64:f5: 07:53:11:56:23:5f:bf:1f:45:28:86:d8:5e:af:f4: 3b:90:57:3f:7d:46:0f:d4:f5:51:8a:8d:38:04:1f: 7c:46:3f:34:e1:0f:de:62:8b:47:f2:b0:83:47:37: 4a:55:d0:28:39:12:fc:3e:41:fc:5b:c8:db:f5:2a: 88:9e:b8:81:73:6a:ab:f6:ca:7b:9b:96:c3:a3:ad: c1:e5:57:f4:88:e1:30:c0:6b:a6:36:47:b5:35:c4: 1d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:69:0B:2A:84:54:EC:28:6D:FA:DF:C4:6B:FE:65:2E:67:3D:46:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bcbe1b4a-3e5f-327e-8032-119aa6e087f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:52:be:bf:b7:88:bb:2e:6d:8c:bf:33:0f:72:e0:46:aa:41: e6:12:ba:23:84:99:33:7a:7d:ee:e2:bb:f5:c7:70:ef:1e:83: ea:76:39:2b:11:c1:2a:a5:b7:4c:1e:47:e1:5b:cc:f3:ec:54: 23:31:19:bb:50:75:58:14:3c:4c:ba:28:dd:bc:d4:ef:c3:46: 59:d7:a6:76:a8:c4:33:9d:a0:2e:8b:54:87:1b:a6:49:25:25: b5:c4:6b:75:56:91:6d:cb:73:2c:8b:63:2d:53:6d:31:94:a2: 9b:36:b4:7f:90:a1:7b:b6:ad:d5:24:32:17:81:bd:49:16:12: 62:9b:78:06:bf:e6:3c:69:6d:11:1d:d5:b1:e7:7d:68:f4:f8: 0b:b7:60:30:20:70:38:8a:26:2b:c8:ec:c4:c6:ac:de:7c:cd: e4:b4:cc:c1:3d:38:07:f4:2d:56:85:32:09:b0:bd:74:25:2a: ef:d5:50:1b:6a:a3:02:30:de:e7:45:37:32:c8:79:57:30:ee: ff:b6:fe:df:42:05:c4:9c:13:84:c1:a2:c4:5a:10:f5:e3:06: da:83:d8:1f:9c:b6:0b:47:6f:f3:f1:f7:bb:e6:d0:33:ca:72: db:b1:b2:ab:d9:31:bb:12:44:96:6a:49:d4:78:9d:28:4d:08: d2:57:ec:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPTGISrxPbW9oMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWJmYWJhZDYtNWE2MS00YTk4LTgxYzYtNjFlNDJmYzI1Yzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg51Z5qUMLp3aeD1/SCEiZP9fAEqqduecnDFw uTmik/+nJC4roWyuqjDa4mqSUuHcoxqq7MqBnfbDPfDA16gtE5QW2HKwRcrbafoW HPP98Pm63B2QPTaFh8pSbhcWnaNlAhANqHfdznjGAKCiJRRYihh7ShRo2KhnrSA7 4CK7ekb45vmLOz3Yrnt19tYVoGGxEXxoFrfhcJTJ2pSll3bIA3IBZPUHUxFWI1+/ H0Uohther/Q7kFc/fUYP1PVRio04BB98Rj804Q/eYotH8rCDRzdKVdAoORL8PkH8 W8jb9SqInriBc2qr9sp7m5bDo63B5Vf0iOEwwGumNke1NcQdWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIppCyqEVOwobfrfxGv+ZS5nPUZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmNiZTFiNGEtM2U1Zi0z MjdlLTgwMzItMTE5YWE2ZTA4N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJSvr+3iLsubYy/Mw9y4EaqQeYSuiOEmTN6fe7iu/XHcO8eg+p2OSsR wSqlt0weR+FbzPPsVCMxGbtQdVgUPEy6KN281O/DRlnXpnaoxDOdoC6LVIcbpkkl JbXEa3VWkW3LcyyLYy1TbTGUops2tH+QoXu2rdUkMheBvUkWEmKbeAa/5jxpbREd 1bHnfWj0+Au3YDAgcDiKJivI7MTGrN58zeS0zME9OAf0LVaFMgmwvXQlKu/VUBtq owIw3udFNzLIeVcw7v+2/t9CBcScE4TBosRaEPXjBtqD2B+ctgtHb/Px97vm0DPK ctuxsqvZMbsSRJZqSdR4nShNCNJX7Ms= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:54 2025 by rpki-client