$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa File: c459f915-3c82-3272-9093-be4a7995fca4.roa (raw, json) Hash identifier: yieExr5mIWz4UuI6MzOmueyjNmJirqrTyp4tx0dB8FU= Subject key identifier: 18:07:8D:A8:6B:75:D8:E7:04:0A:3C:59:5F:41:28:B1:9B:B3:C4:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABB9916A310EA8F42D8000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 71.7.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b9:91:6a:31:0e:a8:f4:2d:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=76eb37f9-835f-4751-9445-f72d2fcd1980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:24:27:0c:74:5a:84:e4:cc:b2:3a:a8:b2:d3: ec:40:31:8a:42:09:13:3a:22:e3:d3:00:95:22:fb: e0:43:0f:0e:db:64:7d:0a:1e:0a:2b:68:74:e6:89: 51:ed:48:d1:17:52:f4:12:85:72:8b:fb:cc:a2:5d: 4c:0c:e7:ee:3d:fe:01:eb:6d:97:42:23:5e:d3:00: 2e:a5:1e:e5:ce:83:b6:6c:e6:23:e9:c5:52:24:37: cf:15:b6:c0:76:6d:a3:12:10:d8:2d:7f:dd:3c:d7: 82:36:3f:0b:da:78:de:62:98:79:82:b9:e4:8c:7d: 31:de:d1:a4:36:e6:a0:a1:7d:19:42:5b:0b:6a:93: 01:b4:97:63:b5:d9:31:76:49:25:93:1d:d9:da:01: b1:70:bd:41:f4:4c:28:38:1b:b3:2a:de:53:7c:7d: ff:73:0b:bf:57:4e:9e:59:0b:68:77:08:96:8f:1c: 21:2c:19:57:52:03:86:cb:e8:b0:2d:64:a0:69:81: c8:07:d9:54:7c:08:10:5b:3d:bb:cf:46:4b:9e:8b: ee:57:63:ab:08:30:ee:39:62:dc:01:e2:97:42:7a: 8b:eb:1b:2f:81:db:37:0e:c6:e8:24:25:12:39:fa: b8:73:34:74:c9:3f:8b:28:0a:14:88:0e:f7:77:b0: 9f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:07:8D:A8:6B:75:D8:E7:04:0A:3C:59:5F:41:28:B1:9B:B3:C4:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c459f915-3c82-3272-9093-be4a7995fca4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.7.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:7e:6d:40:10:a1:9b:af:9c:f3:cb:72:9d:2b:ce:83:23:cd: 8b:c9:76:64:b6:be:ec:ed:a7:3f:93:8a:08:c8:00:0d:8b:f4: 7a:c8:79:fb:96:a2:a8:e5:af:34:a2:0c:08:3e:54:10:1b:a7: f4:7f:81:c1:68:14:de:da:f4:ef:6a:7c:fa:6a:42:3c:6a:b3: fe:00:21:b1:fb:17:c5:40:98:69:be:fe:8f:65:5f:b3:af:5d: d0:9b:32:7b:f8:7e:85:cc:5b:a8:65:0c:74:02:6d:7e:bb:32: c3:3f:aa:8e:46:b0:b9:fe:44:0a:1a:02:9e:18:b6:86:ef:a0: b5:29:a2:2d:76:38:01:e9:a7:1d:48:8a:9d:f4:58:0e:73:1a: 86:d0:cc:a7:79:eb:5b:96:97:6a:ef:57:3e:78:84:84:24:ea: 84:c6:2d:a2:65:b1:77:4d:17:c7:9f:de:43:85:1f:6b:42:d5: ed:ca:89:cf:c1:a1:70:00:3c:c5:b2:ce:66:e6:e1:89:59:43: 4b:a4:b8:a3:13:cd:6d:9c:b1:75:15:4e:11:5d:6e:5a:c8:f6: 5e:0f:ce:2a:9f:c5:7c:9a:de:9f:ff:6d:4c:ae:07:57:56:0d: 26:1d:23:18:6c:f8:0a:ca:2c:ab:38:8f:03:7a:cb:6f:30:49: 9d:51:36:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7mRajEOqPQtgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NzZlYjM3ZjktODM1Zi00NzUxLTk0NDUtZjcyZDJmY2QxOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiQnDHRahOTMsjqostPsQDGKQgkTOiLj0wCV IvvgQw8O22R9Ch4KK2h05olR7UjRF1L0EoVyi/vMol1MDOfuPf4B622XQiNe0wAu pR7lzoO2bOYj6cVSJDfPFbbAdm2jEhDYLX/dPNeCNj8L2njeYph5grnkjH0x3tGk NuagoX0ZQlsLapMBtJdjtdkxdkklkx3Z2gGxcL1B9EwoOBuzKt5TfH3/cwu/V06e WQtodwiWjxwhLBlXUgOGy+iwLWSgaYHIB9lUfAgQWz27z0ZLnovuV2OrCDDuOWLc AeKXQnqL6xsvgds3DsboJCUSOfq4czR0yT+LKAoUiA73d7CfeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgHjahrddjnBAo8WV9BKLGbs8Q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQ1OWY5MTUtM2M4Mi0z MjcyLTkwOTMtYmU0YTc5OTVmY2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERwdAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV+bUAQoZuvnPPLcp0rzoMjzYvJdmS2vuztpz+TigjIAA2L9HrIefuW oqjlrzSiDAg+VBAbp/R/gcFoFN7a9O9qfPpqQjxqs/4AIbH7F8VAmGm+/o9lX7Ov XdCbMnv4foXMW6hlDHQCbX67MsM/qo5GsLn+RAoaAp4YtobvoLUpoi12OAHppx1I ip30WA5zGobQzKd561uWl2rvVz54hIQk6oTGLaJlsXdNF8ef3kOFH2tC1e3Kic/B oXAAPMWyzmbm4YlZQ0ukuKMTzW2csXUVThFdblrI9l4PziqfxXya3p//bUyuB1dW DSYdIxhs+ArKLKs4jwN6y28wSZ1RNoI= -----END CERTIFICATE-----Generated at Sun Apr 6 11:06:08 2025 by rpki-client