$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5e220a7-6dd1-3e41-8fc7-106df08a93fb.roa File: c5e220a7-6dd1-3e41-8fc7-106df08a93fb.roa (raw, json) Hash identifier: jMCf7c5T0rCnrH3zJFqpyJSlLMY6gMRjX95rrG0vFNE= Subject key identifier: 82:32:67:3C:DD:B3:CD:C8:92:00:2F:D1:30:27:8E:83:50:D7:4B:65 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111E18B76D5BD00B0E4000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5e220a7-6dd1-3e41-8fc7-106df08a93fb.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.31.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1e:18:b7:6d:5b:d0:0b:0e:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b2e4f8c6-44b6-4d7d-9d13-fc74a19d44f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:8d:9e:b3:5b:41:61:12:6e:a6:47:e5:85: 2b:09:0d:5a:bc:61:bd:d7:0b:45:94:e8:2e:ff:21: ea:b2:bc:02:24:a2:19:42:31:27:19:1c:1a:9f:1d: 6e:0b:4e:e5:fe:2c:60:35:ac:ef:cc:30:3a:5f:99: 6f:6a:2c:f8:78:d6:f1:5e:31:9a:c8:0f:ef:d6:df: be:41:43:2b:fd:37:63:83:f8:35:77:50:d9:b4:47: 62:8b:da:f6:3c:ee:32:10:9b:09:cc:a1:0d:d6:59: f9:e0:b2:f9:96:78:98:8c:8c:13:8a:33:30:51:3e: 52:dd:f9:dc:c4:19:59:42:2e:07:b5:ff:25:9f:54: 59:cc:e4:0c:89:7e:56:2a:00:dc:45:8d:41:bb:cf: bd:b8:c9:d1:4d:80:6f:9e:06:b1:d1:a9:09:3d:20: 77:71:83:d3:12:06:5f:22:72:82:b0:5c:c2:ff:38: fc:07:28:28:48:fd:5b:32:2f:1c:e6:8b:33:0b:d5: 3b:1d:f1:83:3c:af:82:23:70:c8:cc:8e:74:02:3e: 5b:dc:6d:fc:d9:12:ea:74:39:d8:ff:82:2c:bf:b2: 0f:94:9a:02:12:88:56:80:ab:71:fe:ac:ad:52:b1: 69:8a:63:bd:e0:02:b9:e1:db:e8:46:29:24:27:52: 3a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:67:3C:DD:B3:CD:C8:92:00:2F:D1:30:27:8E:83:50:D7:4B:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c5e220a7-6dd1-3e41-8fc7-106df08a93fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:af:b2:90:68:14:fc:2b:aa:19:a8:2c:6e:d7:2c:70:48:be: 82:06:96:ed:c9:e0:2d:97:78:ec:a0:2f:3c:e7:55:15:05:52: c3:ed:b5:f0:41:77:75:71:97:59:ff:db:7a:8b:0e:7c:f8:df: 2c:64:05:c7:cb:c5:fb:31:ef:67:84:82:7d:05:33:42:37:fc: 33:43:c8:53:e5:f7:6a:00:f3:10:38:30:47:c4:e6:76:a5:20: 1b:69:87:43:11:f8:c3:fe:11:dd:e3:e2:03:3b:5e:6e:66:8f: 2d:88:b0:dd:a3:9c:96:6b:ee:6b:6b:a8:de:ac:19:80:98:bf: a7:ad:2c:c8:51:2d:77:b0:1e:c2:e0:f3:22:4d:7e:0d:d2:dc: 59:70:a1:b9:0b:f4:a6:95:7c:5f:f7:3c:6b:09:96:96:66:af: 2d:f0:1a:23:2f:29:e6:fc:85:b3:ed:ab:8c:bd:9a:6e:ab:53: cf:7e:2e:09:73:5e:74:2e:c5:82:df:7d:9d:21:ca:5c:b8:e8: f8:1a:42:c7:99:f9:5d:c7:c4:21:b6:f2:4d:07:37:59:c8:4f: 23:41:ab:81:ae:f5:01:dc:47:b1:d0:4a:4a:7b:a3:4d:06:3e: c1:0b:ec:e1:b4:83:af:e4:5e:c6:c6:f0:75:ff:55:69:a3:66: 14:78:e8:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER4Yt21b0AsOQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjJlNGY4YzYtNDRiNi00ZDdkLTlkMTMtZmM3NGExOWQ0NGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gGNnrNbQWESbqZH5YUrCQ1avGG91wtFlOgu /yHqsrwCJKIZQjEnGRwanx1uC07l/ixgNazvzDA6X5lvaiz4eNbxXjGayA/v1t++ QUMr/Tdjg/g1d1DZtEdii9r2PO4yEJsJzKEN1ln54LL5lniYjIwTijMwUT5S3fnc xBlZQi4Htf8ln1RZzOQMiX5WKgDcRY1Bu8+9uMnRTYBvngax0akJPSB3cYPTEgZf InKCsFzC/zj8BygoSP1bMi8c5oszC9U7HfGDPK+CI3DIzI50Aj5b3G382RLqdDnY /4Isv7IPlJoCEohWgKtx/qytUrFpimO94AK54dvoRikkJ1I6QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIIyZzzds83IkgAv0TAnjoNQ10tlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzVlMjIwYTctNmRkMS0z ZTQxLThmYzctMTA2ZGYwOGE5M2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSvspBoFPwrqhmoLG7XLHBIvoIGlu3J4C2XeOygLzznVRUFUsPttfBB d3Vxl1n/23qLDnz43yxkBcfLxfsx72eEgn0FM0I3/DNDyFPl92oA8xA4MEfE5nal IBtph0MR+MP+Ed3j4gM7Xm5mjy2IsN2jnJZr7mtrqN6sGYCYv6etLMhRLXewHsLg 8yJNfg3S3FlwobkL9KaVfF/3PGsJlpZmry3wGiMvKeb8hbPtq4y9mm6rU89+Lglz XnQuxYLffZ0hyly46PgaQseZ+V3HxCG28k0HN1nITyNBq4Gu9QHcR7HQSkp7o00G PsEL7OG0g6/kXsbG8HX/VWmjZhR46I4= -----END CERTIFICATE-----Generated at Fri Mar 14 13:28:34 2025 by rpki-client