$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c61a7782-c4db-356f-a97c-eac04f0711e1.roa File: c61a7782-c4db-356f-a97c-eac04f0711e1.roa (raw, json) Hash identifier: xM3vPmn0LSUNkdLOpycsmRZSHfU57wI5oQmyc0baqyw= Subject key identifier: 94:49:3E:55:8E:1F:0B:E7:0F:33:16:2B:C5:35:F3:63:C4:4A:01:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111DAD5CAFAD0FC6926A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c61a7782-c4db-356f-a97c-eac04f0711e1.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.29.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1d:ad:5c:af:ad:0f:c6:92:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=478114b4-a6c4-473a-b71f-ef800d645b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d5:69:b3:94:31:9b:70:d4:49:41:73:59:55: f0:92:e4:91:5c:d3:8f:17:00:2b:72:e3:d1:f2:d1: 6b:78:36:56:6e:37:95:92:1c:7c:6b:4d:9e:20:b4: 36:00:04:4a:bd:37:34:7e:18:fd:fe:bd:d9:73:2a: 95:6a:95:78:d5:f7:fd:27:f7:7c:66:db:93:a6:4e: ab:ab:ce:cd:1a:ed:c4:9c:6c:98:4e:a9:fa:0e:eb: 59:59:c7:2d:5f:e5:51:c2:72:da:20:34:cb:31:1d: 43:1d:0f:4c:b7:b8:bd:5d:7c:93:a7:de:eb:0d:34: 7d:4b:8b:ab:b1:9b:4c:a7:ee:71:6a:1f:78:ef:c5: 7c:3b:94:2d:ff:2e:bc:eb:09:5f:62:aa:ee:5f:92: 24:d4:ab:a7:c3:8b:a6:2d:db:fb:cb:8a:d2:62:17: 3d:ba:a0:b7:63:30:d3:dc:9a:ff:32:2e:6d:37:51: 90:9e:e4:c6:93:e7:a5:c6:30:7b:50:c5:0c:f1:14: 30:04:6a:47:b0:f4:b8:36:e3:0d:21:cb:4e:32:41: f4:89:34:37:b8:44:a1:4a:9f:05:fa:62:35:98:b5: 31:12:7a:ea:e7:35:92:cf:16:74:5a:de:64:a8:72: de:38:ac:5d:6b:5a:63:1b:50:d3:1e:13:1e:b3:df: 60:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:49:3E:55:8E:1F:0B:E7:0F:33:16:2B:C5:35:F3:63:C4:4A:01:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c61a7782-c4db-356f-a97c-eac04f0711e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.29.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:49:f6:56:7f:1c:59:3a:b7:73:95:2a:99:83:09:ce:25:22: aa:a7:5d:b1:20:08:f0:3e:5c:12:c7:79:ed:4d:03:21:4c:04: c6:f8:8b:80:ce:c4:00:b3:57:f3:0c:57:ee:e6:01:74:16:70: 7e:b4:48:b7:e7:c7:5f:66:fe:dc:82:47:33:97:75:48:34:04: 87:5f:65:e5:9b:71:8b:f4:1d:3b:2d:50:de:4c:d8:eb:04:d0: 54:da:6a:b2:62:90:29:aa:11:c9:f3:9e:9e:81:74:10:b3:06: d5:18:e1:2c:62:1b:06:cb:a5:8e:a3:fb:19:b2:0d:43:2f:75: d4:55:63:03:db:e0:48:d6:9a:61:e3:a0:66:6a:e8:67:d9:3c: 41:7f:22:ef:b0:71:22:9e:28:82:f0:cd:a5:6f:0c:e8:28:0f: bb:45:3c:2b:84:50:37:20:5b:09:cd:39:82:a9:e2:39:f5:0e: 0f:2f:2b:1e:e2:fa:86:c8:bc:1d:56:49:5d:65:1d:a7:5d:4a: a3:a8:c8:00:0e:21:eb:63:64:29:0e:40:79:96:45:c2:73:75: 9e:8b:52:f5:ab:69:69:b2:dc:8c:02:66:01:89:d7:fb:2c:65: 0f:70:6b:ce:4b:9b:b7:7b:34:98:d3:90:cc:b5:9d:7e:f9:d8: da:50:25:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER2tXK+tD8aSakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NDc4MTE0YjQtYTZjNC00NzNhLWI3MWYtZWY4MDBkNjQ1YjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dVps5Qxm3DUSUFzWVXwkuSRXNOPFwArcuPR 8tFreDZWbjeVkhx8a02eILQ2AARKvTc0fhj9/r3ZcyqVapV41ff9J/d8ZtuTpk6r q87NGu3EnGyYTqn6DutZWcctX+VRwnLaIDTLMR1DHQ9Mt7i9XXyTp97rDTR9S4ur sZtMp+5xah9478V8O5Qt/y686wlfYqruX5Ik1Kunw4umLdv7y4rSYhc9uqC3YzDT 3Jr/Mi5tN1GQnuTGk+elxjB7UMUM8RQwBGpHsPS4NuMNIctOMkH0iTQ3uEShSp8F +mI1mLUxEnrq5zWSzxZ0Wt5kqHLeOKxda1pjG1DTHhMes99gmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRJPlWOHwvnDzMWK8U182PESgENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzYxYTc3ODItYzRkYi0z NTZmLWE5N2MtZWFjMDRmMDcxMWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxJ9lZ/HFk6t3OVKpmDCc4lIqqnXbEgCPA+XBLHee1NAyFMBMb4i4DO xACzV/MMV+7mAXQWcH60SLfnx19m/tyCRzOXdUg0BIdfZeWbcYv0HTstUN5M2OsE 0FTaarJikCmqEcnznp6BdBCzBtUY4SxiGwbLpY6j+xmyDUMvddRVYwPb4EjWmmHj oGZq6GfZPEF/Iu+wcSKeKILwzaVvDOgoD7tFPCuEUDcgWwnNOYKp4jn1Dg8vKx7i +obIvB1WSV1lHaddSqOoyAAOIetjZCkOQHmWRcJzdZ6LUvWraWmy3IwCZgGJ1/ss ZQ9wa85Lm7d7NJjTkMy1nX752NpQJY4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:35 2025 by rpki-client