$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd8de7a2-3a2d-3c8c-8837-e06054499283.roa File: cd8de7a2-3a2d-3c8c-8837-e06054499283.roa (raw, json) Hash identifier: NnjN2nindsHRcKMC39jG1dUWcEpYGLPI098t07tr3uA= Subject key identifier: E8:0F:AF:64:01:C0:26:BE:C5:4C:20:B3:27:B2:44:31:BE:3A:EF:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EEB7319F38B3F2788100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd8de7a2-3a2d-3c8c-8837-e06054499283.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.28.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ee:b7:31:9f:38:b3:f2:78:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c8f7b38f-e774-4e5e-871d-7cb26c55980c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:74:8e:6d:04:20:64:04:dc:c1:7d:c9:3c: 02:fe:5c:59:40:be:d6:64:69:f3:4a:07:b8:da:c2: 55:ee:7f:c6:43:ea:bd:c4:a2:cf:a7:5a:91:2b:ae: 83:6c:b6:fd:11:87:13:42:e2:24:99:0b:fe:06:22: 18:c8:06:72:61:fa:d4:10:14:be:37:e8:ab:b4:52: ee:8c:fd:b9:30:ba:1a:78:e1:c9:07:ad:cd:7f:d8: db:4e:3e:b4:01:a6:f4:c6:38:0c:ef:d4:8c:53:c2: 8d:86:dc:1b:0a:72:e6:e2:84:83:45:53:0a:aa:26: 9d:bf:fa:9c:58:1c:4d:9a:3d:c5:d6:38:0f:8a:45: 71:19:33:38:b4:e2:ff:37:2a:3c:a0:3c:6d:42:d7: 34:01:db:58:e8:80:7a:99:28:c9:af:43:b6:dc:e6: 0a:5c:94:96:84:ea:8d:1a:f9:52:98:44:39:d5:87: 6d:61:62:53:a5:f4:8a:98:b5:34:c7:f1:7f:3f:1e: 05:9d:c9:90:1f:0f:9f:0c:06:6a:57:00:a4:03:11: b9:5e:cb:9c:9e:c8:70:4f:52:bb:40:f6:aa:69:4d: b0:cb:f7:3a:62:7c:39:04:8c:18:99:65:19:4d:1b: 4d:63:13:3c:76:12:d3:5e:2b:ab:fe:9a:53:6a:e9: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:0F:AF:64:01:C0:26:BE:C5:4C:20:B3:27:B2:44:31:BE:3A:EF:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cd8de7a2-3a2d-3c8c-8837-e06054499283.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:02:8b:7b:e0:dc:e9:5a:b3:4e:48:bc:b8:da:20:79:a7:5e: c2:81:f3:c4:8b:e5:f2:cf:ea:9e:24:f2:af:3d:5e:ea:5c:0b: 9d:b0:81:1b:0c:5c:1e:9e:24:26:30:fa:da:27:a4:7d:72:23: 97:53:29:f4:ea:27:0b:d9:ee:ee:c3:4f:c9:b0:ff:ad:18:43: 79:bb:36:4e:ca:98:d9:77:30:6f:f4:09:6f:cb:7c:de:86:27: de:8e:42:0c:c9:e2:3e:07:5e:89:14:ac:c1:a8:34:de:07:53: ad:96:ba:21:b1:26:ec:c6:80:80:d0:ab:68:b0:fd:ba:09:a2: 25:8c:b6:86:92:6c:3a:0b:6a:76:25:04:86:bf:35:cf:5f:db: b0:d2:e1:72:ab:62:97:b5:87:b6:f6:b9:d7:51:8b:c4:86:fa: 79:02:8c:96:c8:69:22:33:ff:e8:fe:3d:8d:1c:b4:bf:4f:60: 44:33:82:20:eb:c4:69:bd:ae:86:97:64:ba:9a:ee:b4:92:5b: db:f6:78:46:09:89:21:96:33:52:43:3a:c2:3a:c1:bb:43:b5: fd:87:cc:25:41:55:31:65:88:7c:51:bb:f5:9e:94:92:f2:e0: 1d:49:ef:30:6f:7d:14:17:77:f7:96:49:bb:26:fe:5e:63:a1: 8c:59:06:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO63MZ84s/J4gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzhmN2IzOGYtZTc3NC00ZTVlLTg3MWQtN2NiMjZjNTU5ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9B0jm0EIGQE3MF9yTwC/lxZQL7WZGnzSge4 2sJV7n/GQ+q9xKLPp1qRK66DbLb9EYcTQuIkmQv+BiIYyAZyYfrUEBS+N+irtFLu jP25MLoaeOHJB63Nf9jbTj60Aab0xjgM79SMU8KNhtwbCnLm4oSDRVMKqiadv/qc WBxNmj3F1jgPikVxGTM4tOL/Nyo8oDxtQtc0AdtY6IB6mSjJr0O23OYKXJSWhOqN GvlSmEQ51YdtYWJTpfSKmLU0x/F/Px4FncmQHw+fDAZqVwCkAxG5XsucnshwT1K7 QPaqaU2wy/c6Ynw5BIwYmWUZTRtNYxM8dhLTXiur/ppTaumOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgPr2QBwCa+xUwgsyeyRDG+Ou+dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Q4ZGU3YTItM2EyZC0z YzhjLTg4MzctZTA2MDU0NDk5MjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRxy4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcCi3vg3Olas05IvLjaIHmnXsKB88SL5fLP6p4k8q89XupcC52wgRsM XB6eJCYw+tonpH1yI5dTKfTqJwvZ7u7DT8mw/60YQ3m7Nk7KmNl3MG/0CW/LfN6G J96OQgzJ4j4HXokUrMGoNN4HU62WuiGxJuzGgIDQq2iw/boJoiWMtoaSbDoLanYl BIa/Nc9f27DS4XKrYpe1h7b2uddRi8SG+nkCjJbIaSIz/+j+PY0ctL9PYEQzgiDr xGm9roaXZLqa7rSSW9v2eEYJiSGWM1JDOsI6wbtDtf2HzCVBVTFliHxRu/WelJLy 4B1J7zBvfRQXd/eWSbsm/l5joYxZBm0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:57 2025 by rpki-client