$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce883137-5336-35f3-8616-8826aaec5788.roa File: ce883137-5336-35f3-8616-8826aaec5788.roa (raw, json) Hash identifier: 6hA/8TwnQg93epWZH+O3aA9z3sNeWa9nVNUIQaoSLf8= Subject key identifier: BF:71:D6:31:B6:92:DF:D8:9D:0B:43:66:80:B6:D8:58:D6:F8:67:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB575BC0B7CF5D34DE14A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce883137-5336-35f3-8616-8826aaec5788.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 71.28.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:75:bc:0b:7c:f5:d3:4d:e1:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=6a834535-7bc6-4c70-906f-ad18956d9383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:df:1b:12:c3:26:b8:7f:8f:53:07:aa:1d: 4b:f4:a2:75:24:78:15:8c:35:3d:b3:bc:4a:c8:3a: a9:1d:00:9e:4b:ea:74:be:0a:20:53:da:d1:6a:b0: 52:4d:f4:d3:e7:86:82:64:92:b5:81:f7:86:1f:0a: ca:25:43:86:aa:10:f0:6e:1a:1d:a6:e4:99:1b:c9: 3f:91:31:48:f8:d2:1f:c6:36:90:96:45:95:d8:fc: ad:8b:af:73:1a:a6:39:27:1a:52:44:5e:c7:88:10: 92:29:b0:1c:f8:65:d1:2a:97:b6:77:75:dc:c2:3d: 5a:a9:21:4a:aa:4d:6b:f1:28:87:9a:05:b4:95:a6: 27:50:0c:81:cb:7a:b5:21:7b:e6:42:94:83:f4:c9: e5:5c:51:df:96:2a:12:a0:e7:51:84:c5:bc:60:cc: f1:45:64:71:a3:6f:40:53:ed:94:a8:bf:4c:60:d5: 0f:bf:19:be:f7:1e:76:ad:e5:56:d6:3a:af:65:10: 04:1a:bd:23:f9:6f:46:10:6c:fa:34:1e:4d:86:d0: 85:a9:41:93:d8:0f:8e:e0:16:f1:67:a2:eb:9d:c0: a7:65:b7:fd:70:3b:e5:a3:7f:ba:d5:95:09:e1:b3: a0:db:5f:1f:89:d2:37:69:4f:8a:6f:90:15:5d:84: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:71:D6:31:B6:92:DF:D8:9D:0B:43:66:80:B6:D8:58:D6:F8:67:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ce883137-5336-35f3-8616-8826aaec5788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:fa:0b:11:21:30:a5:b3:48:60:42:b2:15:f4:38:9a:a6:5f: f1:19:65:f9:f9:1f:ee:65:05:c1:25:17:3b:7c:9c:7b:66:b9: 33:2b:ab:61:59:f2:95:6c:52:ea:a2:0d:d4:d9:15:bd:16:a6: 2c:c9:6b:ec:c5:2a:c5:15:eb:48:c9:6c:33:2d:79:33:75:49: 66:25:5d:9c:98:15:71:e0:6a:71:d1:c9:a3:f3:ac:e7:21:3c: f9:1c:9d:a7:ca:08:86:0f:6c:40:bb:72:bd:0c:81:d1:e3:b4: e5:7c:bf:9e:c9:7b:5f:97:d9:55:32:6a:ad:83:1a:31:c1:2a: 37:3b:64:77:be:1f:b9:f8:aa:61:ae:f3:e7:70:8b:43:36:ac: c9:36:98:df:ae:fa:bb:3e:95:40:f1:20:df:49:1f:0e:df:0b: 9a:fb:8b:63:82:70:31:22:6a:ce:7a:d6:04:d1:e3:0d:4d:69: 16:13:3f:60:27:85:9f:01:41:c5:dc:78:25:a6:6c:9b:5a:39: 9b:82:02:be:eb:da:63:0c:01:bb:b2:fb:1e:3f:17:2a:13:cf: 6c:fa:83:22:51:ae:a9:cc:99:a4:7d:1b:cd:8b:49:89:37:79: ef:76:ff:74:e2:ac:51:31:31:44:e1:2b:e9:51:d1:a7:fb:35: 58:ce:ba:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXW8C3z1003hSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk NmE4MzQ1MzUtN2JjNi00YzcwLTkwNmYtYWQxODk1NmQ5MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj/fGxLDJrh/j1MHqh1L9KJ1JHgVjDU9s7xK yDqpHQCeS+p0vgogU9rRarBSTfTT54aCZJK1gfeGHwrKJUOGqhDwbhodpuSZG8k/ kTFI+NIfxjaQlkWV2Pyti69zGqY5JxpSRF7HiBCSKbAc+GXRKpe2d3Xcwj1aqSFK qk1r8SiHmgW0laYnUAyBy3q1IXvmQpSD9MnlXFHflioSoOdRhMW8YMzxRWRxo29A U+2UqL9MYNUPvxm+9x52reVW1jqvZRAEGr0j+W9GEGz6NB5NhtCFqUGT2A+O4Bbx Z6LrncCnZbf9cDvlo3+61ZUJ4bOg218fidI3aU+Kb5AVXYSFjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9x1jG2kt/YnQtDZoC22FjW+GdPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2U4ODMxMzctNTMzNi0z NWYzLTg2MTYtODgyNmFhZWM1Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP6CxEhMKWzSGBCshX0OJqmX/EZZfn5H+5lBcElFzt8nHtmuTMrq2FZ 8pVsUuqiDdTZFb0WpizJa+zFKsUV60jJbDMteTN1SWYlXZyYFXHganHRyaPzrOch PPkcnafKCIYPbEC7cr0MgdHjtOV8v57Je1+X2VUyaq2DGjHBKjc7ZHe+H7n4qmGu 8+dwi0M2rMk2mN+u+rs+lUDxIN9JHw7fC5r7i2OCcDEias561gTR4w1NaRYTP2An hZ8BQcXceCWmbJtaOZuCAr7r2mMMAbuy+x4/FyoTz2z6gyJRrqnMmaR9G82LSYk3 ee92/3TirFExMUThK+lR0af7NVjOuoE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:38 2025 by rpki-client