$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062c6a8-097f-3336-87f4-a72abdec8604.roa File: d062c6a8-097f-3336-87f4-a72abdec8604.roa (raw, json) Hash identifier: M5LVylrKxjd7Uii+4R54f6UwWJPQescWXcfBIVK3JRg= Subject key identifier: E3:0E:C2:21:CE:E7:5D:37:11:8F:A8:47:43:91:09:74:C7:AA:A4:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11BEBDF9DF5ECA30478E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062c6a8-097f-3336-87f4-a72abdec8604.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 71.31.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1b:eb:df:9d:f5:ec:a3:04:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=b60ec74d-b71c-4b16-8b03-58b87f2fa03f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:bf:61:8f:f2:fd:c5:c0:70:46:4e:1c:1e: 21:bf:76:42:89:18:e9:9f:76:94:77:5e:6a:5d:2c: e5:3a:6d:a1:68:c4:94:8f:cd:d3:1a:35:e7:e4:65: 01:7d:af:62:cb:09:36:03:e5:32:21:e4:ba:1c:cc: 6e:1d:97:4f:31:20:50:bc:50:c9:58:5b:44:d8:4b: 67:65:54:c3:f7:d4:0e:80:e4:ac:d0:a4:95:1d:bb: ac:b1:65:2b:fa:bc:3e:b8:16:da:f4:1f:2a:b7:1d: b5:4b:f3:20:f3:29:94:f7:54:3a:26:af:be:6e:fb: ce:a1:ce:45:aa:2f:15:43:b9:99:d5:9e:c9:1c:d0: ff:4e:a9:ba:65:63:b8:8b:81:c7:e2:ab:b2:c4:1d: cd:08:22:93:73:f2:65:ca:23:78:9c:5c:6a:1c:ea: 77:a3:57:0c:52:ac:27:a6:16:e1:48:f7:4e:29:92: 03:a1:de:91:3f:f0:f9:f9:38:2e:20:ca:c8:2a:f6: 68:00:fc:96:2c:f5:08:2e:14:b9:cd:8d:a5:af:a2: 6e:51:06:0e:0e:a8:85:b1:7b:9e:06:90:6a:df:b5: 1f:30:dc:13:16:2e:ad:3f:b4:3c:77:cf:95:13:9a: 9a:4d:f0:48:63:fb:0c:83:0b:bb:72:cd:68:2b:c9: 47:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0E:C2:21:CE:E7:5D:37:11:8F:A8:47:43:91:09:74:C7:AA:A4:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d062c6a8-097f-3336-87f4-a72abdec8604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:84:02:cd:29:d3:18:43:2b:84:9c:31:34:c4:ee:1e:fe:83: 60:dd:1a:5d:b7:32:6c:b7:24:5a:11:84:d1:0e:5f:9a:f1:67: fd:9c:a8:45:bf:04:d7:3a:46:3e:93:2a:39:2e:1d:90:18:18: dc:68:19:a3:ab:51:36:b9:6a:f0:01:40:59:7a:38:ab:14:c8: 92:5a:2e:de:96:5b:a4:ff:f7:d9:08:34:d4:11:b6:b7:bf:22: 3a:e7:67:ab:2b:53:84:7e:d8:6d:30:8e:5e:33:7b:b7:a8:41: 9d:72:5f:f2:4a:03:4d:c7:37:57:23:6e:bb:6c:53:76:b6:4f: 64:57:64:25:3a:c2:79:7c:b2:82:ae:04:c6:fc:46:a3:fc:07: 1c:c9:32:ad:20:6e:ad:36:37:1a:00:7e:04:9a:f5:8f:ae:a2: f3:01:5d:2d:d9:ed:24:d9:3c:66:ca:97:7b:9b:05:90:77:3b: 66:5b:32:80:87:56:d5:bd:43:d6:76:65:f1:f6:ce:2e:12:68: df:08:68:c8:42:2b:64:97:53:d0:33:36:c3:36:c5:7d:d1:53: 4b:aa:52:b9:39:f7:50:96:5b:b7:31:3a:04:cd:22:19:72:b0: 8a:73:1f:ac:99:30:81:ac:83:19:5f:7a:47:dc:18:cb:d5:12: 63:5f:47:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rvr35317KMEeOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YjYwZWM3NGQtYjcxYy00YjE2LThiMDMtNThiODdmMmZhMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrG/YY/y/cXAcEZOHB4hv3ZCiRjpn3aUd15q XSzlOm2haMSUj83TGjXn5GUBfa9iywk2A+UyIeS6HMxuHZdPMSBQvFDJWFtE2Etn ZVTD99QOgOSs0KSVHbussWUr+rw+uBba9B8qtx21S/Mg8ymU91Q6Jq++bvvOoc5F qi8VQ7mZ1Z7JHND/Tqm6ZWO4i4HH4quyxB3NCCKTc/JlyiN4nFxqHOp3o1cMUqwn phbhSPdOKZIDod6RP/D5+TguIMrIKvZoAPyWLPUILhS5zY2lr6JuUQYODqiFsXue BpBq37UfMNwTFi6tP7Q8d8+VE5qaTfBIY/sMgwu7cs1oK8lHewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOMOwiHO5103EY+oR0ORCXTHqqTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDA2MmM2YTgtMDk3Zi0z MzM2LTg3ZjQtYTcyYWJkZWM4NjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx/oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICEAs0p0xhDK4ScMTTE7h7+g2DdGl23Mmy3JFoRhNEOX5rxZ/2cqEW/ BNc6Rj6TKjkuHZAYGNxoGaOrUTa5avABQFl6OKsUyJJaLt6WW6T/99kINNQRtre/ IjrnZ6srU4R+2G0wjl4ze7eoQZ1yX/JKA03HN1cjbrtsU3a2T2RXZCU6wnl8soKu BMb8RqP8BxzJMq0gbq02NxoAfgSa9Y+uovMBXS3Z7STZPGbKl3ubBZB3O2ZbMoCH VtW9Q9Z2ZfH2zi4SaN8IaMhCK2SXU9AzNsM2xX3RU0uqUrk591CWW7cxOgTNIhly sIpzH6yZMIGsgxlfekfcGMvVEmNfR2Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:03:48 2025 by rpki-client