$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa File: d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa (raw, json) Hash identifier: pdRxMWwoMxK9oAIVEB8zZv5dJVrMiyASxdJZ165Ksn4= Subject key identifier: 57:73:D8:14:66:EF:81:13:84:0D:77:8A:9C:91:DF:BB:8D:2C:C7:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11D698A3FDC107CAA4900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 71.28.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1d:69:8a:3f:dc:10:7c:aa:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=c8d08c4c-4e93-40d5-a907-bd8e8dc7d869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:72:3b:4f:2d:f2:70:ce:4a:37:02:26:e5:b0: 0b:61:33:44:93:57:16:89:ec:ca:5a:58:9a:3b:f6: dd:f9:e9:c2:21:e8:ff:b8:ce:6f:60:a5:a0:3b:bd: bc:28:07:e7:88:79:c7:03:5a:32:03:9e:e6:9b:1b: 8f:f5:f9:51:66:da:0d:57:12:10:15:07:4a:cf:70: ca:42:85:47:d5:fa:e2:76:8b:0f:78:04:b7:1b:4b: c8:09:ff:8d:2f:cb:6b:ca:de:e5:ea:49:b8:61:54: bd:02:e9:9c:b3:cb:64:3e:e2:19:3f:56:31:ce:61: 95:d5:1e:23:9f:e7:0c:24:d0:52:54:c9:a8:7e:e5: 36:34:af:07:25:fa:ca:e4:2e:79:e7:36:00:29:93: 18:e1:42:95:f8:03:16:83:a6:36:ea:d4:d6:2e:17: 67:f8:4b:54:92:f6:cb:7c:a4:bd:f8:3f:3a:4c:b4: 57:b3:55:bc:03:f6:0b:a0:f8:cf:c9:ae:3e:9b:aa: a4:19:c6:64:22:45:56:8c:ca:26:f9:58:0b:27:73: 62:e1:4d:6e:a1:51:31:72:39:95:73:d9:c7:87:db: 4a:ea:b4:24:b4:d9:02:d6:38:03:c6:c0:a3:24:8f: b9:a4:b0:14:7a:d1:3e:4d:c2:a5:8b:95:38:a5:7e: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:73:D8:14:66:EF:81:13:84:0D:77:8A:9C:91:DF:BB:8D:2C:C7:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d4f11cf2-ebd2-37c6-91e3-d9019db7dff1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:31:88:16:00:11:8e:1f:cb:11:ef:34:28:53:fd:69:55:b3: d4:10:39:da:50:27:03:85:2e:74:9c:72:66:77:bd:c7:a9:11: 67:5d:f9:61:6a:42:25:f5:26:96:c7:91:19:71:07:6c:cd:21: 5b:c5:11:49:af:49:d4:cb:54:11:56:fd:d7:e2:91:18:4c:ab: e5:f4:7a:5b:4e:69:d2:ca:19:69:8d:22:8f:a0:77:2a:05:56: 9e:e5:5f:19:06:72:df:1b:4a:3b:33:1c:da:99:c5:73:fd:77: 64:e8:32:f1:62:80:73:57:1b:39:59:fe:55:03:87:a6:10:52: 90:2c:ad:45:46:f4:f9:d5:69:cc:7c:87:06:1d:96:5a:91:f8: 2e:fb:7d:a3:dd:5c:f9:17:76:63:f0:e4:40:bf:7b:60:f6:5b: 32:0a:2c:78:0a:50:02:d2:6b:33:03:ce:24:c5:20:8c:c5:14: f6:60:08:d1:c6:80:c4:b5:ec:26:69:bb:5a:cc:2d:2d:f4:f6: 45:3f:9d:77:3a:3f:70:f4:1a:6b:e8:18:b5:95:16:f8:05:fb: 55:e3:ae:ee:ad:09:80:75:cf:f4:92:94:a4:5d:3a:cf:c1:60: df:55:63:5b:fd:bc:c9:ef:64:f7:db:36:db:31:17:dd:a9:d4: b5:de:e2:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R1pij/cEHyqSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk YzhkMDhjNGMtNGU5My00MGQ1LWE5MDctYmQ4ZThkYzdkODY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHI7Ty3ycM5KNwIm5bALYTNEk1cWiezKWlia O/bd+enCIej/uM5vYKWgO728KAfniHnHA1oyA57mmxuP9flRZtoNVxIQFQdKz3DK QoVH1fridosPeAS3G0vICf+NL8tryt7l6km4YVS9Aumcs8tkPuIZP1YxzmGV1R4j n+cMJNBSVMmofuU2NK8HJfrK5C555zYAKZMY4UKV+AMWg6Y26tTWLhdn+EtUkvbL fKS9+D86TLRXs1W8A/YLoPjPya4+m6qkGcZkIkVWjMom+VgLJ3Ni4U1uoVExcjmV c9nHh9tK6rQktNkC1jgDxsCjJI+5pLAUetE+TcKli5U4pX4rXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdz2BRm74EThA13ipyR37uNLMeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDRmMTFjZjItZWJkMi0z N2M2LTkxZTMtZDkwMTlkYjdkZmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAxiBYAEY4fyxHvNChT/WlVs9QQOdpQJwOFLnSccmZ3vcepEWdd+WFq QiX1JpbHkRlxB2zNIVvFEUmvSdTLVBFW/dfikRhMq+X0eltOadLKGWmNIo+gdyoF Vp7lXxkGct8bSjszHNqZxXP9d2ToMvFigHNXGzlZ/lUDh6YQUpAsrUVG9PnVacx8 hwYdllqR+C77faPdXPkXdmPw5EC/e2D2WzIKLHgKUALSazMDziTFIIzFFPZgCNHG gMS17CZpu1rMLS309kU/nXc6P3D0GmvoGLWVFvgF+1Xjru6tCYB1z/SSlKRdOs/B YN9VY1v9vMnvZPfbNtsxF92p1LXe4qU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:54 2025 by rpki-client