$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa File: d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa (raw, json) Hash identifier: Q4fxHSw6KvjTNBXC9BRubLGMLPUkH0mK1WmloNT/P1A= Subject key identifier: 92:DA:8C:FE:4E:BD:B0:AC:E1:3A:64:05:48:A2:A0:E3:B1:A5:68:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE12107F87AAE7346891540 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 174.131.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:21:07:f8:7a:ae:73:46:89:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=786d8b6b-c90d-4d4f-bad2-0b209e943766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:04:65:8c:99:e1:ba:91:79:3c:d4:a5:b2:43: 35:37:0c:9c:bf:b3:72:f5:1f:a6:cf:c4:94:4d:89: 9e:15:bf:82:27:49:cd:e6:b0:a4:0f:17:77:c3:48: 2a:01:11:65:09:74:94:64:c9:22:bf:e2:98:2e:5b: 43:23:9e:80:de:20:2b:8a:46:27:98:fa:e7:6a:4a: dc:76:65:a4:a1:13:b7:5f:db:38:a0:1e:e9:96:cd: 99:0f:2e:4a:aa:f9:96:c8:b8:3b:45:82:c6:26:a3: ae:84:c7:0a:45:32:a0:e9:67:3e:96:8a:0a:7c:de: 49:8f:33:1b:ec:03:8e:df:22:56:83:bc:85:c5:60: e0:8f:14:ba:9b:dd:c2:08:0b:54:1f:bb:c7:28:6b: bb:53:cf:6b:51:9b:27:ff:af:97:74:3e:cc:85:46: 90:37:82:7c:b6:72:a3:3f:61:f4:33:54:21:b1:7f: 21:74:49:e7:7f:b8:7b:48:84:2f:5b:95:d6:f8:bb: 82:42:4a:16:fa:44:84:b8:c1:bf:9f:bb:5c:e9:e7: 03:12:5d:db:e1:75:a0:cb:28:91:41:95:f5:1b:e4: 19:28:a2:ae:d7:53:6f:e5:7b:d5:72:64:65:6a:b7: 96:3c:1a:a4:e8:91:57:c8:d5:57:8d:66:04:c4:ec: 41:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DA:8C:FE:4E:BD:B0:AC:E1:3A:64:05:48:A2:A0:E3:B1:A5:68:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d5f7a366-ecf9-3e0a-aa6d-4541ba89e116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8c:46:f2:c2:69:20:f1:3f:68:ec:9e:bf:9d:da:be:9b:38: b3:ff:3d:e9:15:d3:e7:24:d3:f0:c5:46:ce:66:5c:31:af:a4: ec:f3:6f:0b:03:36:df:10:0d:38:4f:5f:98:0b:69:71:54:2c: a7:e4:a3:ae:88:a0:41:c9:88:d5:3e:a3:f2:4e:62:d1:31:37: 16:10:f3:70:b0:cc:e1:cc:a0:cd:aa:42:ec:e1:bf:27:48:9e: aa:34:ba:02:c9:8f:a7:84:db:5a:95:10:80:5f:15:15:e6:1e: a8:f8:81:c1:84:47:b9:a5:98:bc:fb:63:f7:90:78:35:7d:c1: 31:1e:3e:cc:13:d8:5d:1c:2e:ed:1a:7f:a4:09:36:b2:66:62: 11:80:49:e6:7a:a8:66:6f:94:03:29:5f:a7:3f:96:ce:a0:3f: 91:3d:60:db:7f:15:24:e7:3d:34:81:e7:5f:d4:b6:7e:c3:c2: f7:95:88:ff:ff:da:b7:b4:8a:5e:18:1d:d8:c2:dc:13:e3:91: b1:f1:e6:ce:95:7f:4b:29:a5:f6:18:a9:88:fb:0f:ac:cc:f7: e9:07:cd:f7:a9:d1:0a:cd:af:43:f9:67:78:8f:06:a2:50:38: ce:a3:91:9e:80:d1:3b:3d:dc:af:af:08:b1:e3:80:a9:a6:2f: c4:cc:71:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4SEH+Hquc0aJFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk Nzg2ZDhiNmItYzkwZC00ZDRmLWJhZDItMGIyMDllOTQzNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwRljJnhupF5PNSlskM1Nwycv7Ny9R+mz8SU TYmeFb+CJ0nN5rCkDxd3w0gqARFlCXSUZMkiv+KYLltDI56A3iArikYnmPrnakrc dmWkoRO3X9s4oB7pls2ZDy5KqvmWyLg7RYLGJqOuhMcKRTKg6Wc+looKfN5JjzMb 7AOO3yJWg7yFxWDgjxS6m93CCAtUH7vHKGu7U89rUZsn/6+XdD7MhUaQN4J8tnKj P2H0M1QhsX8hdEnnf7h7SIQvW5XW+LuCQkoW+kSEuMG/n7tc6ecDEl3b4XWgyyiR QZX1G+QZKKKu11Nv5XvVcmRlareWPBqk6JFXyNVXjWYExOxBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLajP5OvbCs4TpkBUiioOOxpWgiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDVmN2EzNjYtZWNmOS0z ZTBhLWFhNmQtNDU0MWJhODllMTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWMRvLCaSDxP2jsnr+d2r6bOLP/PekV0+ck0/DFRs5mXDGvpOzzbwsD Nt8QDThPX5gLaXFULKfko66IoEHJiNU+o/JOYtExNxYQ83CwzOHMoM2qQuzhvydI nqo0ugLJj6eE21qVEIBfFRXmHqj4gcGER7mlmLz7Y/eQeDV9wTEePswT2F0cLu0a f6QJNrJmYhGASeZ6qGZvlAMpX6c/ls6gP5E9YNt/FSTnPTSB51/Utn7DwveViP// 2re0il4YHdjC3BPjkbHx5s6Vf0sppfYYqYj7D6zM9+kHzfep0QrNr0P5Z3iPBqJQ OM6jkZ6A0Ts93K+vCLHjgKmmL8TMcUA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:12 2025 by rpki-client