$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa File: d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa (raw, json) Hash identifier: FWoHdeC8tZgEmALJNYdDD6+ZSxki3HSRmt7H/PNbzwc= Subject key identifier: D3:A3:47:7D:2E:4F:75:20:0F:2E:06:D4:E7:17:AE:56:A5:0B:BE:C8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848116FB88216E74D796BC08880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 71.28.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:b8:82:16:e7:4d:79:6b:c0:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=219c1bf3-b92c-42e2-8e1c-91abb81794f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ac:14:06:d4:38:a9:3e:a7:34:8f:a1:5b:53: 28:dc:89:19:8b:af:e6:64:8e:b6:31:97:fc:bb:81: 2c:3e:c5:b0:7c:a6:33:5c:2f:2b:ee:b6:52:b5:95: 17:28:3c:1f:65:c8:3f:87:19:5a:8c:d8:c1:f3:27: 07:10:de:02:bd:2e:7b:67:cd:9b:aa:25:e5:63:46: 09:38:bf:c6:7a:5f:c2:ed:ed:94:07:58:1f:83:4c: 29:ff:5c:34:c7:bb:fa:ee:29:78:a7:cd:8f:ac:7f: c0:e9:af:07:96:79:03:5c:0a:b5:72:74:f2:7f:a9: b7:78:a4:5d:c2:f9:7a:9f:e0:5c:6c:34:9a:12:5f: eb:2a:43:3a:27:c8:08:cb:ef:97:23:bb:ce:09:ff: ff:9c:98:8c:9c:f2:21:29:a9:5d:0f:86:7d:1e:69: d9:16:d1:80:58:cc:15:2c:b7:a7:d2:87:8b:ec:43: 84:47:7e:21:9b:f8:cc:19:f5:ac:90:a9:ad:dc:3e: e3:7d:1e:3b:ed:ef:0b:16:43:ab:d2:6c:79:7d:b0: b2:7a:65:7e:ca:ab:04:76:df:b0:99:9c:a1:a2:2d: 1c:d7:66:4c:f3:c6:a3:23:e4:17:c0:9e:ac:13:ff: 08:74:25:2f:5e:62:99:9d:3e:1e:88:f9:ed:02:1d: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A3:47:7D:2E:4F:75:20:0F:2E:06:D4:E7:17:AE:56:A5:0B:BE:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d6c6a9eb-719d-3cf2-a737-7d7c7a4a2d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.94.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:03:0d:45:98:11:ef:5a:49:ca:93:ae:e8:43:9c:0b:6f:43: bb:da:5d:a0:88:79:78:98:d3:86:57:88:73:d2:b2:68:9c:a3: da:b9:f9:e1:a5:af:5e:12:37:1c:85:02:e8:70:88:35:df:09: 26:0d:eb:eb:84:e0:7f:83:14:f2:72:30:50:7c:f2:b7:01:2a: 5c:37:87:40:5e:bc:70:27:c0:5b:04:67:3b:c1:99:15:04:77: 58:0e:5f:3e:a0:c2:5f:70:3a:6d:74:2f:6a:53:6d:dd:c5:44: 52:bf:e7:e7:f9:d0:94:2b:5f:99:f4:bf:09:11:79:54:32:8c: 94:3f:cc:a3:c3:88:0a:88:10:d1:c3:da:02:a2:22:29:0e:f1: 49:f5:40:b1:f5:30:d6:62:90:c2:69:da:e1:51:22:b9:6f:fa: c5:c1:0b:e2:2e:ca:71:59:6f:00:3c:a1:a2:f3:52:46:37:56: 8f:0d:75:e9:50:9a:43:d4:50:8b:18:bf:b9:8a:54:01:df:a2: 77:14:75:8c:df:b1:6f:09:88:a6:ac:7c:17:8d:36:38:e1:66: 0e:ae:b8:eb:1c:3b:12:54:fc:98:2a:21:c5:00:be:3a:34:5c: 5b:08:9c:29:f5:36:45:e9:54:d4:e4:e3:32:c1:01:4c:81:fe: 62:3c:e0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7iCFudNeWvAiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk MjE5YzFiZjMtYjkyYy00MmUyLThlMWMtOTFhYmI4MTc5NGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqwUBtQ4qT6nNI+hW1Mo3IkZi6/mZI62MZf8 u4EsPsWwfKYzXC8r7rZStZUXKDwfZcg/hxlajNjB8ycHEN4CvS57Z82bqiXlY0YJ OL/Gel/C7e2UB1gfg0wp/1w0x7v67il4p82PrH/A6a8HlnkDXAq1cnTyf6m3eKRd wvl6n+BcbDSaEl/rKkM6J8gIy++XI7vOCf//nJiMnPIhKaldD4Z9HmnZFtGAWMwV LLen0oeL7EOER34hm/jMGfWskKmt3D7jfR477e8LFkOr0mx5fbCyemV+yqsEdt+w mZyhoi0c12ZM88ajI+QXwJ6sE/8IdCUvXmKZnT4eiPntAh1lCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOjR30uT3UgDy4G1OcXrlalC77IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDZjNmE5ZWItNzE5ZC0z Y2YyLWE3MzctN2Q3YzdhNGEyZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMDDUWYEe9aScqTruhDnAtvQ7vaXaCIeXiY04ZXiHPSsmico9q5+eGl r14SNxyFAuhwiDXfCSYN6+uE4H+DFPJyMFB88rcBKlw3h0BevHAnwFsEZzvBmRUE d1gOXz6gwl9wOm10L2pTbd3FRFK/5+f50JQrX5n0vwkReVQyjJQ/zKPDiAqIENHD 2gKiIikO8Un1QLH1MNZikMJp2uFRIrlv+sXBC+IuynFZbwA8oaLzUkY3Vo8NdelQ mkPUUIsYv7mKVAHfoncUdYzfsW8JiKasfBeNNjjhZg6uuOscOxJU/JgqIcUAvjo0 XFsInCn1NkXpVNTk4zLBAUyB/mI84NA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:13 2025 by rpki-client