$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d71ca4f8-f024-3d90-8332-332656656afc.roa File: d71ca4f8-f024-3d90-8332-332656656afc.roa (raw, json) Hash identifier: srzlaP9jmYyWlxkJ8/UUZYOkIygHRtw9wYafn9jPsR0= Subject key identifier: BD:ED:E6:AF:03:08:6E:C5:AE:B2:B0:8A:57:7A:7B:94:1D:0C:AC:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B5E66A7EBE02AEAC1D40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d71ca4f8-f024-3d90-8332-332656656afc.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 151.213.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b5:e6:6a:7e:be:02:ae:ac:1d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=36d4858f-4a87-4851-8560-62f9e9429240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:3b:58:98:bd:e0:8a:c6:19:f1:bd:19:09: e4:ea:17:10:ed:90:2f:c6:9d:ae:8c:99:90:dc:f3: 7f:1f:2c:9f:26:d9:2b:bc:5e:ee:66:5a:3e:0a:29: eb:cb:03:f0:49:87:62:42:ee:79:11:62:8f:e1:c2: c1:be:d0:f7:ce:7c:29:41:32:ab:7c:12:26:fd:44: 4c:5d:9c:c6:37:ae:94:17:9b:82:10:ef:39:c7:eb: 37:08:4e:27:f9:ec:63:ff:c3:e9:8c:ca:d4:95:05: 70:5a:a6:ac:d6:1a:51:4f:42:eb:a1:92:96:73:11: d8:90:dd:84:4f:b4:4d:9a:9a:97:06:5f:2d:74:64: 3e:a6:45:68:0e:b0:ec:1b:16:71:28:42:71:b0:41: be:15:ce:c3:ec:14:38:38:84:c3:4e:ce:78:2d:cf: 79:6c:47:c6:dd:d0:96:42:a3:4e:d1:1a:69:39:ee: 72:58:ef:e0:84:6c:c2:23:e1:c1:ae:34:23:fc:c7: 2a:40:73:80:82:38:43:8f:d5:98:37:a0:93:f2:40: 9a:08:78:82:5a:2a:52:45:aa:eb:4a:de:c0:ae:76: 10:49:51:2a:47:d6:5a:af:22:0c:5b:d0:fa:1d:07: 5f:37:23:36:bb:30:3b:c2:16:44:9f:a9:47:4a:6a: 7a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:ED:E6:AF:03:08:6E:C5:AE:B2:B0:8A:57:7A:7B:94:1D:0C:AC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d71ca4f8-f024-3d90-8332-332656656afc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:58:c5:3d:1e:be:11:24:2b:7c:6d:92:15:1b:ba:8a:e7:8c: 1e:3b:12:7d:35:d3:d5:30:b9:09:3a:e2:b4:38:6a:09:9f:8c: 5d:0f:19:73:d9:3c:41:45:db:b6:4e:ef:7b:0f:92:dd:0a:84: 6a:32:93:27:a7:11:a6:ff:55:30:bd:6c:56:bc:f5:27:a8:64: c5:3d:f6:55:be:b3:e5:89:53:ce:05:fa:9d:b4:f2:d8:11:1d: 3c:a5:2e:40:25:15:0d:6f:91:c9:b6:22:ed:f1:83:8c:21:d0: 32:3e:bd:24:5a:9f:1c:6a:24:4c:2e:40:53:e3:6a:9d:62:49: cd:c9:0c:12:cb:d0:87:f1:01:ef:8f:e9:da:a9:65:ba:05:31: ee:eb:98:1c:a3:86:ca:53:84:15:cf:2d:ca:8a:51:e8:6a:b2: 01:57:3f:a2:98:84:1a:83:4f:2b:cc:cd:ec:a3:08:eb:bb:ee: 0b:e0:23:09:17:8c:f9:af:f2:de:fb:29:2d:81:7d:bd:40:34: e8:cb:2b:09:15:d9:e4:f9:12:9c:c2:15:42:0b:90:8b:9e:0a: 16:9e:cb:70:aa:ba:40:82:4c:bd:f4:fb:47:ea:84:85:cf:dc: 59:77:e3:e8:62:d1:a7:b1:ea:bc:d9:17:e5:27:7b:a8:5b:e6: 3b:5c:2a:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LXman6+Aq6sHUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk MzZkNDg1OGYtNGE4Ny00ODUxLTg1NjAtNjJmOWU5NDI5MjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyg7WJi94IrGGfG9GQnk6hcQ7ZAvxp2ujJmQ 3PN/HyyfJtkrvF7uZlo+CinrywPwSYdiQu55EWKP4cLBvtD3znwpQTKrfBIm/URM XZzGN66UF5uCEO85x+s3CE4n+exj/8PpjMrUlQVwWqas1hpRT0LroZKWcxHYkN2E T7RNmpqXBl8tdGQ+pkVoDrDsGxZxKEJxsEG+Fc7D7BQ4OITDTs54Lc95bEfG3dCW QqNO0RppOe5yWO/ghGzCI+HBrjQj/McqQHOAgjhDj9WYN6CT8kCaCHiCWipSRarr St7ArnYQSVEqR9ZaryIMW9D6HQdfNyM2uzA7whZEn6lHSmp6iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3t5q8DCG7FrrKwild6e5QdDKzdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDcxY2E0ZjgtZjAyNC0z ZDkwLTgzMzItMzMyNjU2NjU2YWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1YxT0evhEkK3xtkhUbuornjB47En0109UwuQk64rQ4agmfjF0PGXPZ PEFF27ZO73sPkt0KhGoykyenEab/VTC9bFa89SeoZMU99lW+s+WJU84F+p208tgR HTylLkAlFQ1vkcm2Iu3xg4wh0DI+vSRanxxqJEwuQFPjap1iSc3JDBLL0IfxAe+P 6dqpZboFMe7rmByjhspThBXPLcqKUehqsgFXP6KYhBqDTyvMzeyjCOu77gvgIwkX jPmv8t77KS2Bfb1ANOjLKwkV2eT5EpzCFUILkIueChaey3CqukCCTL30+0fqhIXP 3Fl34+hi0aex6rzZF+Une6hb5jtcKis= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:39 2025 by rpki-client