$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa File: d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa (raw, json) Hash identifier: ko3kw1/YyXl/x2SWGgR7P+1qPaRepEIPepKZvjWA0z0= Subject key identifier: 38:DE:3F:F6:86:D1:A6:92:35:39:DA:30:F9:0F:3A:5E:D1:02:D1:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858488AE0B5BFF3461B722CB1ACC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa Signing time: Tue 14 Jan 2025 14:00:51 +0000 ROA not before: Tue 14 Jan 2025 14:00:51 +0000 ROA not after: Mon 14 Apr 2025 13:00:51 +0000 asID: 7029 IP address blocks: 151.213.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8a:e0:b5:bf:f3:46:1b:72:2c:b1:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 14:00:51 2025 GMT Not After : Apr 14 13:00:51 2025 GMT Subject: CN=659c62c9-b68e-4915-884e-52f438cbcd3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:15:e7:a4:3d:94:26:26:dc:b3:fd:27:ee:c8: 63:2f:22:6a:a3:d6:3e:47:f5:5d:01:d0:e0:7f:de: 05:6f:0e:01:5a:6c:82:2f:95:72:53:ca:a1:dd:da: b7:15:d9:06:00:17:9b:e6:a2:fd:82:d3:e1:42:6b: b5:ba:38:0d:d4:c7:ab:6f:13:5e:73:73:e6:ba:66: d5:20:60:cb:cf:49:d6:4b:20:6a:38:71:43:dc:d5: 9e:68:fb:f2:d6:5d:2d:bc:6d:e5:56:be:04:b0:82: fd:af:86:0e:6c:82:81:b2:9a:78:b5:65:5d:dc:6f: 50:88:f0:c3:05:cd:2c:c9:f6:02:dc:21:3b:87:68: df:f8:14:7c:d8:bc:c8:cb:75:90:a0:12:54:27:6f: bc:d9:2e:85:68:f0:19:70:a5:56:b4:58:f4:a1:03: 3f:15:ee:03:a0:2a:c5:6c:bf:45:0d:87:bb:57:b7: 1a:65:76:10:a8:07:73:7b:43:27:a0:93:d3:3c:1c: a9:a9:33:ab:bf:b5:b7:cf:84:1f:d2:4e:a7:88:6d: 66:7d:66:4f:73:ae:7b:f8:a0:d8:e8:c4:21:26:59: f2:7e:19:03:db:1a:34:ea:10:a6:ab:25:56:64:f1: b4:02:98:31:2a:e7:29:20:26:13:cd:ec:6e:4e:7e: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:DE:3F:F6:86:D1:A6:92:35:39:DA:30:F9:0F:3A:5E:D1:02:D1:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:9a:94:ef:c7:5e:54:5b:60:4f:bd:da:3c:15:bc:27:14:65: 3a:15:04:db:7a:a4:61:56:8a:3d:aa:d7:f1:37:d3:a0:e9:5e: c2:c5:b6:c3:83:6c:79:ae:1d:e6:a1:d6:93:76:e9:02:61:83: bc:c9:06:8a:01:4a:04:29:0a:d2:28:70:95:b6:06:7d:14:66: 34:c1:ea:ed:e6:8e:2a:28:db:f7:61:12:f5:64:65:20:99:36: 29:bc:29:ea:78:4f:8a:da:77:34:b7:49:fd:9e:a6:7e:3c:6d: 0b:a9:6b:df:f6:41:51:f3:5d:53:29:a8:2f:8e:a9:b9:3b:ba: c4:08:62:cd:91:9c:af:4e:81:77:70:28:eb:f5:40:6e:4b:2a: f3:39:fd:28:dc:65:41:70:4a:5f:d9:10:94:42:82:36:ac:2c: 07:ff:96:03:ad:59:30:ea:2f:2c:62:56:5f:d7:b9:6c:76:e4: e3:16:7f:62:9c:ba:cd:a8:2a:19:80:6d:94:90:82:17:94:95: 52:cf:3c:2a:93:3a:87:57:da:24:f1:03:9a:03:f7:07:37:57: 77:78:6e:dd:17:ef:4a:8b:45:1f:cc:66:63:03:ee:21:08:b5: 2e:2c:16:0d:b3:f0:31:e9:b8:6d:f5:a9:99:14:45:65:0e:f1: 00:25:42:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4LW/80YbciyxrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk NjU5YzYyYzktYjY4ZS00OTE1LTg4NGUtNTJmNDM4Y2JjZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBXnpD2UJibcs/0n7shjLyJqo9Y+R/VdAdDg f94Fbw4BWmyCL5VyU8qh3dq3FdkGABeb5qL9gtPhQmu1ujgN1MerbxNec3PmumbV IGDLz0nWSyBqOHFD3NWeaPvy1l0tvG3lVr4EsIL9r4YObIKBspp4tWVd3G9QiPDD Bc0syfYC3CE7h2jf+BR82LzIy3WQoBJUJ2+82S6FaPAZcKVWtFj0oQM/Fe4DoCrF bL9FDYe7V7caZXYQqAdze0MnoJPTPBypqTOrv7W3z4Qf0k6niG1mfWZPc657+KDY 6MQhJlnyfhkD2xo06hCmqyVWZPG0ApgxKucpICYTzexuTn6kwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjeP/aG0aaSNTnaMPkPOl7RAtFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDczYTBhMmEtOTkzMy0z Y2Q1LWIyODktYzdlYjJmODA1YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9VIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSalO/HXlRbYE+92jwVvCcUZToVBNt6pGFWij2q1/E306DpXsLFtsOD bHmuHeah1pN26QJhg7zJBooBSgQpCtIocJW2Bn0UZjTB6u3mjioo2/dhEvVkZSCZ Nim8Kep4T4radzS3Sf2epn48bQupa9/2QVHzXVMpqC+Oqbk7usQIYs2RnK9OgXdw KOv1QG5LKvM5/SjcZUFwSl/ZEJRCgjasLAf/lgOtWTDqLyxiVl/XuWx25OMWf2Kc us2oKhmAbZSQgheUlVLPPCqTOodX2iTxA5oD9wc3V3d4bt0X70qLRR/MZmMD7iEI tS4sFg2z8DHpuG31qZkURWUO8QAlQhw= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:40 2025 by rpki-client