$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd7a6471-eba9-3f0e-a765-02d444ab83a6.roa File: dd7a6471-eba9-3f0e-a765-02d444ab83a6.roa (raw, json) Hash identifier: kBvPHeGmfc5F9hu69B6Peg+ACwfAmNNoAXV67ufYXWI= Subject key identifier: 60:1C:F8:CD:9F:D5:AE:F5:09:1B:08:49:14:3E:D3:2C:7B:DB:EE:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111E2499E1A2F4128A7442 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd7a6471-eba9-3f0e-a765-02d444ab83a6.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.31.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:1e:24:99:e1:a2:f4:12:8a:74:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=69c48b7a-e03b-406f-a945-4a36a903d44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:61:a7:04:25:cb:93:97:5a:0e:dc:9b:af:e4: 8e:ee:bc:2a:fb:98:2c:58:de:06:15:a4:8d:b1:65: b4:59:36:dc:f4:8c:29:19:e3:b4:1c:43:c6:e7:20: d2:13:50:47:71:6c:40:e4:c6:15:9b:e3:76:b2:00: 3d:6b:c9:d5:34:c7:28:e6:9f:7c:35:29:4e:11:81: 58:25:c5:cb:15:bd:8f:82:76:55:dc:ba:81:dc:a2: 43:26:41:20:c2:3c:b1:2a:79:81:f5:e7:cd:2c:39: aa:6e:01:2d:a6:3c:76:4d:49:85:18:90:6c:c0:86: 76:43:67:54:ef:51:c2:59:59:97:df:86:55:78:ca: 94:eb:4d:27:84:88:64:6a:5c:2c:4a:1b:0b:dc:1e: c0:1a:2b:ce:c9:8c:9f:0c:e6:d3:b2:4f:ed:4a:c2: c1:6f:e0:16:b4:a4:a3:5b:07:f9:4e:51:d5:e2:54: d0:81:b5:f2:5b:71:08:00:3d:58:a8:5b:97:8d:cd: 46:24:a6:61:56:7e:b5:42:09:a8:21:ea:d6:89:5d: 81:d1:0b:80:c0:2b:a4:4e:01:9e:46:67:98:c7:75: 25:ce:eb:71:e6:cb:59:72:db:2b:a3:27:da:0f:06: fe:39:99:a4:1b:e5:99:2a:76:82:e6:d7:bf:43:56: be:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:1C:F8:CD:9F:D5:AE:F5:09:1B:08:49:14:3E:D3:2C:7B:DB:EE:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dd7a6471-eba9-3f0e-a765-02d444ab83a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:35:70:3a:c5:f2:fd:12:31:6b:0f:2b:fa:57:26:74:ef:e6: 35:6f:54:3b:24:a8:e9:61:e0:c2:67:4e:df:c8:06:a7:21:94: 77:58:f6:65:c4:36:b4:fa:66:b0:62:db:c1:82:4b:ea:32:f5: 9a:3c:33:7e:3e:42:6c:c0:c0:25:b2:a9:f9:13:da:db:82:c8: fa:e4:af:31:b5:91:e5:72:00:1a:00:a5:59:4d:0b:3a:df:c8: 3a:22:33:01:d1:b6:61:43:e6:84:2a:f4:0c:b4:8f:98:53:18: e4:70:8b:e4:45:0c:76:c8:3c:0f:77:70:46:58:ea:5a:bd:cc: 47:c3:08:d0:26:7a:8b:e3:b2:74:d5:9a:59:32:a2:ab:49:ba: 8c:4b:6e:61:ef:f4:aa:6f:f3:8c:d3:bb:ba:83:99:f2:29:bd: eb:9f:8d:3d:f5:0f:dc:c0:c8:b2:8e:a1:96:d8:54:00:91:db: 62:e4:d7:3c:a7:05:83:8e:ad:2d:68:1d:41:51:85:d1:7c:4a: f5:bb:e7:ce:7c:15:f5:0f:13:11:e6:31:33:41:f6:fa:e8:2b: a6:c2:a3:bf:0c:61:93:f2:ce:1c:bd:3a:77:53:ae:6a:02:fd: a7:8e:ec:df:ec:f4:8e:be:af:84:37:7a:aa:f1:35:4b:39:6c: 43:9e:34:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSER4kmeGi9BKKdEIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjljNDhiN2EtZTAzYi00MDZmLWE5NDUtNGEzNmE5MDNkNDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimGnBCXLk5daDtybr+SO7rwq+5gsWN4GFaSN sWW0WTbc9IwpGeO0HEPG5yDSE1BHcWxA5MYVm+N2sgA9a8nVNMco5p98NSlOEYFY JcXLFb2PgnZV3LqB3KJDJkEgwjyxKnmB9efNLDmqbgEtpjx2TUmFGJBswIZ2Q2dU 71HCWVmX34ZVeMqU600nhIhkalwsShsL3B7AGivOyYyfDObTsk/tSsLBb+AWtKSj Wwf5TlHV4lTQgbXyW3EIAD1YqFuXjc1GJKZhVn61QgmoIerWiV2B0QuAwCukTgGe RmeYx3Ulzutx5stZctsroyfaDwb+OZmkG+WZKnaC5te/Q1a+kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAc+M2f1a71CRsISRQ+0yx72+56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGQ3YTY0NzEtZWJhOS0z ZjBlLWE3NjUtMDJkNDQ0YWI4M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRx9MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH41cDrF8v0SMWsPK/pXJnTv5jVvVDskqOlh4MJnTt/IBqchlHdY9mXE NrT6ZrBi28GCS+oy9Zo8M34+QmzAwCWyqfkT2tuCyPrkrzG1keVyABoApVlNCzrf yDoiMwHRtmFD5oQq9Ay0j5hTGORwi+RFDHbIPA93cEZY6lq9zEfDCNAmeovjsnTV mlkyoqtJuoxLbmHv9Kpv84zTu7qDmfIpveufjT31D9zAyLKOoZbYVACR22Lk1zyn BYOOrS1oHUFRhdF8SvW75858FfUPExHmMTNB9vroK6bCo78MYZPyzhy9OndTrmoC /aeO7N/s9I6+r4Q3eqrxNUs5bEOeNMk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:57 2025 by rpki-client