$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa File: de489e93-9e7d-3cda-8126-d8c859ae8754.roa (raw, json) Hash identifier: ykKTwNUEy/ySKmleaCBwVH8UJRMo8URTEkV43RamHao= Subject key identifier: 04:78:EB:7C:E3:A0:D0:8C:F9:52:C9:62:FB:FE:8F:B5:7A:27:F9:8E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABB8F4344DED71BB548600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 40.142.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:b8:f4:34:4d:ed:71:bb:54:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=29b55153-7bd9-404c-9fc5-5a158484e5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a3:fa:b7:d1:a2:0c:9c:25:b1:61:5e:96:9e: bd:b2:0b:d9:07:d3:ef:22:c8:d7:4f:d8:a1:73:17: 85:db:4c:52:ae:53:2e:64:cc:e4:b4:a2:4f:bb:8b: 75:59:a7:ad:99:58:2e:0f:95:b9:59:e5:a1:68:17: a2:ae:dd:ee:b6:c7:c5:1c:d3:ce:1e:69:3e:54:a3: 01:cf:0e:6d:8b:4d:7f:d6:20:31:2d:d1:f3:da:0f: 1a:41:5d:7a:7f:a0:82:24:10:1b:e7:bd:05:2a:16: ee:4a:25:a6:71:04:1d:8e:64:6e:b3:74:20:77:a2: 07:3f:17:87:8e:a6:7a:a3:23:f6:27:4b:f2:18:81: 76:99:78:08:da:fd:0b:ed:9e:66:d8:83:12:35:8a: 22:65:4f:f6:ad:96:8e:a6:7f:ba:7d:f5:60:e0:bd: f9:e8:82:0b:24:38:b2:e1:ce:62:67:ee:7b:8a:ae: 87:53:5f:f1:f0:4d:17:bb:45:5e:80:c9:9d:c0:f2: aa:4a:94:2f:23:80:0f:37:93:64:05:34:e3:cb:d5: f4:58:77:8d:96:d2:24:b3:98:df:bb:f1:ed:a6:d6: 0b:54:a3:70:e0:b2:0f:a4:51:5a:cf:45:44:a0:47: 3e:fe:16:be:3f:1c:71:f9:57:0e:93:1d:7a:4e:37: 90:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:78:EB:7C:E3:A0:D0:8C:F9:52:C9:62:FB:FE:8F:B5:7A:27:F9:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/de489e93-9e7d-3cda-8126-d8c859ae8754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.200.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:a7:b9:0c:68:1d:fa:6b:7d:9f:4a:ee:94:98:9c:cf:a5:9e: d8:5b:bb:b8:c0:22:5e:0f:3c:e2:bd:6e:07:01:b3:0a:c8:0a: 7c:d4:03:a8:f9:61:14:6a:ba:dd:d6:0e:71:ed:ad:de:fc:7c: 27:8c:b8:95:50:7b:36:4f:b2:1d:f1:56:c7:ac:6f:8a:70:ef: 25:38:e6:db:62:0f:a3:44:8d:d1:96:48:71:6d:cc:1f:02:9c: c8:34:c6:e6:84:14:27:24:ed:88:18:69:f4:36:25:ed:cb:75: c5:bd:e8:70:45:51:57:a1:ca:99:af:c7:f5:89:10:de:d6:cf: ba:91:f4:d6:a9:7c:20:bb:5a:d6:c5:c4:58:3c:52:9c:ec:d3: e6:9c:b4:89:66:f8:2e:b3:ef:01:f1:39:c9:83:e5:6b:a0:d3: be:74:f5:11:59:af:0c:c5:a4:29:52:63:d1:b6:4e:97:67:60: fc:7d:58:84:47:08:78:8d:9d:ef:2c:86:2c:4c:48:c0:4b:81: 4f:4b:7e:c0:bd:1c:43:fc:2f:ac:c3:aa:38:70:0a:eb:e2:f4: 55:bd:22:d1:3e:02:a3:0e:70:87:0b:a0:cf:6d:1f:5e:87:fa: 76:e4:58:36:a2:46:97:86:f9:86:3c:84:98:ec:7a:84:03:8a: ae:fd:f2:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7j0NE3tcbtUhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MjliNTUxNTMtN2JkOS00MDRjLTlmYzUtNWExNTg0ODRlNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aP6t9GiDJwlsWFelp69sgvZB9PvIsjXT9ih cxeF20xSrlMuZMzktKJPu4t1WaetmVguD5W5WeWhaBeirt3utsfFHNPOHmk+VKMB zw5ti01/1iAxLdHz2g8aQV16f6CCJBAb570FKhbuSiWmcQQdjmRus3Qgd6IHPxeH jqZ6oyP2J0vyGIF2mXgI2v0L7Z5m2IMSNYoiZU/2rZaOpn+6ffVg4L356IILJDiy 4c5iZ+57iq6HU1/x8E0Xu0VegMmdwPKqSpQvI4APN5NkBTTjy9X0WHeNltIks5jf u/HtptYLVKNw4LIPpFFaz0VEoEc+/ha+Pxxx+VcOkx16TjeQsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAR463zjoNCM+VLJYvv+j7V6J/mOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGU0ODllOTMtOWU3ZC0z Y2RhLTgxMjYtZDhjODU5YWU4NzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI7IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqnuQxoHfprfZ9K7pSYnM+lnthbu7jAIl4PPOK9bgcBswrICnzUA6j5 YRRqut3WDnHtrd78fCeMuJVQezZPsh3xVsesb4pw7yU45ttiD6NEjdGWSHFtzB8C nMg0xuaEFCck7YgYafQ2Je3LdcW96HBFUVehypmvx/WJEN7Wz7qR9NapfCC7WtbF xFg8Upzs0+actIlm+C6z7wHxOcmD5Wug07509RFZrwzFpClSY9G2TpdnYPx9WIRH CHiNne8shixMSMBLgU9LfsC9HEP8L6zDqjhwCuvi9FW9ItE+AqMOcIcLoM9tH16H +nbkWDaiRpeG+YY8hJjseoQDiq798kU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:41 2025 by rpki-client