$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa File: dfc46e75-2524-374a-bccb-2391f95825df.roa (raw, json) Hash identifier: Iz2P9qZE5VDJFqY9fygJ7jIBtP+ZpVBvy4yHIgzZk5s= Subject key identifier: 56:E2:1C:89:17:19:FE:7F:5E:81:44:28:CB:88:3D:BE:76:76:8E:4E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210E9B62FA3C2083896FB40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.142.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e9:b6:2f:a3:c2:08:38:96:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0cb34794-8e84-4a94-8be4-acb70cd42109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:96:9b:0d:47:7f:71:23:7c:7c:8c:ca:a2: 96:7e:48:d7:30:0f:c3:fd:12:15:54:fa:ab:91:16: 6b:21:d6:93:3c:89:e7:8e:a7:ab:64:ea:13:ad:b0: 1b:bc:da:ad:06:e8:2c:39:d7:b7:8b:48:91:84:fa: bd:c5:d2:25:22:25:17:9c:73:f9:1e:eb:5a:e6:b2: fa:aa:06:2a:f1:6f:72:1c:63:95:77:01:b2:9e:5b: b2:b3:eb:b0:52:a6:ac:2e:38:5c:19:a7:4b:02:94: 9d:e9:d9:13:4f:f8:75:0c:71:9d:86:be:9e:3b:00: ba:93:19:dd:c7:f0:6e:5a:42:8a:3f:22:13:cb:75: 97:2a:ef:1e:4b:ec:3a:9e:94:b7:8a:2a:22:6e:7a: c1:8d:56:bf:d5:33:ae:19:2b:e4:84:70:8d:9b:af: f4:f9:9f:b8:88:ed:94:07:d1:f1:d1:90:a1:f5:6b: f3:d0:c9:a9:a2:ec:60:d5:e9:fa:61:08:d2:b0:74: 7c:e3:40:8e:bf:70:69:1e:ff:ab:89:35:a5:aa:6b: 43:80:d0:2c:9c:a1:ac:2f:40:ea:2d:c6:2a:92:c8: ca:4e:2e:e5:97:7e:10:18:9c:b3:e3:68:a4:6f:59: ce:97:79:e0:bd:eb:ab:2d:a8:79:7e:df:f3:c0:90: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E2:1C:89:17:19:FE:7F:5E:81:44:28:CB:88:3D:BE:76:76:8E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dfc46e75-2524-374a-bccb-2391f95825df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:5f:1a:6c:71:bf:af:80:c7:7e:18:76:3d:61:3c:da:1c:e6: b3:76:9e:07:f8:b4:2b:52:85:41:7d:d3:a0:65:b6:bf:8d:5f: 60:66:a8:e6:f4:ff:6d:32:45:1e:e1:c0:2d:a9:cf:50:55:78: 2f:c2:0a:5d:c4:ef:87:5f:0b:d3:8a:bb:53:fb:1e:2a:0c:0a: 56:46:67:f5:43:c1:4b:81:0e:93:eb:23:17:e0:52:ad:0c:51: 21:00:eb:63:0b:4f:8d:bc:1e:61:a1:9b:bb:ce:6d:f4:98:75: cc:ac:a1:6f:6d:64:4c:7d:6c:13:77:b4:63:ba:00:89:ac:ef: b4:22:71:fe:8c:79:d3:0e:12:c4:2a:64:4f:fb:f0:23:d5:b9: b3:d5:04:f1:70:04:cd:6b:ab:dd:05:ad:43:0b:74:ce:05:52: 67:23:68:4b:d9:15:06:e0:9a:ba:6b:98:3f:90:7d:55:00:cf: 3b:42:09:33:9e:7f:f0:ee:f7:45:81:7e:e0:e8:9b:10:23:3c: 2a:cf:10:fd:4c:42:b8:ca:38:ad:67:c6:8b:96:8e:b8:11:5c: a2:e8:ee:bc:e1:3e:06:a5:67:6f:3b:d9:3e:f0:00:c8:e1:0c: b8:58:c8:9a:36:e7:f6:b1:78:e2:f9:b7:70:19:6f:35:a0:80: e2:18:b8:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOm2L6PCCDiW+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGNiMzQ3OTQtOGU4NC00YTk0LThiZTQtYWNiNzBjZDQyMTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTKWmw1Hf3EjfHyMyqKWfkjXMA/D/RIVVPqr kRZrIdaTPInnjqerZOoTrbAbvNqtBugsOde3i0iRhPq9xdIlIiUXnHP5Huta5rL6 qgYq8W9yHGOVdwGynluys+uwUqasLjhcGadLApSd6dkTT/h1DHGdhr6eOwC6kxnd x/BuWkKKPyITy3WXKu8eS+w6npS3iioibnrBjVa/1TOuGSvkhHCNm6/0+Z+4iO2U B9Hx0ZCh9Wvz0Mmpouxg1en6YQjSsHR840COv3BpHv+riTWlqmtDgNAsnKGsL0Dq LcYqksjKTi7ll34QGJyz42ikb1nOl3ngveurLah5ft/zwJCmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbiHIkXGf5/XoFEKMuIPb52do5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGZjNDZlNzUtMjUyNC0z NzRhLWJjY2ItMjM5MWY5NTgyNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKI4MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdfGmxxv6+Ax34Ydj1hPNoc5rN2ngf4tCtShUF906Bltr+NX2BmqOb0 /20yRR7hwC2pz1BVeC/CCl3E74dfC9OKu1P7HioMClZGZ/VDwUuBDpPrIxfgUq0M USEA62MLT428HmGhm7vObfSYdcysoW9tZEx9bBN3tGO6AIms77Qicf6MedMOEsQq ZE/78CPVubPVBPFwBM1rq90FrUMLdM4FUmcjaEvZFQbgmrprmD+QfVUAzztCCTOe f/Du90WBfuDomxAjPCrPEP1MQrjKOK1nxouWjrgRXKLo7rzhPgalZ2872T7wAMjh DLhYyJo25/axeOL5t3AZbzWggOIYuGU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:56 2025 by rpki-client