$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa File: e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa (raw, json) Hash identifier: MsvDcAdfzy3I2e+moZt5wr3fDAs8lbUHoBQcva6CqmY= Subject key identifier: 02:19:37:CE:F3:03:B6:17:99:33:2D:78:24:1C:0B:C9:EF:EA:A2:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483E1AC07F0FAAF3D043BF6E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.136.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:c0:7f:0f:aa:f3:d0:43:bf:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=711699f6-74af-4226-80a1-2206867274d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:db:a0:e7:92:35:88:16:09:6a:2f:15:1e:57: 46:b5:e1:65:af:bf:8c:9e:62:51:78:ce:dd:e8:4c: 11:e0:c0:c2:df:b4:ba:f0:41:e6:b4:7b:f7:2c:d8: 58:e0:63:b1:54:1e:b9:12:a5:b3:7e:41:95:be:d2: ab:a0:2b:86:c0:f2:71:2b:ed:8a:43:19:35:64:b6: f0:b3:f4:40:d5:93:56:ee:f6:6f:ab:6a:8b:2e:09: 6a:25:fb:64:c1:a6:c0:43:93:30:b6:65:b7:62:e7: 6c:55:18:e1:83:23:6e:97:31:f5:b1:8e:e0:f1:aa: 04:ae:0e:cf:c3:52:70:9d:d9:17:bf:b3:15:a7:22: d5:52:52:68:f3:ac:84:a5:ab:b3:6c:cd:52:2d:e1: 8d:6a:32:35:aa:6e:53:de:89:74:07:5c:c0:73:5f: 6d:b0:d1:2c:f6:14:74:95:af:f9:1c:4b:10:47:c9: 93:a2:d1:ce:30:16:ed:4b:fe:1f:76:51:ee:a3:81: 92:53:9d:eb:9e:e2:2d:af:9b:f4:d6:08:f1:05:f7: cd:dd:56:7a:ab:4a:1b:ce:6e:c2:3d:c1:12:dd:3d: dd:f2:c6:13:77:43:47:33:e4:26:82:98:95:1f:47: 0c:6a:0f:6a:a8:e1:1c:a8:78:a7:a3:6e:15:bc:33: c7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:19:37:CE:F3:03:B6:17:99:33:2D:78:24:1C:0B:C9:EF:EA:A2:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e05bafe5-75ce-34c7-9fe8-3d720a3fb1b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.136.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:d6:45:e0:df:f4:20:d8:05:22:ef:ce:89:33:67:b3:65:25: b1:00:15:bd:e1:3f:49:b6:b2:d6:63:2a:75:05:86:a5:15:de: c7:a2:8f:63:0b:30:98:0e:20:19:1a:74:ff:bd:13:43:38:a7: 3f:ff:e9:80:c4:a0:30:9d:15:46:cc:8d:87:a2:a5:a6:57:69: 1c:10:8c:fc:ab:39:11:09:4b:63:40:83:ea:4a:a0:07:1b:62: 01:c8:fb:b6:d7:96:6a:52:ee:5f:24:84:57:c6:fc:f6:a1:21: ed:a3:b2:cd:13:60:07:80:d6:55:a2:c7:eb:c4:08:57:a3:9f: 71:6d:00:d3:30:8e:a7:fc:2d:1c:61:38:aa:4f:48:26:8a:88: c3:12:b0:4c:bc:bc:34:ac:a5:d9:8d:a0:38:56:bc:11:7f:0d: 0a:1b:0a:4f:9b:85:4d:70:70:72:cc:47:ae:0a:56:10:a6:08: 0b:7c:1e:4f:cd:f4:0d:c5:8c:0a:dd:1a:ec:fc:de:62:b7:50: 03:e1:fe:3f:00:6f:0a:cd:50:83:ee:8c:aa:41:23:a9:98:88: 46:75:42:20:60:70:64:ce:f4:60:72:98:93:d1:f9:71:9a:c2: 81:46:40:8c:61:4e:e7:8a:ea:f9:03:e5:89:a9:26:0b:5f:13: 57:19:f1:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GsB/D6rz0EO/bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk NzExNjk5ZjYtNzRhZi00MjI2LTgwYTEtMjIwNjg2NzI3NGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldug55I1iBYJai8VHldGteFlr7+MnmJReM7d 6EwR4MDC37S68EHmtHv3LNhY4GOxVB65EqWzfkGVvtKroCuGwPJxK+2KQxk1ZLbw s/RA1ZNW7vZvq2qLLglqJftkwabAQ5MwtmW3YudsVRjhgyNulzH1sY7g8aoErg7P w1JwndkXv7MVpyLVUlJo86yEpauzbM1SLeGNajI1qm5T3ol0B1zAc19tsNEs9hR0 la/5HEsQR8mTotHOMBbtS/4fdlHuo4GSU53rnuItr5v01gjxBffN3VZ6q0obzm7C PcES3T3d8sYTd0NHM+QmgpiVH0cMag9qqOEcqHino24VvDPHyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIZN87zA7YXmTMteCQcC8nv6qJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTA1YmFmZTUtNzVjZS0z NGM3LTlmZTgtM2Q3MjBhM2ZiMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIhLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/WReDf9CDYBSLvzokzZ7NlJbEAFb3hP0m2stZjKnUFhqUV3seij2ML MJgOIBkadP+9E0M4pz//6YDEoDCdFUbMjYeipaZXaRwQjPyrOREJS2NAg+pKoAcb YgHI+7bXlmpS7l8khFfG/PahIe2jss0TYAeA1lWix+vECFejn3FtANMwjqf8LRxh OKpPSCaKiMMSsEy8vDSspdmNoDhWvBF/DQobCk+bhU1wcHLMR64KVhCmCAt8Hk/N 9A3FjArdGuz83mK3UAPh/j8AbwrNUIPujKpBI6mYiEZ1QiBgcGTO9GBymJPR+XGa woFGQIxhTueK6vkD5YmpJgtfE1cZ8UI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:54 2025 by rpki-client