$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f51594fb-7f2d-3c09-a7b2-efae87026eff.roa File: f51594fb-7f2d-3c09-a7b2-efae87026eff.roa (raw, json) Hash identifier: w18rSNlrOCYYLQLM+VPHIjmSRwrm4f3TLf2GQb+dyoc= Subject key identifier: 2B:E6:D7:26:62:14:38:CC:9D:60:D6:89:21:EF:57:CF:25:30:B6:1D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584898D61F8B206FC68105A4B3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f51594fb-7f2d-3c09-a7b2-efae87026eff.roa Signing time: Sun 19 Jan 2025 14:00:52 +0000 ROA not before: Sun 19 Jan 2025 14:00:52 +0000 ROA not after: Sat 19 Apr 2025 13:00:52 +0000 asID: 7029 IP address blocks: 173.187.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:98:d6:1f:8b:20:6f:c6:81:05:a4:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 19 14:00:52 2025 GMT Not After : Apr 19 13:00:52 2025 GMT Subject: CN=cc6cc1d3-21a0-4ab4-ad4f-9e04aa70979b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:48:fa:8d:64:2f:e3:30:3f:98:68:93:fc:63: 64:6b:ab:98:d1:47:02:a0:cc:7d:e6:14:64:b5:a8: af:24:fc:48:9b:a2:8b:d3:29:f9:77:05:5b:62:83: 04:e2:ae:48:7e:ed:67:8f:8d:fc:b7:f7:aa:21:25: 0c:d5:f0:2c:12:18:b7:6d:14:27:c1:15:0a:6c:e6: df:9d:d5:ac:38:07:dc:7e:43:80:98:62:ec:63:1a: 59:8b:be:cf:09:1e:56:5d:8b:c5:5a:3a:b3:3d:8b: 24:1f:7d:95:b6:32:ed:64:8f:15:7f:21:37:bc:fe: 74:05:b1:71:a9:f3:cc:23:65:8f:50:f4:be:28:37: 3c:11:75:f4:1c:fd:95:1f:8c:ad:91:3c:fb:15:b2: b9:cc:ba:73:be:6a:8b:05:0d:a9:00:ed:67:29:a7: b0:68:ba:58:da:82:fc:88:59:41:62:bd:72:73:3f: 04:9c:07:cc:b6:71:06:d4:ec:ac:0c:de:e0:89:08: 25:9a:b9:f1:ca:f9:e7:db:69:e2:53:35:41:97:ec: e7:f4:44:83:ac:de:7d:12:e4:1f:5c:f0:05:13:48: d8:c7:13:b3:77:11:72:f7:44:90:a5:7c:b3:8f:38: 36:a2:e8:b0:11:8e:e0:1a:73:c0:84:1d:ed:04:10: a2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E6:D7:26:62:14:38:CC:9D:60:D6:89:21:EF:57:CF:25:30:B6:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f51594fb-7f2d-3c09-a7b2-efae87026eff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:65:96:c2:d0:e1:ad:04:43:72:bf:a6:24:57:60:1f:ca:1d: e5:66:61:98:ec:b4:4d:29:ee:7d:26:4f:ec:c3:f3:47:09:e6: 5d:0f:d0:5e:3e:8e:e8:0f:4d:0a:9d:1b:c0:a7:15:b9:75:4e: c2:d7:71:a3:cc:57:06:7a:e3:b3:6d:c3:df:c3:d0:d8:bf:43: 47:03:fc:d5:d5:79:e7:8c:f5:e2:3c:13:0a:4c:32:c1:78:51: 0c:b3:e4:05:b9:a6:26:ca:62:a2:32:23:47:aa:9a:11:4c:89: aa:f9:f1:ff:d5:a6:0c:82:ec:87:2c:e8:60:67:21:e6:9a:ce: f1:26:2f:cc:36:89:8c:dd:2d:fb:4c:2d:42:72:a7:6c:4f:85: 68:75:43:58:e0:22:90:9d:29:bc:54:da:0e:65:ff:3a:2e:6a: f2:35:bc:9c:ca:4b:c4:ab:53:28:0e:d7:a6:f3:bc:ab:41:ba: 7c:1a:57:46:11:4a:f3:de:1d:c5:99:1d:b6:4b:61:86:ad:ad: 8e:da:92:14:e9:34:97:40:6d:23:22:dc:ef:e1:c3:da:c8:21: a9:d8:49:17:3a:0c:fe:e5:e7:11:06:b8:06:26:bb:56:98:fe: 7b:84:5a:c5:d3:2a:c6:41:3e:02:45:df:e1:6a:3b:d2:d7:7c: 8a:d4:b6:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1h+LIG/GgQWks8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2M2Y2MxZDMtMjFhMC00YWI0LWFkNGYtOWUwNGFhNzA5NzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0j6jWQv4zA/mGiT/GNka6uY0UcCoMx95hRk taivJPxIm6KL0yn5dwVbYoME4q5Ifu1nj438t/eqISUM1fAsEhi3bRQnwRUKbObf ndWsOAfcfkOAmGLsYxpZi77PCR5WXYvFWjqzPYskH32VtjLtZI8VfyE3vP50BbFx qfPMI2WPUPS+KDc8EXX0HP2VH4ytkTz7FbK5zLpzvmqLBQ2pAO1nKaewaLpY2oL8 iFlBYr1ycz8EnAfMtnEG1OysDN7giQglmrnxyvnn22niUzVBl+zn9ESDrN59EuQf XPAFE0jYxxOzdxFy90SQpXyzjzg2ouiwEY7gGnPAhB3tBBCi1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvm1yZiFDjMnWDWiSHvV88lMLYdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjUxNTk0ZmItN2YyZC0z YzA5LWE3YjItZWZhZTg3MDI2ZWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpllsLQ4a0EQ3K/piRXYB/KHeVmYZjstE0p7n0mT+zD80cJ5l0P0F4+ jugPTQqdG8CnFbl1TsLXcaPMVwZ647Ntw9/D0Ni/Q0cD/NXVeeeM9eI8EwpMMsF4 UQyz5AW5pibKYqIyI0eqmhFMiar58f/VpgyC7Ics6GBnIeaazvEmL8w2iYzdLftM LUJyp2xPhWh1Q1jgIpCdKbxU2g5l/zouavI1vJzKS8SrUygO16bzvKtBunwaV0YR SvPeHcWZHbZLYYatrY7akhTpNJdAbSMi3O/hw9rIIanYSRc6DP7l5xEGuAYmu1aY /nuEWsXTKsZBPgJF3+FqO9LXfIrUtno= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:47 2025 by rpki-client