$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f92409f3-3063-397c-aeb2-49d1bf7f3e6c.roa File: f92409f3-3063-397c-aeb2-49d1bf7f3e6c.roa (raw, json) Hash identifier: gbb6MjwfREM3PPCEIbcpf6UaXmzsC1x3J6ysBeJcdeg= Subject key identifier: 95:DB:67:14:AD:91:25:AD:4B:75:0B:99:F6:44:79:B5:2C:99:4E:35 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB575AE76205C981FF55AA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f92409f3-3063-397c-aeb2-49d1bf7f3e6c.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 71.28.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:75:ae:76:20:5c:98:1f:f5:5a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=cdad7c6a-57cf-43bb-9885-49b4173fb12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:31:48:b1:d1:51:95:7d:f5:93:64:7a:87:c2: e8:20:4b:58:77:52:c6:69:57:a0:14:b0:f5:e9:5b: 12:71:c4:92:10:1d:7d:a0:65:3d:9e:cf:a7:e6:84: d0:c8:9c:19:24:3f:eb:9e:85:78:03:fe:71:cb:e3: 1e:2f:0c:08:75:ef:6a:56:9b:ab:1f:4f:1c:07:04: 00:c4:cd:5f:91:52:f1:bd:a9:f2:0b:74:b5:28:65: 2f:f4:25:c2:27:2e:f7:1f:7b:a4:94:6e:9d:59:64: 6c:59:ef:ba:0f:e0:2f:09:7d:a0:2b:eb:99:49:8d: d9:66:f0:74:b6:6a:cc:88:73:81:48:90:87:30:41: 33:1d:18:b5:af:f9:0d:5b:81:1e:5c:64:c2:12:10: 2f:72:73:a2:69:61:28:88:96:e7:8d:00:4d:04:61: 3e:a6:08:bc:f6:00:46:ce:d5:46:3b:6a:1d:85:b2: 17:04:73:3c:9c:55:96:17:fa:91:3c:83:c3:af:df: 7e:db:dc:ca:2b:45:c6:c1:4e:ba:4c:13:6f:40:05: bd:d7:7b:76:f0:a8:eb:e0:6b:c9:86:7b:77:3a:db: 5b:93:dc:0d:08:7d:3c:4e:c7:ec:02:6e:b4:a2:14: ac:3f:03:41:46:03:20:ab:5c:de:4c:d9:32:23:a6: 71:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DB:67:14:AD:91:25:AD:4B:75:0B:99:F6:44:79:B5:2C:99:4E:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f92409f3-3063-397c-aeb2-49d1bf7f3e6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.196.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:34:38:b8:87:76:fd:62:50:b2:9d:35:0f:74:69:40:7c:0b: 3d:8f:21:3f:98:b9:b3:ef:99:96:a3:9c:e0:d7:f3:ca:47:7b: 6b:c4:16:ef:6e:91:9b:82:55:0c:c1:9b:c2:63:44:a6:21:a5: 0e:4e:ae:3b:c1:b9:37:87:d5:ed:f6:ef:36:ca:d3:93:04:02: 57:47:85:0e:20:57:40:9f:43:7c:e8:81:55:e4:88:58:cf:e9: 1a:86:6f:f6:5d:c4:81:58:2a:b2:69:47:22:48:5c:9d:aa:ca: 83:71:e5:b6:1c:3e:cc:b9:63:b6:53:06:14:85:61:d8:dc:16: dd:31:1d:ea:20:5c:b3:ea:72:e8:af:7b:57:dd:39:58:74:7b: 21:62:e5:18:c0:55:c6:47:85:a7:45:7c:4f:54:cc:03:fc:71: 0a:23:c1:79:22:da:fb:75:7a:0a:66:fa:42:e4:63:eb:be:d4: 81:6c:5b:7c:11:a7:b7:9b:ab:4e:52:d5:52:c0:c6:5f:d7:31: 23:5e:9a:c4:25:c5:59:2a:0e:a3:7a:d7:ad:60:df:e1:d3:48: 73:8b:53:63:b3:e5:f5:93:be:a0:25:44:37:8a:ac:13:96:ef: f2:a4:9d:ac:dc:d6:d9:7e:07:ad:f6:81:2e:d4:9a:19:26:e3: a9:a4:8d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXWudiBcmB/1WqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk Y2RhZDdjNmEtNTdjZi00M2JiLTk4ODUtNDliNDE3M2ZiMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDFIsdFRlX31k2R6h8LoIEtYd1LGaVegFLD1 6VsSccSSEB19oGU9ns+n5oTQyJwZJD/rnoV4A/5xy+MeLwwIde9qVpurH08cBwQA xM1fkVLxvanyC3S1KGUv9CXCJy73H3uklG6dWWRsWe+6D+AvCX2gK+uZSY3ZZvB0 tmrMiHOBSJCHMEEzHRi1r/kNW4EeXGTCEhAvcnOiaWEoiJbnjQBNBGE+pgi89gBG ztVGO2odhbIXBHM8nFWWF/qRPIPDr99+29zKK0XGwU66TBNvQAW913t28Kjr4GvJ hnt3Ottbk9wNCH08TsfsAm60ohSsPwNBRgMgq1zeTNkyI6ZxVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXbZxStkSWtS3ULmfZEebUsmU41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjkyNDA5ZjMtMzA2My0z OTdjLWFlYjItNDlkMWJmN2YzZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxzEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg0OLiHdv1iULKdNQ90aUB8Cz2PIT+YubPvmZajnODX88pHe2vEFu9u kZuCVQzBm8JjRKYhpQ5OrjvBuTeH1e327zbK05MEAldHhQ4gV0CfQ3zogVXkiFjP 6RqGb/ZdxIFYKrJpRyJIXJ2qyoNx5bYcPsy5Y7ZTBhSFYdjcFt0xHeogXLPqcuiv e1fdOVh0eyFi5RjAVcZHhadFfE9UzAP8cQojwXki2vt1egpm+kLkY+u+1IFsW3wR p7ebq05S1VLAxl/XMSNemsQlxVkqDqN6161g3+HTSHOLU2Oz5fWTvqAlRDeKrBOW 7/Kknazc1tl+B632gS7Umhkm46mkjQ8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:08 2025 by rpki-client