$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa File: fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa (raw, json) Hash identifier: cKt83f4ElBhT70OJ5FgZhTQ9O0AA7Z0T80EzWF+CmG8= Subject key identifier: 2A:A0:64:5D:48:87:C6:BB:F4:B5:61:4E:7D:86:65:24:50:17:D0:9D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112CC948ACA3EE462EC780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 14822 IP address blocks: 40.129.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2c:c9:48:ac:a3:ee:46:2e:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=afc96a6d-b401-4e0b-b6cd-b7d230fa6692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d0:8a:97:bb:c4:e0:a8:6b:55:d2:5d:bc:f3: 0a:56:cc:63:19:58:0f:ef:5c:aa:af:ee:67:e1:c6: 29:51:13:3d:b0:12:9f:ad:21:0d:af:79:2d:e1:94: 4c:9e:63:df:51:de:64:fe:51:b0:d5:2d:ea:96:78: bc:0b:80:da:83:d4:47:13:dd:12:48:ac:28:59:e3: 22:6c:00:10:89:1e:e1:15:42:99:28:46:e1:7a:72: 61:e7:63:fc:78:39:f2:29:6d:0f:b2:40:92:32:d7: a2:47:e0:1d:5a:83:b9:b6:be:cd:a7:be:e0:a2:e1: f0:11:83:39:19:4a:51:40:26:36:da:96:6b:81:9e: f4:e3:b8:d5:34:eb:cb:07:91:e4:22:f9:a1:db:70: 2b:8f:c9:ec:f9:e7:25:18:05:20:fe:5c:8a:b0:98: 6c:b9:06:24:74:ef:77:87:25:47:f5:84:e4:1f:bd: 4c:f6:72:86:6c:a2:c9:c1:5b:db:5f:6d:ef:4b:3d: a0:fc:c8:db:ab:32:90:cd:32:6c:5d:85:27:07:78: d7:21:8b:76:3a:03:44:07:1b:c5:a5:c5:a5:94:5c: 75:43:96:0a:7b:f7:b3:55:91:2e:5b:d0:d1:a6:4f: 3a:c6:5a:ea:fc:5c:22:1c:b2:ae:db:46:fd:25:bd: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A0:64:5D:48:87:C6:BB:F4:B5:61:4E:7D:86:65:24:50:17:D0:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fa789c5f-c113-3a33-8f1d-b792d26d31fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.129.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:e3:87:57:d4:47:f8:e2:f2:42:bc:38:cc:38:a0:78:a4:5e: 62:db:0c:f7:d8:60:c9:5a:eb:f3:7e:92:ef:5c:75:d4:bc:e5: 8d:47:67:08:c7:17:8f:22:30:dd:09:3b:37:1e:af:24:c7:ba: 81:b7:ee:a8:56:96:40:14:4b:ae:e2:13:3b:2a:94:ab:7d:1c: cd:c0:19:05:b9:ed:8b:1d:e5:8b:d5:c7:5b:a2:a8:2b:d9:51: e0:e0:a0:41:9b:fc:7e:f5:eb:3b:13:ae:ab:31:ea:8a:f6:1f: e0:96:bd:26:38:9c:38:76:ba:e7:f4:b1:3f:47:ed:db:c0:b0: 00:a3:96:a7:36:c1:3c:1e:b3:f0:08:67:8b:b2:b5:f4:63:5f: 55:24:d5:0a:71:ea:55:e1:05:c1:bb:9c:6e:dc:71:68:9b:a4: f8:aa:10:cf:72:1f:eb:0f:1f:3d:82:6f:2a:fd:a2:79:bd:0e: 3b:72:a0:bf:03:f1:dd:d9:85:c5:1f:07:29:55:2f:e4:0d:ca: 85:57:b0:20:bc:c9:c5:31:3a:44:fe:3c:84:90:e7:e6:b5:e7: c7:62:87:68:95:44:fe:c8:94:4c:07:fe:3b:72:b6:24:6f:ad: 61:25:df:4d:d5:e7:bf:eb:1c:03:fa:8f:6e:ee:20:5d:f4:73: ec:e8:a1:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESzJSKyj7kYux4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YWZjOTZhNmQtYjQwMS00ZTBiLWI2Y2QtYjdkMjMwZmE2NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39CKl7vE4KhrVdJdvPMKVsxjGVgP71yqr+5n 4cYpURM9sBKfrSENr3kt4ZRMnmPfUd5k/lGw1S3qlni8C4Dag9RHE90SSKwoWeMi bAAQiR7hFUKZKEbhenJh52P8eDnyKW0PskCSMteiR+AdWoO5tr7Np77gouHwEYM5 GUpRQCY22pZrgZ7047jVNOvLB5HkIvmh23Arj8ns+eclGAUg/lyKsJhsuQYkdO93 hyVH9YTkH71M9nKGbKLJwVvbX23vSz2g/MjbqzKQzTJsXYUnB3jXIYt2OgNEBxvF pcWllFx1Q5YKe/ezVZEuW9DRpk86xlrq/FwiHLKu20b9Jb0Y2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqgZF1Ih8a79LVhTn2GZSRQF9CdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmE3ODljNWYtYzExMy0z YTMzLThmMWQtYjc5MmQyNmQzMWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKIGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXjh1fUR/ji8kK8OMw4oHikXmLbDPfYYMla6/N+ku9cddS85Y1HZwjH F48iMN0JOzceryTHuoG37qhWlkAUS67iEzsqlKt9HM3AGQW57Ysd5YvVx1uiqCvZ UeDgoEGb/H716zsTrqsx6or2H+CWvSY4nDh2uuf0sT9H7dvAsACjlqc2wTwes/AI Z4uytfRjX1Uk1Qpx6lXhBcG7nG7ccWibpPiqEM9yH+sPHz2Cbyr9onm9DjtyoL8D 8d3ZhcUfBylVL+QNyoVXsCC8ycUxOkT+PISQ5+a158dih2iVRP7IlEwH/jtytiRv rWEl303V57/rHAP6j27uIF30c+zooV8= -----END CERTIFICATE-----Generated at Sun Feb 16 20:23:10 2025 by rpki-client