$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb910681-39cb-3f43-91c9-5433e674e2a4.roa File: fb910681-39cb-3f43-91c9-5433e674e2a4.roa (raw, json) Hash identifier: YzHFW/93VrIdHDiFaT+LLMDGiK3CfAm0aDf15hJmN64= Subject key identifier: F7:6F:1B:87:ED:CA:C1:7B:DA:44:BD:A9:01:0C:12:36:8F:C2:54:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584832F01FBA4D0F23756539F400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb910681-39cb-3f43-91c9-5433e674e2a4.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.31.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:1f:ba:4d:0f:23:75:65:39:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=a6491049-55cc-45bc-8268-dbfc81ccf7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:22:69:b1:d4:b6:85:07:81:b7:a5:51:50: a6:10:f8:07:0c:ad:b6:90:2d:ce:bc:b0:d8:8a:5c: ad:5f:b1:7a:73:e6:9f:be:c4:a5:8a:9a:f7:7e:01: f0:b3:f5:4b:a9:c0:bc:a2:45:8b:fd:8a:c9:1d:1a: 1b:94:0a:5d:38:19:2c:13:4e:0e:6f:89:4f:3a:36: db:41:a5:58:69:0b:bf:e9:d5:7c:68:56:21:f3:36: a6:1d:f9:e2:f2:1b:cd:12:5b:a2:cd:4a:16:7b:fc: d6:f4:76:a2:c4:bd:8c:4a:b8:f4:fd:5d:ec:c7:a5: c8:a6:ff:f0:d2:df:b9:d7:a2:5e:72:8c:87:05:0e: 0f:db:89:68:81:48:d3:74:ce:ad:4b:74:21:a2:c3: 18:45:aa:a8:58:94:98:fe:ff:71:cc:83:f2:79:91: 40:dd:78:9a:6e:e8:2a:d9:06:9c:d9:a5:93:4e:27: 9e:f9:1f:60:fd:33:f0:6b:67:32:6b:1a:62:1b:19: ec:67:e4:a7:f1:ad:d5:0a:96:1f:ad:58:b8:bf:7b: 9c:06:8c:07:bb:6d:af:62:d2:f4:33:a9:02:41:f8: 76:be:16:d6:99:0e:dd:e6:00:ef:41:95:0f:41:a5: 94:be:2a:35:e7:c7:dd:dd:f9:4d:42:2c:a0:f9:1c: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:6F:1B:87:ED:CA:C1:7B:DA:44:BD:A9:01:0C:12:36:8F:C2:54:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb910681-39cb-3f43-91c9-5433e674e2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.31.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:54:7d:72:a8:5e:1d:ad:0a:44:3a:ee:59:b5:09:90:46:97: bf:7d:1b:fb:c9:96:7c:82:85:1e:74:e6:c2:25:0b:31:87:a5: 78:60:ab:77:aa:ed:36:98:b4:b7:eb:f5:aa:ad:48:f9:80:c8: 54:63:6d:7d:48:ee:e6:72:1a:dd:bd:e1:6c:59:65:b7:40:f0: 6f:43:70:6f:ba:a1:82:87:a0:2d:7a:56:a2:41:ef:98:fd:e6: ba:20:bf:44:2e:b8:44:02:00:72:d9:16:51:ec:53:6d:f8:02: 93:3c:f2:26:26:6b:2c:0d:86:d2:44:90:0e:d7:53:3d:d2:d7: 22:67:72:fe:a1:c2:75:12:d2:a9:51:be:f5:38:89:75:76:2d: c8:81:b8:0a:e1:8b:61:9d:af:62:c7:7f:b9:1c:12:09:93:93: 2f:cc:c4:fd:b2:a7:54:19:9f:d8:d3:48:7c:4b:06:e1:7f:8a: 7c:22:85:8d:5a:69:c6:1b:40:4b:37:9a:74:7b:86:08:22:a4: de:a2:9c:12:c2:38:eb:3b:0a:39:91:3d:54:6c:11:1d:f8:d9: 25:20:86:63:95:5d:0e:1c:d5:e3:d6:42:d8:09:41:20:67:96: 27:77:7c:5a:fc:d9:54:6a:d3:5f:1c:1a:57:36:e5:d6:f7:b4: 87:de:40:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8B+6TQ8jdWU59AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk YTY0OTEwNDktNTVjYy00NWJjLTgyNjgtZGJmYzgxY2NmN2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wQiabHUtoUHgbelUVCmEPgHDK22kC3OvLDY ilytX7F6c+afvsSlipr3fgHws/VLqcC8okWL/YrJHRoblApdOBksE04Ob4lPOjbb QaVYaQu/6dV8aFYh8zamHfni8hvNEluizUoWe/zW9HaixL2MSrj0/V3sx6XIpv/w 0t+516JecoyHBQ4P24logUjTdM6tS3QhosMYRaqoWJSY/v9xzIPyeZFA3Xiabugq 2Qac2aWTTiee+R9g/TPwa2cyaxpiGxnsZ+Sn8a3VCpYfrVi4v3ucBowHu22vYtL0 M6kCQfh2vhbWmQ7d5gDvQZUPQaWUvio158fd3flNQiyg+Rz1jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdvG4ftysF72kS9qQEMEjaPwlRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI5MTA2ODEtMzljYi0z ZjQzLTkxYzktNTQzM2U2NzRlMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARx8xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9UfXKoXh2tCkQ67lm1CZBGl799G/vJlnyChR505sIlCzGHpXhgq3eq 7TaYtLfr9aqtSPmAyFRjbX1I7uZyGt294WxZZbdA8G9DcG+6oYKHoC16VqJB75j9 5rogv0QuuEQCAHLZFlHsU234ApM88iYmaywNhtJEkA7XUz3S1yJncv6hwnUS0qlR vvU4iXV2LciBuArhi2Gdr2LHf7kcEgmTky/MxP2yp1QZn9jTSHxLBuF/inwihY1a acYbQEs3mnR7hggipN6inBLCOOs7CjmRPVRsER342SUghmOVXQ4c1ePWQtgJQSBn lid3fFr82VRq018cGlc25db3tIfeQDk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:45 2025 by rpki-client