$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa File: fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa (raw, json) Hash identifier: 3ITA5LeCKGzRoelel6PglZvvp829FSPBPAdhc7N8cCM= Subject key identifier: F9:CB:F6:6A:E8:C8:0B:DB:08:AD:8A:87:6A:32:C7:3C:5B:5C:11:BD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112F604530AEEB4E4AE200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 30080 IP address blocks: 74.8.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2f:60:45:30:ae:eb:4e:4a:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=c5711572-2858-4221-9ce9-0946c246e1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b4:fc:d9:13:26:e2:fe:36:52:4e:72:5c:4e: 19:5c:7b:8f:3a:01:ea:c0:2e:a0:a1:ce:26:1e:c3: a3:5c:f8:0a:0e:ed:db:5b:68:68:b9:f3:65:2e:25: 65:3a:8a:4a:4d:2a:da:1e:4b:2e:73:03:07:d0:35: d3:90:e6:28:4b:c8:28:df:b5:19:c4:88:bd:32:3e: 46:1b:0e:74:59:d3:4e:bf:3c:90:99:01:7f:66:51: 33:a0:f0:22:24:74:f7:76:2f:fd:5f:a4:e4:21:97: 18:9f:51:6c:0c:74:2e:47:13:15:39:2f:5d:78:7d: 4f:0f:a3:a7:9b:fc:8f:b9:15:a3:78:03:6d:70:08: d2:a5:85:18:26:a1:47:bc:e3:82:cb:d8:23:22:f4: 43:62:c2:f7:95:28:3c:34:58:fc:77:f0:d8:95:21: 8a:71:de:2b:62:a7:f2:6f:de:c8:15:f8:13:94:e0: 84:81:5f:48:99:c5:6c:74:1d:ec:9f:fe:7c:20:3e: 08:19:52:3e:5c:b3:29:57:a6:c7:c7:c6:38:61:b7: 30:04:24:c6:07:37:89:ac:97:3d:a1:6b:43:9f:17: 69:1d:f1:c1:1e:e7:5b:e0:20:4e:ca:0c:ec:b0:2a: 49:25:31:5e:38:00:32:f9:5c:00:2c:5a:52:89:2e: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CB:F6:6A:E8:C8:0B:DB:08:AD:8A:87:6A:32:C7:3C:5B:5C:11:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:7c:75:e8:ae:22:92:9d:5c:e6:6b:42:30:88:e7:14:d3:1e: e3:2f:d9:45:01:f0:ec:fd:8b:d1:14:3a:0f:03:6c:e4:84:35: 0d:9a:f0:f3:16:5a:1f:0b:58:e5:b3:41:9f:9c:51:d8:44:7a: f4:22:86:d1:10:30:d9:40:1c:6c:62:85:be:82:9f:95:fb:f8: 19:97:5c:46:fc:b9:23:53:2e:83:65:94:f8:dd:97:e1:c2:42: 50:b7:53:af:b6:ad:07:45:86:91:67:70:42:8c:79:1a:20:dd: 8b:ce:07:af:c4:9f:79:1d:34:c8:13:03:22:61:df:ab:d3:32: 04:b6:47:d7:da:38:aa:85:95:5f:d5:d2:c9:b3:c6:93:1e:07: 6f:ce:6b:ce:3b:00:75:50:20:06:f7:29:c7:15:6b:62:9e:65: c1:18:97:e2:b1:1b:93:cc:20:cf:53:b5:2d:00:ff:be:cc:b5: 34:70:01:70:69:fa:f7:ed:da:82:ea:3e:ed:6b:fa:bd:d9:9b: 6b:76:a8:40:16:6c:77:fe:33:23:e5:86:e0:ab:e7:58:9b:17: ba:7f:4e:c7:59:1d:ea:ea:a3:65:c4:e7:62:65:1e:f8:1a:57: 7b:8d:50:89:f9:8c:2a:a8:1d:4a:63:24:d5:81:3f:72:79:40: 29:43:25:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSES9gRTCu605K4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YzU3MTE1NzItMjg1OC00MjIxLTljZTktMDk0NmMyNDZlMWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrT82RMm4v42Uk5yXE4ZXHuPOgHqwC6goc4m HsOjXPgKDu3bW2houfNlLiVlOopKTSraHksucwMH0DXTkOYoS8go37UZxIi9Mj5G Gw50WdNOvzyQmQF/ZlEzoPAiJHT3di/9X6TkIZcYn1FsDHQuRxMVOS9deH1PD6On m/yPuRWjeANtcAjSpYUYJqFHvOOCy9gjIvRDYsL3lSg8NFj8d/DYlSGKcd4rYqfy b97IFfgTlOCEgV9ImcVsdB3sn/58ID4IGVI+XLMpV6bHx8Y4YbcwBCTGBzeJrJc9 oWtDnxdpHfHBHudb4CBOygzssCpJJTFeOAAy+VwALFpSiS4VbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnL9mroyAvbCK2Kh2oyxzxbXBG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRjY2QyYzctY2M5Yi0z YTExLWJjYjgtZWViNmU2MDU1ZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASggkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHx8deiuIpKdXOZrQjCI5xTTHuMv2UUB8Oz9i9EUOg8DbOSENQ2a8PMW Wh8LWOWzQZ+cUdhEevQihtEQMNlAHGxihb6Cn5X7+BmXXEb8uSNTLoNllPjdl+HC QlC3U6+2rQdFhpFncEKMeRog3YvOB6/En3kdNMgTAyJh36vTMgS2R9faOKqFlV/V 0smzxpMeB2/Oa847AHVQIAb3KccVa2KeZcEYl+KxG5PMIM9TtS0A/77MtTRwAXBp +vft2oLqPu1r+r3Zm2t2qEAWbHf+MyPlhuCr51ibF7p/TsdZHerqo2XE52JlHvga V3uNUIn5jCqoHUpjJNWBP3J5QClDJZc= -----END CERTIFICATE-----Generated at Sun Feb 16 20:16:15 2025 by rpki-client