$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa File: fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa (raw, json) Hash identifier: fgjVM6Hg78Cx/1+QkE/ZCyC8XofFHrkwCgMMCv6wQQ8= Subject key identifier: 7A:C0:E4:F3:85:C4:32:34:41:ED:3E:2F:AD:A7:13:63:5C:8A:60:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848143B2B9C80CB4574ED6D8F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa Signing time: Tue 03 Dec 2024 02:00:40 +0000 ROA not before: Tue 03 Dec 2024 02:00:40 +0000 ROA not after: Mon 03 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 64.24.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:14:3b:2b:9c:80:cb:45:74:ed:6d:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 3 02:00:40 2024 GMT Not After : Mar 3 02:00:40 2025 GMT Subject: CN=f6b233ac-076a-4744-b389-6eb31aac6d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:a0:d9:93:8d:8a:42:75:66:c5:ba:81:57: cb:3f:67:3d:23:a6:3c:3f:c9:bc:c2:d4:89:85:4f: 19:92:6e:25:97:2a:2a:dc:f5:d3:51:04:fe:50:7a: d3:a4:23:cb:5c:13:0d:1d:50:4a:4b:94:f2:b5:b1: b6:4a:4c:44:18:d9:2a:14:51:ff:4d:e0:06:e0:83: 11:48:9c:fd:6b:32:44:05:26:f9:03:5c:9d:49:ce: dc:3b:0c:ae:e0:63:4a:74:d5:14:5a:e7:b5:1e:8a: b9:6c:8a:73:0c:ff:09:2d:b5:8f:ac:25:88:c1:4d: 76:99:25:1b:d0:82:d9:fe:a7:bf:ad:70:8f:c0:02: b0:94:40:19:c6:1e:93:1e:ed:19:f4:ee:d4:be:9f: d2:cf:5a:42:5a:55:0d:c7:b8:6d:2a:58:1d:21:28: fa:9a:db:32:c6:d3:aa:da:8d:d6:b5:1b:7b:e1:a5: 31:67:30:9f:5b:0a:d8:18:10:cc:99:28:db:0b:a8: fd:94:cd:14:72:1d:09:bc:da:7a:ba:8d:23:2b:f2: 34:c5:f4:fa:b6:f8:6f:e2:54:a2:6b:83:72:44:3c: 9e:f0:eb:35:27:e4:2b:cb:02:3f:58:e0:ec:de:83: 89:ab:b8:d3:d3:f1:9e:df:5f:d7:be:f8:7d:db:d8: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C0:E4:F3:85:C4:32:34:41:ED:3E:2F:AD:A7:13:63:5C:8A:60:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fe189f68-b9fb-380f-9c0a-3fc3678c8744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.24.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:56:be:a3:30:9b:cf:9b:7d:88:a0:0c:60:28:c6:4e:6a:31: 75:2a:9f:7f:8d:bc:d2:4f:f2:29:0b:59:ca:93:21:30:d0:f6: d4:a3:00:cb:0d:a8:4c:8d:3d:a2:bf:1c:26:0d:83:36:f1:11: 4c:aa:9b:25:96:f7:a0:38:24:f2:e3:3d:21:ab:08:c6:eb:7b: 9b:fa:e3:77:12:18:4e:f8:2a:74:cf:b4:c4:3a:85:a7:49:08: 1c:16:15:79:8d:32:c0:81:24:e6:a7:be:60:6e:b3:a4:f5:c7: 3a:93:4b:81:7e:16:99:ab:4f:92:7f:65:8c:ce:d5:35:3b:b5: 82:6a:06:ea:09:22:ed:ff:88:86:17:10:3f:ef:3d:81:9a:e4: 5c:15:7f:80:89:da:c6:2f:15:66:c4:d0:03:d2:29:a5:2d:15: 95:3e:50:d0:91:98:20:5e:58:da:e0:7c:4c:d5:36:61:73:92: 88:dc:6f:8d:76:45:d3:91:d3:57:2b:e5:2b:1c:5b:b5:1c:89: 29:ae:f3:60:ed:b5:cf:c9:49:7e:7c:d8:2d:d9:d5:ef:24:f7: 5c:74:95:70:8e:fd:69:ce:e9:73:33:18:08:04:16:2c:69:ea: 5b:0f:cd:ba:50:6f:46:98:ea:e6:32:54:3e:17:f6:66:43:b6: a3:48:73:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgUOyucgMtFdO1tjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMzAyMDA0MFoXDTI1MDMwMzAyMDA0MFowLzEtMCsGA1UEAxMk ZjZiMjMzYWMtMDc2YS00NzQ0LWIzODktNmViMzFhYWM2ZDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtKg2ZONikJ1ZsW6gVfLP2c9I6Y8P8m8wtSJ hU8Zkm4llyoq3PXTUQT+UHrTpCPLXBMNHVBKS5TytbG2SkxEGNkqFFH/TeAG4IMR SJz9azJEBSb5A1ydSc7cOwyu4GNKdNUUWue1Hoq5bIpzDP8JLbWPrCWIwU12mSUb 0ILZ/qe/rXCPwAKwlEAZxh6THu0Z9O7Uvp/Sz1pCWlUNx7htKlgdISj6mtsyxtOq 2o3WtRt74aUxZzCfWwrYGBDMmSjbC6j9lM0Uch0JvNp6uo0jK/I0xfT6tvhv4lSi a4NyRDye8Os1J+QrywI/WODs3oOJq7jT0/Ge31/Xvvh929jzYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrA5POFxDI0Qe0+L62nE2NcimCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmUxODlmNjgtYjlmYi0z ODBmLTljMGEtM2ZjMzY3OGM4NzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQBgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhWvqMwm8+bfYigDGAoxk5qMXUqn3+NvNJP8ikLWcqTITDQ9tSjAMsN qEyNPaK/HCYNgzbxEUyqmyWW96A4JPLjPSGrCMbre5v643cSGE74KnTPtMQ6hadJ CBwWFXmNMsCBJOanvmBus6T1xzqTS4F+FpmrT5J/ZYzO1TU7tYJqBuoJIu3/iIYX ED/vPYGa5FwVf4CJ2sYvFWbE0APSKaUtFZU+UNCRmCBeWNrgfEzVNmFzkojcb412 RdOR01cr5SscW7UciSmu82Dttc/JSX582C3Z1e8k91x0lXCO/WnO6XMzGAgEFixp 6lsPzbpQb0aY6uYyVD4X9mZDtqNIc58= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:32 2025 by rpki-client