$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db36d9a-c527-3241-8617-2da9b097c182.roa File: 9db36d9a-c527-3241-8617-2da9b097c182.roa (raw, json) Hash identifier: w+dMpHOa9y4vPYNvDL9LD1IuUQoZbHF+HT7VKKZales= Subject key identifier: 2F:3F:72:23:D8:58:77:8D:DE:CA:FE:72:64:57:36:E0:76:FA:2C:A4 Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3 Certificate serial: 010D0C9F43285848B62620F4AA4D46D4E1C308B0 Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db36d9a-c527-3241-8617-2da9b097c182.roa Signing time: Thu 30 Jan 2025 02:00:40 +0000 ROA not before: Thu 30 Jan 2025 02:00:40 +0000 ROA not after: Wed 30 Apr 2025 01:00:40 +0000 asID: 401153 IP address blocks: 47.49.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b6:26:20:f4:aa:4d:46:d4:e1:c3:08:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3 Validity Not Before: Jan 30 02:00:40 2025 GMT Not After : Apr 30 01:00:40 2025 GMT Subject: CN=78408b94-ea6d-47ee-84c8-25e7a2d6f1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:d6:18:9c:e2:1b:2d:db:4b:c7:bb:ad:4e: f6:2e:39:7f:19:bb:73:ba:88:1a:f2:19:d4:1e:8b: 1e:80:89:91:5b:8c:bb:8c:d1:5a:1b:4a:dd:42:cf: 0e:ab:8c:39:1d:42:23:34:48:8b:3a:7c:14:e1:ce: 80:40:27:b5:57:33:39:ed:92:86:7b:29:2f:07:25: b4:3c:c5:15:25:32:c5:bc:ba:15:38:52:fc:83:c5: c1:f6:92:5b:fe:fc:3c:55:e9:a3:5d:99:54:13:a1: cd:e6:96:a3:ab:c1:1f:eb:eb:bd:4f:13:cc:0d:bb: 28:cf:79:03:1e:a0:62:0e:a8:c8:99:06:4c:ac:bc: 1c:8e:e9:69:ce:12:2b:21:66:1e:76:20:32:9c:b5: e0:a8:99:39:41:3b:5b:8a:b3:5c:5c:b4:e2:f8:56: 15:b7:b3:f5:9b:ba:1e:70:6b:94:6f:cb:5c:37:e9: ba:d0:08:4d:a8:eb:2e:84:02:05:dc:f3:33:1c:0a: 85:3f:6c:9f:39:65:d6:99:1b:d8:6d:21:de:5d:0b: 36:06:aa:e1:88:dd:58:64:f6:ce:42:a9:8b:30:77: ed:7c:d3:2f:85:01:80:a9:7b:a5:f0:b9:82:d9:cf: 0e:76:4a:51:fe:52:77:54:bb:d3:29:d1:c6:01:e1: f3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:3F:72:23:D8:58:77:8D:DE:CA:FE:72:64:57:36:E0:76:FA:2C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/9db36d9a-c527-3241-8617-2da9b097c182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl X509v3 Authority Key Identifier: keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer sbgp-ipAddrBlock: critical IPv4: 47.49.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:2f:b4:82:28:d2:0c:0b:ae:34:ed:77:b2:5e:87:c3:91:b8: b2:8a:94:af:7e:e5:25:1a:bd:0d:e3:aa:6d:1d:01:14:5f:9c: 88:81:67:85:76:ed:49:0b:1c:d6:77:d2:26:3f:88:82:2d:68: 12:60:7d:da:f3:f7:d9:dc:a6:ef:40:a2:cd:39:58:5d:01:da: a0:42:57:06:0b:ca:d5:94:39:64:8e:2e:0f:b4:ab:76:aa:11: ce:77:16:95:eb:a5:f8:30:67:87:93:04:b1:6e:8e:4d:ff:fd: 58:de:16:76:d9:03:69:17:22:07:f9:84:1b:36:c7:fa:14:3c: 43:c7:e5:9f:ec:5b:50:ed:a6:48:48:6b:3d:1e:fb:c3:2b:7e: 39:45:2f:57:3d:ab:d2:43:53:65:4c:3d:62:2a:03:14:93:90: 28:48:39:51:bf:aa:73:28:4e:99:0a:76:ee:b1:5c:4c:ea:4d: c5:54:2f:73:7e:6e:38:f3:40:f8:62:c3:85:39:40:6d:de:43: 76:8e:5a:f6:e1:36:1a:f1:0d:21:57:f6:b5:e6:28:f7:18:64: 40:40:2c:ba:83:2c:03:2c:19:b1:25:36:25:25:37:b7:86:21: 73:9c:b7:3a:de:c6:aa:b8:e2:c7:93:13:61:a3:25:92:d3:e6: 62:21:ce:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JiD0qk1G1OHDCLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh OGYzMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk Nzg0MDhiOTQtZWE2ZC00N2VlLTg0YzgtMjVlN2EyZDZmMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7bWGJziGy3bS8e7rU72Ljl/Gbtzuoga8hnU HosegImRW4y7jNFaG0rdQs8Oq4w5HUIjNEiLOnwU4c6AQCe1VzM57ZKGeykvByW0 PMUVJTLFvLoVOFL8g8XB9pJb/vw8VemjXZlUE6HN5pajq8Ef6+u9TxPMDbsoz3kD HqBiDqjImQZMrLwcjulpzhIrIWYediAynLXgqJk5QTtbirNcXLTi+FYVt7P1m7oe cGuUb8tcN+m60AhNqOsuhAIF3PMzHAqFP2yfOWXWmRvYbSHeXQs2BqrhiN1YZPbO QqmLMHftfNMvhQGAqXul8LmC2c8OdkpR/lJ3VLvTKdHGAeHzuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8/ciPYWHeN3sr+cmRXNuB2+iykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOWRiMzZkOWEtYzUyNy0z MjQxLTg2MTctMmRhOWIwOTdjMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0 NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALzF8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL8vtIIo0gwLrjTtd7Jeh8ORuLKKlK9+5SUavQ3jqm0dARRfnIiBZ4V2 7UkLHNZ30iY/iIItaBJgfdrz99ncpu9Aos05WF0B2qBCVwYLytWUOWSOLg+0q3aq Ec53FpXrpfgwZ4eTBLFujk3//VjeFnbZA2kXIgf5hBs2x/oUPEPH5Z/sW1DtpkhI az0e+8MrfjlFL1c9q9JDU2VMPWIqAxSTkChIOVG/qnMoTpkKdu6xXEzqTcVUL3N+ bjjzQPhiw4U5QG3eQ3aOWvbhNhrxDSFX9rXmKPcYZEBALLqDLAMsGbElNiUlN7eG IXOctzrexqq44seTE2GjJZLT5mIhzl0= -----END CERTIFICATE-----Generated at Sun Apr 6 22:58:17 2025 by rpki-client