$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0237aa91-5c7e-38cf-900f-598deeae6f84.roa File: 0237aa91-5c7e-38cf-900f-598deeae6f84.roa (raw, json) Hash identifier: qaS+Hyc3K2tscUfxVmFksv+uC8y+73rI5EHfh8qAH+o= Subject key identifier: A3:44:67:CD:4A:D3:22:97:E1:4E:8A:C6:D3:E5:B3:D0:CE:10:C0:91 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21103FC0E24CEF75A504E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0237aa91-5c7e-38cf-900f-598deeae6f84.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 29877 IP address blocks: 216.106.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:03:fc:0e:24:ce:f7:5a:50:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=dd6613fd-a6a7-4c92-ae0a-8ed11f5f694a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:08:e2:28:02:7a:e3:37:2a:b4:80:e9:fa:b0: 40:06:de:25:2f:b0:60:bf:73:39:07:21:a7:0c:5b: 18:62:b9:0f:eb:e4:51:f5:ab:33:60:06:5a:28:7d: 03:c1:00:5d:a5:69:c7:96:b9:6f:58:8e:17:f1:c9: 3e:a7:a6:b9:f9:95:95:c5:56:99:c5:7c:96:16:fb: 83:d1:00:68:58:71:3f:94:0c:50:80:c4:dc:63:51: d5:80:fe:53:1d:75:78:5c:72:78:43:a2:af:2c:d4: 33:0a:63:a4:a2:57:7f:95:ca:4b:9b:5c:e1:20:77: ac:83:c2:bb:0a:76:c8:7f:ff:c6:d6:53:c2:2c:0a: 81:92:10:e9:a7:ef:b2:1e:50:0a:3c:98:20:61:a3: ca:0a:76:d1:92:6e:99:90:80:bf:ff:de:71:3b:d6: cf:9e:d1:ac:2b:7a:18:d1:bc:81:1b:f5:50:7e:d5: e6:52:63:4f:15:a9:a6:38:c0:4d:35:66:1a:0d:d2: db:8a:43:97:40:44:a4:a7:67:2d:2a:43:fb:08:ea: d8:ff:cd:a1:e4:de:50:d5:e5:7c:d5:05:78:a4:06: 74:22:0f:14:54:e3:0a:37:ef:c6:0a:6e:87:bd:82: 44:37:d2:20:3f:86:5e:98:68:97:bb:b1:3a:73:08: 29:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:44:67:CD:4A:D3:22:97:E1:4E:8A:C6:D3:E5:B3:D0:CE:10:C0:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0237aa91-5c7e-38cf-900f-598deeae6f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.106.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:15:d8:95:2a:6c:e6:10:72:e6:31:25:fa:9f:6b:50:54:26: ca:49:8a:42:5c:da:e7:bb:e0:96:d8:9b:2c:c3:79:6f:18:dc: 44:1e:d1:fe:7e:ad:00:dc:74:11:29:b4:31:b1:c1:f1:84:ad: 0a:23:1e:7a:0e:5d:e8:fb:15:86:39:de:65:0c:2d:c3:b4:b5: e5:8a:63:64:57:af:80:7d:b3:a0:32:79:46:80:1f:98:e0:65: cc:d0:d2:ea:66:1d:ee:78:6b:93:cd:86:f5:fa:ca:0a:fb:6f: 22:d1:31:a3:c7:b9:6d:17:a0:68:79:61:9a:4e:ad:0d:6e:e8: 70:50:ed:80:3c:26:4d:00:f2:ff:28:70:94:86:25:47:62:8f: 02:68:02:49:3e:23:26:71:68:32:d5:cc:4d:55:d8:f3:8d:05: d8:6e:7b:40:8b:b9:85:cb:80:52:28:a9:47:e5:27:1c:6d:61: ec:c2:ea:b9:6a:9a:33:1e:a9:7d:91:34:8e:3e:0c:1d:42:b6: 5d:d7:c1:4d:f3:a8:31:62:47:df:98:b5:a3:42:8d:ea:42:ec: 6f:d6:5f:31:6c:ac:e1:98:e4:c3:1c:b6:e5:e0:7d:bb:80:66: 40:44:63:e2:1b:98:1e:0f:19:b0:f5:1d:69:0f:d5:88:57:8b: 2f:6b:91:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQP8DiTO91pQToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZGQ2NjEzZmQtYTZhNy00YzkyLWFlMGEtOGVkMTFmNWY2OTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgjiKAJ64zcqtIDp+rBABt4lL7Bgv3M5ByGn DFsYYrkP6+RR9aszYAZaKH0DwQBdpWnHlrlvWI4X8ck+p6a5+ZWVxVaZxXyWFvuD 0QBoWHE/lAxQgMTcY1HVgP5THXV4XHJ4Q6KvLNQzCmOkold/lcpLm1zhIHesg8K7 CnbIf//G1lPCLAqBkhDpp++yHlAKPJggYaPKCnbRkm6ZkIC//95xO9bPntGsK3oY 0byBG/VQftXmUmNPFammOMBNNWYaDdLbikOXQESkp2ctKkP7COrY/82h5N5Q1eV8 1QV4pAZ0Ig8UVOMKN+/GCm6HvYJEN9IgP4ZemGiXu7E6cwgpAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNEZ81K0yKX4U6KxtPls9DOEMCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDIzN2FhOTEtNWM3ZS0z OGNmLTkwMGYtNTk4ZGVlYWU2Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2Gq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEV2JUqbOYQcuYxJfqfa1BUJspJikJc2ue74JbYmyzDeW8Y3EQe0f5+ rQDcdBEptDGxwfGErQojHnoOXej7FYY53mUMLcO0teWKY2RXr4B9s6AyeUaAH5jg ZczQ0upmHe54a5PNhvX6ygr7byLRMaPHuW0XoGh5YZpOrQ1u6HBQ7YA8Jk0A8v8o cJSGJUdijwJoAkk+IyZxaDLVzE1V2PONBdhue0CLuYXLgFIoqUflJxxtYezC6rlq mjMeqX2RNI4+DB1Ctl3XwU3zqDFiR9+YtaNCjepC7G/WXzFsrOGY5MMctuXgfbuA ZkBEY+IbmB4PGbD1HWkP1YhXiy9rkdk= -----END CERTIFICATE-----Generated at Mon Apr 7 12:14:01 2025 by rpki-client