$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa File: 0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa (raw, json) Hash identifier: TgtJky84XcsqoGAG2jQSPiiVdaM4nW+cLbDlt7bGoxk= Subject key identifier: 8C:B7:E0:7A:D5:71:44:D1:39:C5:FA:0A:96:A3:CB:5B:A0:5A:E4:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848116FB68B061201BBB5E8CD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 40.142.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:b6:8b:06:12:01:bb:b5:e8:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=4ab3401f-4eed-48f3-b8c3-539c04c92876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e9:78:d1:9d:29:ac:0f:85:3d:f7:05:56:ef: c1:f2:1b:29:2f:d9:7a:e3:50:8d:9c:ef:fa:5a:62: f0:b4:30:da:75:b1:4a:9e:89:66:6b:82:68:ed:74: 88:10:57:bd:c5:78:ad:94:db:6e:c7:a6:68:ad:cc: 7f:e6:84:65:c7:fb:a7:75:9d:85:09:3a:51:97:40: 20:08:37:66:2f:8d:84:31:08:63:89:fc:07:b0:2a: e4:f9:ce:01:f0:f1:77:de:1c:08:6e:34:0a:fd:e9: 93:c8:49:f5:bc:65:b1:a2:50:b7:13:5f:aa:26:1e: 26:6f:85:04:7c:c6:76:1f:9a:7d:37:cf:a6:4d:97: d0:cf:4a:85:1b:66:92:7f:07:e4:24:c0:63:de:6d: 93:75:a0:d2:ae:52:60:66:84:2a:a5:e4:d9:e1:a4: fb:55:d7:90:99:9b:df:14:81:2b:9b:20:4b:da:20: f0:b3:a4:e4:e4:43:46:99:f4:75:ab:8b:4b:8a:a1: 1a:4f:84:3d:f7:fc:66:a4:11:4d:9a:bd:60:1f:d0: 31:b1:1e:a6:33:ae:59:df:93:8f:23:8b:e2:2f:82: c3:d4:31:9d:16:a3:82:1a:3b:0c:3c:e9:17:29:7f: 71:b2:f2:f8:a3:9a:44:b4:72:af:26:62:6e:e0:ad: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B7:E0:7A:D5:71:44:D1:39:C5:FA:0A:96:A3:CB:5B:A0:5A:E4:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ba230e1-f21d-38fc-ba3f-7e72c5644594.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.142.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6e:7a:80:44:72:b8:e8:25:cb:47:dd:29:43:f6:02:09:f3: 97:ef:f9:16:7b:9d:f8:09:bb:10:5e:1d:99:ce:8c:c3:59:d9: df:45:67:df:0c:7e:9e:6b:87:91:52:f6:09:89:f6:7f:b3:11: 3d:72:a2:ae:f8:12:96:1a:72:0a:b3:37:e8:4c:08:06:ba:fe: e5:da:64:03:05:81:44:6d:8e:af:f7:e1:9d:13:e0:91:3f:14: ba:b7:93:ac:5c:09:e0:7d:72:5f:b8:ee:f6:c6:9e:0b:d7:0f: e1:a1:dc:ef:81:cb:43:32:12:80:1c:83:e7:2d:b5:36:9b:62: 9a:6d:46:89:66:15:13:9f:15:5d:ae:b7:73:16:e9:7a:64:9e: 8d:4e:c1:3b:bf:f9:5b:b4:ab:75:e1:fe:aa:fe:82:84:d2:a2: f3:d4:73:cf:2e:87:c0:71:64:01:fd:ca:23:e0:f9:31:a4:b7: 06:b1:6e:3c:d6:01:b6:62:0a:5b:8b:89:27:ab:4c:dd:33:4a: be:a5:cc:dc:c1:09:5b:bb:f7:9f:ed:d5:1c:4f:2b:2e:68:20: 3c:00:30:c2:b6:09:6b:4b:83:f9:72:04:c3:b0:45:25:ca:70: 95:cc:17:c0:2f:83:ff:82:28:84:91:c5:ef:50:7f:2c:df:39: 0a:a9:c8:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7aLBhIBu7XozQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk NGFiMzQwMWYtNGVlZC00OGYzLWI4YzMtNTM5YzA0YzkyODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ol40Z0prA+FPfcFVu/B8hspL9l641CNnO/6 WmLwtDDadbFKnolma4Jo7XSIEFe9xXitlNtux6Zorcx/5oRlx/undZ2FCTpRl0Ag CDdmL42EMQhjifwHsCrk+c4B8PF33hwIbjQK/emTyEn1vGWxolC3E1+qJh4mb4UE fMZ2H5p9N8+mTZfQz0qFG2aSfwfkJMBj3m2TdaDSrlJgZoQqpeTZ4aT7VdeQmZvf FIErmyBL2iDws6Tk5ENGmfR1q4tLiqEaT4Q99/xmpBFNmr1gH9AxsR6mM65Z35OP I4viL4LD1DGdFqOCGjsMPOkXKX9xsvL4o5pEtHKvJmJu4K0ElQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIy34HrVcUTROcX6Cpajy1ugWuSpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJhMjMwZTEtZjIxZC0z OGZjLWJhM2YtN2U3MmM1NjQ0NTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDKI6YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5ueoBEcrjoJctH3SlD9gIJ85fv+RZ7nfgJuxBeHZnOjMNZ2d9FZ98M fp5rh5FS9gmJ9n+zET1yoq74EpYacgqzN+hMCAa6/uXaZAMFgURtjq/34Z0T4JE/ FLq3k6xcCeB9cl+47vbGngvXD+Gh3O+By0MyEoAcg+cttTabYpptRolmFROfFV2u t3MW6Xpkno1OwTu/+Vu0q3Xh/qr+goTSovPUc88uh8BxZAH9yiPg+TGktwaxbjzW AbZiCluLiSerTN0zSr6lzNzBCVu795/t1RxPKy5oIDwAMMK2CWtLg/lyBMOwRSXK cJXMF8Avg/+CKISRxe9QfyzfOQqpyHo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:01 2025 by rpki-client