$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa File: 1ab2ff41-368d-30f9-a16d-be1479704501.roa (raw, json) Hash identifier: aSfQVKl7JcMAgjn6zBTFvroVec7CUs/JSYevAc92DDo= Subject key identifier: 17:9D:94:63:B6:24:0B:D2:4C:6B:B9:50:38:BF:F7:71:F8:4B:78:C3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210E86502E8BC61DE799280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 6983 IP address blocks: 209.165.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:e8:65:02:e8:bc:61:de:79:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=00a38412-7e1d-4209-8266-863a8ab356de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0e:2a:6f:c9:d7:22:9f:46:30:0a:61:e5:0e: 3d:01:67:73:f9:4d:e1:91:65:25:65:70:68:e8:05: d3:53:7f:a7:dc:c9:b1:9a:86:36:8f:f7:7f:b0:b2: 95:bc:fb:41:f9:32:34:2b:df:c2:ce:35:5f:08:bd: 5b:da:75:c7:e2:fc:3c:44:14:19:15:5f:98:c5:fb: 8f:c4:f9:7f:73:8d:ce:51:70:7a:54:79:4b:c8:3a: c7:c9:79:a1:3a:52:30:cd:31:10:20:3c:88:15:89: 1c:a7:0a:b5:0c:1e:73:5f:52:97:96:a4:83:0a:ec: 0e:6f:86:97:f8:f9:1c:47:36:09:db:08:3b:ba:e8: d3:a3:6d:87:87:42:97:f0:3a:16:74:d7:04:6e:d8: 11:5f:ba:0e:73:46:f1:ec:ac:1c:9b:aa:ba:c2:19: 49:e4:75:9a:29:1c:95:41:05:a5:30:b5:19:4b:cf: e8:2a:31:ac:ba:b3:13:8f:52:aa:c6:5c:ce:11:f7: 17:75:5e:12:17:03:31:f8:89:24:f9:13:16:fa:92: bc:c8:c3:cf:05:70:26:9c:ef:58:29:92:3a:d6:b5: 44:aa:37:a1:7f:36:49:4a:83:54:94:a6:fd:e3:00: 7e:a0:d0:69:fd:27:4b:ff:79:fb:78:6e:08:fa:02: 3e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9D:94:63:B6:24:0B:D2:4C:6B:B9:50:38:BF:F7:71:F8:4B:78:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ab2ff41-368d-30f9-a16d-be1479704501.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:02:a2:59:44:b0:cb:35:44:10:a4:11:c1:08:f4:e5:3a:13: 68:39:ed:48:97:7d:a4:a7:2c:71:9a:47:9a:c1:68:4a:b1:3b: ca:92:dd:12:f0:ee:46:0b:2e:b9:e4:91:9e:7d:2d:bf:89:24: 2c:86:cc:c1:5b:cd:88:ba:96:9c:1c:8e:1e:31:f7:2d:8f:25: 03:2a:43:24:a7:09:93:e2:db:74:9b:c0:67:94:13:29:b6:fb: f2:86:73:17:6b:7b:b7:61:eb:fa:65:0b:0c:a9:e2:20:22:aa: bd:b9:1a:34:ab:d2:56:7c:ba:c9:20:eb:b2:99:c5:73:5a:d0: 50:8a:01:19:66:4c:99:68:d5:9a:68:43:b7:03:11:46:12:bb: 4b:60:63:13:09:51:f0:28:13:e8:27:9f:27:8c:d5:b1:4d:09: 46:40:7b:37:11:61:66:9c:08:86:e9:c3:bc:16:39:e1:d9:da: 15:9e:09:2f:f4:6b:97:34:0a:b8:af:62:84:2b:aa:8f:68:8d: df:24:df:4e:f8:5b:de:f7:47:f9:e6:d4:c5:6f:a5:76:f8:7b: 84:7f:c8:3d:0b:b2:fe:7f:47:3f:b5:dc:99:a0:c7:cf:d7:03: 8a:1a:67:71:52:c9:42:55:6a:ee:c2:8a:e0:d9:bb:0a:45:ab: 64:b4:28:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOhlAui8Yd55koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDBhMzg0MTItN2UxZC00MjA5LTgyNjYtODYzYThhYjM1NmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A4qb8nXIp9GMAph5Q49AWdz+U3hkWUlZXBo 6AXTU3+n3MmxmoY2j/d/sLKVvPtB+TI0K9/CzjVfCL1b2nXH4vw8RBQZFV+YxfuP xPl/c43OUXB6VHlLyDrHyXmhOlIwzTEQIDyIFYkcpwq1DB5zX1KXlqSDCuwOb4aX +PkcRzYJ2wg7uujTo22Hh0KX8DoWdNcEbtgRX7oOc0bx7Kwcm6q6whlJ5HWaKRyV QQWlMLUZS8/oKjGsurMTj1KqxlzOEfcXdV4SFwMx+Ikk+RMW+pK8yMPPBXAmnO9Y KZI61rVEqjehfzZJSoNUlKb94wB+oNBp/SdL/3n7eG4I+gI+SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBedlGO2JAvSTGu5UDi/93H4S3jDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWFiMmZmNDEtMzY4ZC0z MGY5LWExNmQtYmUxNDc5NzA0NTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABECollEsMs1RBCkEcEI9OU6E2g57UiXfaSnLHGaR5rBaEqxO8qS3RLw 7kYLLrnkkZ59Lb+JJCyGzMFbzYi6lpwcjh4x9y2PJQMqQySnCZPi23SbwGeUEym2 +/KGcxdre7dh6/plCwyp4iAiqr25GjSr0lZ8uskg67KZxXNa0FCKARlmTJlo1Zpo Q7cDEUYSu0tgYxMJUfAoE+gnnyeM1bFNCUZAezcRYWacCIbpw7wWOeHZ2hWeCS/0 a5c0CrivYoQrqo9ojd8k3074W973R/nm1MVvpXb4e4R/yD0Lsv5/Rz+13Jmgx8/X A4oaZ3FSyUJVau7CiuDZuwpFq2S0KKM= -----END CERTIFICATE-----Generated at Mon Apr 7 12:03:44 2025 by rpki-client