$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c483130-7887-3700-9027-2d5cef680259.roa File: 1c483130-7887-3700-9027-2d5cef680259.roa (raw, json) Hash identifier: mmggHYHIPM3dwmiqvS2Br1JSKcCle5nNXyKTCLnogbM= Subject key identifier: 89:9C:A1:E5:F2:B0:EC:53:DD:3A:BF:F8:41:7E:97:8B:C8:FB:81:F5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EE1403074BFAD4862880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c483130-7887-3700-9027-2d5cef680259.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 69.48.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ee:14:03:07:4b:fa:d4:86:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=612440e3-f460-4e80-8716-95b9f1554477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f6:c4:21:eb:bc:73:f6:42:4f:99:f8:0b:9e: b5:e1:5d:9c:7f:a6:cb:fd:2c:d3:68:1a:67:83:3b: bc:74:ff:89:d7:56:a0:1e:c1:3e:b1:0f:96:64:a1: 0e:a4:ce:82:ce:e3:4f:70:da:46:74:16:e5:01:56: e5:e9:78:fc:76:54:99:ea:cf:65:84:02:b5:11:48: f8:17:5c:89:0a:48:6b:2f:23:23:63:08:6d:3d:25: 05:dc:93:a4:69:98:1e:7a:4f:a5:1b:67:14:05:1a: 13:78:a8:37:e3:bd:6d:09:2c:5f:e2:68:ec:52:96: 61:99:da:dc:41:91:16:02:28:d1:d6:92:a0:69:79: 27:1d:ac:f3:3f:3a:bc:6b:8d:0a:ba:73:21:4b:7b: be:1f:4e:51:1b:d8:54:37:d3:50:89:70:7a:7d:c9: 3d:bf:7e:01:f0:32:07:42:3f:fa:5c:80:25:c0:bc: 0e:b9:8b:dc:38:80:a3:7c:c5:b2:3a:a6:af:5f:1c: 56:ae:e4:00:70:32:e6:db:13:c2:2c:b1:c7:a7:24: 97:d6:af:4a:45:10:94:74:92:5f:a4:89:a9:34:3d: 38:54:c6:d8:39:10:e2:a5:9e:e2:a6:c8:2c:43:ac: aa:08:23:47:21:dc:93:55:f9:12:22:43:82:65:a0: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:9C:A1:E5:F2:B0:EC:53:DD:3A:BF:F8:41:7E:97:8B:C8:FB:81:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c483130-7887-3700-9027-2d5cef680259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.48.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:4d:3e:2b:1b:93:36:77:05:39:50:f4:90:1c:1b:14:82:8e: a4:9d:15:c4:49:d4:6e:f5:14:d6:0d:10:73:b3:d0:8d:ce:03: 36:b9:57:0e:54:09:01:73:20:0d:59:77:05:50:b4:50:7b:38: de:d7:f7:19:d5:10:3b:1e:4f:c1:a2:14:2b:24:ec:11:71:76: b9:d2:fc:a0:9c:4f:dd:2d:45:e7:b8:55:4b:c7:5e:38:94:af: 7e:d9:49:f3:13:ba:b6:55:46:f8:ed:9d:a3:70:47:90:0a:ad: d9:9a:9c:eb:7c:f7:5f:30:ad:89:00:4d:40:a8:5c:c3:68:59: c5:07:7c:0e:6a:a7:a9:28:1f:81:8e:65:74:78:e5:29:6d:b9: 64:db:81:65:ed:8c:64:05:b6:ea:11:02:bf:05:bd:15:c6:00: e8:23:ef:f7:c2:31:82:58:c3:2e:2b:01:1a:62:00:04:31:2e: ae:12:f9:20:54:ab:e9:d2:0c:87:33:59:95:b4:2e:ea:97:5c: e5:33:fb:c5:6d:a4:74:e3:8f:ba:46:b2:aa:33:e3:a8:ef:95: 8b:72:b1:09:08:2c:16:8d:1d:e7:47:1f:b8:ec:e2:cd:05:e0: b6:d4:26:f9:02:ea:ef:9b:6d:28:3d:0b:85:ca:19:a3:9d:96: 4a:a6:d9:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO4UAwdL+tSGKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjEyNDQwZTMtZjQ2MC00ZTgwLTg3MTYtOTViOWYxNTU0NDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPbEIeu8c/ZCT5n4C5614V2cf6bL/SzTaBpn gzu8dP+J11agHsE+sQ+WZKEOpM6CzuNPcNpGdBblAVbl6Xj8dlSZ6s9lhAK1EUj4 F1yJCkhrLyMjYwhtPSUF3JOkaZgeek+lG2cUBRoTeKg3471tCSxf4mjsUpZhmdrc QZEWAijR1pKgaXknHazzPzq8a40KunMhS3u+H05RG9hUN9NQiXB6fck9v34B8DIH Qj/6XIAlwLwOuYvcOICjfMWyOqavXxxWruQAcDLm2xPCLLHHpySX1q9KRRCUdJJf pImpND04VMbYORDipZ7ipsgsQ6yqCCNHIdyTVfkSIkOCZaA1IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImcoeXysOxT3Tq/+EF+l4vI+4H1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWM0ODMxMzAtNzg4Ny0z NzAwLTkwMjctMmQ1Y2VmNjgwMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRTAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpNPisbkzZ3BTlQ9JAcGxSCjqSdFcRJ1G71FNYNEHOz0I3OAza5Vw5U CQFzIA1ZdwVQtFB7ON7X9xnVEDseT8GiFCsk7BFxdrnS/KCcT90tRee4VUvHXjiU r37ZSfMTurZVRvjtnaNwR5AKrdmanOt8918wrYkATUCoXMNoWcUHfA5qp6koH4GO ZXR45SltuWTbgWXtjGQFtuoRAr8FvRXGAOgj7/fCMYJYwy4rARpiAAQxLq4S+SBU q+nSDIczWZW0LuqXXOUz+8VtpHTjj7pGsqoz46jvlYtysQkILBaNHedHH7js4s0F 4LbUJvkC6u+bbSg9C4XKGaOdlkqm2Sg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:08 2025 by rpki-client