$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201867cf-180d-3c07-a0e3-fa83cbd534c6.roa File: 201867cf-180d-3c07-a0e3-fa83cbd534c6.roa (raw, json) Hash identifier: 4gzBuT+STZK7vAEJNJzJeoNsbD1yC2DGI1850lsa4qg= Subject key identifier: 4C:F7:D4:46:92:B0:86:A4:D0:E2:A8:0F:CD:04:12:7B:A9:37:97:18 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BFEBD9F59AD688C0FC4D29C8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201867cf-180d-3c07-a0e3-fa83cbd534c6.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.187.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d9:f5:9a:d6:88:c0:fc:4d:29:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=5300e791-8444-4e09-ae9a-e4b052ddb33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:18:53:d5:ee:69:9b:1e:3f:dd:6c:85:7a:fa: 70:76:5a:aa:d8:b1:74:43:dd:3f:0a:a1:35:9a:32: b0:08:b9:e6:9e:3a:4d:a0:bf:e0:f7:b0:2b:4e:02: d7:22:be:b9:9f:dd:13:20:bc:ad:1c:cd:50:31:e9: 3a:af:17:00:02:4a:9b:47:11:4d:ea:33:2f:ea:e1: 17:52:ae:6a:77:e8:ae:23:5e:74:bb:06:6c:c6:9a: 4b:32:cf:d9:12:53:14:da:11:76:2b:89:8d:4c:d7: 46:e6:2c:bd:95:90:e2:ba:3a:e3:a7:2f:38:28:e5: ce:2c:cc:61:9b:45:8f:5f:14:f8:41:bb:70:5d:20: 8d:fc:fb:9d:77:7f:1a:fc:c4:0a:fb:e0:6e:eb:9d: d9:5e:8b:c3:63:0b:2e:1c:83:92:51:1e:e2:0d:cd: 04:06:1d:1c:06:77:fa:c3:31:ee:55:65:36:e7:f6: e5:10:6e:47:49:70:00:81:e8:03:cc:99:ef:df:1c: 8c:aa:4c:44:a1:0a:32:6c:2c:12:22:7d:39:a9:de: ab:b9:eb:42:eb:d9:7b:3f:6e:33:90:83:f3:b3:95: 95:16:0a:20:12:03:b7:17:ef:e1:f6:d1:72:e1:f7: f9:d5:a5:b6:05:1e:02:32:b4:4c:43:ff:4f:40:db: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F7:D4:46:92:B0:86:A4:D0:E2:A8:0F:CD:04:12:7B:A9:37:97:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/201867cf-180d-3c07-a0e3-fa83cbd534c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f3:a5:91:1d:a2:ff:9c:bc:55:7c:66:97:c6:40:58:98:df: 09:23:50:2f:6e:4c:26:20:64:5c:72:41:81:ac:c0:a9:a8:2e: ca:f8:86:dc:79:32:8e:03:0e:a8:74:f6:5c:25:78:6d:ef:e6: f9:0e:8d:19:b7:5c:35:90:07:d3:c7:aa:c7:3a:c9:03:66:f2: 82:a3:c2:62:49:34:4e:48:73:91:44:a0:ed:a9:cb:27:d3:bb: 07:d0:16:00:b1:29:74:8c:a0:ab:76:01:d3:ff:94:1b:73:ad: 66:98:4b:b7:4f:a0:d1:42:76:ff:a9:26:52:c1:55:5e:2a:05: 91:22:f6:8c:68:aa:8c:e5:4e:9b:9e:31:e8:ce:7b:df:a8:b7: d4:e2:5c:10:a4:bd:37:e1:89:bc:6d:44:9d:cc:d2:8a:30:f7: 0f:f7:3b:74:5c:16:8e:8a:5a:12:68:af:0a:07:80:b6:87:29: 1e:18:f4:b9:30:e2:9f:e7:c5:04:48:aa:9b:56:e7:bf:be:c5: fb:fe:e8:79:cf:f8:83:71:ef:d9:3f:47:78:46:a5:06:c3:f7: 6b:35:cc:4f:8a:18:e7:5c:16:b7:ed:da:19:fa:0c:b8:af:09: 16:35:26:00:59:5f:b1:65:13:57:2e:49:a8:7c:ba:d2:46:46: e7:f5:f4:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69n1mtaIwPxNKcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NTMwMGU3OTEtODQ0NC00ZTA5LWFlOWEtZTRiMDUyZGRiMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRhT1e5pmx4/3WyFevpwdlqq2LF0Q90/CqE1 mjKwCLnmnjpNoL/g97ArTgLXIr65n90TILytHM1QMek6rxcAAkqbRxFN6jMv6uEX Uq5qd+iuI150uwZsxppLMs/ZElMU2hF2K4mNTNdG5iy9lZDiujrjpy84KOXOLMxh m0WPXxT4QbtwXSCN/Pudd38a/MQK++Bu653ZXovDYwsuHIOSUR7iDc0EBh0cBnf6 wzHuVWU25/blEG5HSXAAgegDzJnv3xyMqkxEoQoybCwSIn05qd6ruetC69l7P24z kIPzs5WVFgogEgO3F+/h9tFy4ff51aW2BR4CMrRMQ/9PQNs0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEz31EaSsIak0OKoD80EEnupN5cYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAxODY3Y2YtMTgwZC0z YzA3LWEwZTMtZmE4M2NiZDUzNGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbvHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLzpZEdov+cvFV8ZpfGQFiY3wkjUC9uTCYgZFxyQYGswKmoLsr4htx5 Mo4DDqh09lwleG3v5vkOjRm3XDWQB9PHqsc6yQNm8oKjwmJJNE5Ic5FEoO2pyyfT uwfQFgCxKXSMoKt2AdP/lBtzrWaYS7dPoNFCdv+pJlLBVV4qBZEi9oxoqozlTpue MejOe9+ot9TiXBCkvTfhibxtRJ3M0oow9w/3O3RcFo6KWhJorwoHgLaHKR4Y9Lkw 4p/nxQRIqptW57++xfv+6HnP+INx79k/R3hGpQbD92s1zE+KGOdcFrft2hn6DLiv CRY1JgBZX7FlE1cuSah8utJGRuf19EY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:18 2025 by rpki-client