$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa File: 20370447-4dbe-31bc-8435-e733a838a637.roa (raw, json) Hash identifier: UmT5fMf1K59V+1TDO60LtPC+72TCkeEMIg1wl73j/GE= Subject key identifier: B1:56:09:8D:25:D8:6B:CA:AF:BA:ED:AC:14:CE:4E:7D:8B:75:98:A0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB5764A0B7D88D5F731BE40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 75.89.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:76:4a:0b:7d:88:d5:f7:31:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=1f4e4edb-351f-4851-a60c-9aa302a73f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:51:6b:cc:08:c6:7a:ae:76:f0:32:e6:67:8e: 72:4a:37:32:ca:20:6d:33:87:46:d1:ff:f5:df:16: 8a:fa:1b:2c:71:bb:3e:ed:0f:e7:f9:b2:8d:18:44: 16:75:a4:45:b0:6f:2d:bc:d2:78:0f:2b:fa:fe:59: ce:e2:0d:58:21:8e:25:df:33:be:61:bc:b0:a1:5b: 8b:f1:9b:8f:22:19:3d:ab:f6:7f:2d:47:5f:db:a1: bb:ac:95:9f:e5:f3:c7:f7:13:7e:8a:62:64:3d:85: 4f:e4:f1:00:01:69:01:02:5a:79:9d:46:02:2d:6d: 37:f0:3f:0f:af:48:05:ce:66:15:ad:a6:ca:8d:a4: b4:0b:5c:03:de:66:aa:cd:a8:29:02:41:6d:71:ae: 91:c6:44:c5:3e:28:74:9a:5c:84:a2:4d:46:d7:e1: e9:4e:5e:e5:0c:dc:ec:f1:d1:61:86:b2:3d:d9:c5: d5:6c:dc:b8:44:8e:14:d6:0f:46:2a:17:a7:bb:4b: 1a:4f:4c:f1:e2:86:e5:22:b7:aa:fd:5d:fc:c0:ef: aa:8d:9a:61:bd:a7:1a:e4:be:a5:c3:78:ce:6b:59: 1b:ad:82:3d:e5:93:6d:8b:78:7e:28:c8:a7:d7:54: 6f:4d:4d:e0:3a:db:9c:f9:fd:8c:73:de:aa:86:2b: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:56:09:8D:25:D8:6B:CA:AF:BA:ED:AC:14:CE:4E:7D:8B:75:98:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/20370447-4dbe-31bc-8435-e733a838a637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.89.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:ca:ab:cd:2b:fb:9c:42:12:0d:05:16:2d:3c:05:2e:46:ed: d6:2c:33:be:21:ad:e3:9b:6e:7b:ba:98:cc:f8:fc:81:e9:f6: 05:bd:47:fa:63:b4:82:36:40:02:22:d8:92:c3:a1:75:f4:43: 32:df:fb:0b:71:21:15:8a:eb:9a:c5:58:1d:fc:8a:f0:ac:8d: c0:b7:1a:7e:59:95:aa:63:da:af:14:64:2e:52:fd:d6:3c:e0: 3b:22:68:00:27:6d:72:36:61:87:5b:3e:39:71:78:5d:98:fa: 0a:df:b6:48:da:39:f1:3a:f2:e4:d7:35:6b:a9:c6:5c:26:44: 3a:ec:6f:ec:c1:c6:2c:f2:4c:bc:35:50:87:4a:ad:8c:ab:b1: f0:7b:02:21:e7:8a:91:11:39:20:62:4a:7d:c7:e0:50:c3:9f: a0:27:22:3c:77:fa:8b:43:d6:ce:77:59:ea:d6:01:c6:43:b2: 62:98:db:b9:89:3a:df:ab:15:45:9f:ed:33:65:1b:e5:04:45: 59:08:cc:55:25:95:39:87:e1:c6:a9:96:01:3b:2c:54:d5:c3: 87:be:8c:3a:16:d4:d2:e8:4d:42:0e:b4:c3:4c:68:c3:07:d1: 2d:e4:50:99:99:71:87:92:10:c5:16:fb:0c:65:a3:67:17:86: 1b:bf:fe:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tXZKC32I1fcxvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk MWY0ZTRlZGItMzUxZi00ODUxLWE2MGMtOWFhMzAyYTczZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVFrzAjGeq528DLmZ45ySjcyyiBtM4dG0f/1 3xaK+hsscbs+7Q/n+bKNGEQWdaRFsG8tvNJ4Dyv6/lnO4g1YIY4l3zO+YbywoVuL 8ZuPIhk9q/Z/LUdf26G7rJWf5fPH9xN+imJkPYVP5PEAAWkBAlp5nUYCLW038D8P r0gFzmYVrabKjaS0C1wD3maqzagpAkFtca6RxkTFPih0mlyEok1G1+HpTl7lDNzs 8dFhhrI92cXVbNy4RI4U1g9GKhenu0saT0zx4oblIreq/V38wO+qjZphvaca5L6l w3jOa1kbrYI95ZNti3h+KMin11RvTU3gOtuc+f2Mc96qhivu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFWCY0l2GvKr7rtrBTOTn2LdZigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAzNzA0NDctNGRiZS0z MWJjLTg0MzUtZTczM2E4MzhhNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES1mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDKq80r+5xCEg0FFi08BS5G7dYsM74hreObbnu6mMz4/IHp9gW9R/pj tII2QAIi2JLDoXX0QzLf+wtxIRWK65rFWB38ivCsjcC3Gn5Zlapj2q8UZC5S/dY8 4DsiaAAnbXI2YYdbPjlxeF2Y+grftkjaOfE68uTXNWupxlwmRDrsb+zBxizyTLw1 UIdKrYyrsfB7AiHnipEROSBiSn3H4FDDn6AnIjx3+otD1s53WerWAcZDsmKY27mJ Ot+rFUWf7TNlG+UERVkIzFUllTmH4caplgE7LFTVw4e+jDoW1NLoTUIOtMNMaMMH 0S3kUJmZcYeSEMUW+wxlo2cXhhu//rU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:16 2025 by rpki-client