$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa File: 2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa (raw, json) Hash identifier: +5cHU+Kme8q1gZPd0i298rFY2ic0KxQLN7Cxk278kZ0= Subject key identifier: 01:5A:CA:1E:A0:00:3E:DA:E2:B1:DA:94:9E:DB:C1:68:D4:DC:3B:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F3058B9DC38FC080B9B5E60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa Signing time: Tue 21 Jan 2025 20:37:50 +0000 ROA not before: Tue 21 Jan 2025 20:37:50 +0000 ROA not after: Mon 21 Apr 2025 19:37:50 +0000 asID: 7029 IP address blocks: 75.117.208.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:58:b9:dc:38:fc:08:0b:9b:5e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:50 2025 GMT Not After : Apr 21 19:37:50 2025 GMT Subject: CN=ebfa620b-93ef-42dd-bd54-514407e38f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:cb:b4:03:c8:ad:83:e0:2c:57:f7:28:99: ab:4e:2c:21:55:3f:8c:7c:a5:9a:df:4c:17:79:4e: ad:20:54:d6:80:03:85:a5:c2:6b:a8:63:67:4f:2d: b4:dd:ba:4d:31:86:d7:1a:b5:bc:c4:88:23:55:2f: 31:69:c8:37:be:e3:23:62:bf:1c:41:4e:8e:82:ce: f4:68:54:8e:7c:8b:12:cf:3d:a0:98:98:18:f0:5c: b5:6e:45:1b:47:35:31:1f:21:9b:e0:44:32:fa:f7: a5:1e:80:71:b8:26:53:96:f4:a3:27:70:a7:15:d0: 73:34:a0:3d:ec:d7:8c:81:2b:4f:da:e7:0f:59:c4: 4a:0c:c2:87:8c:72:e7:82:c1:d5:77:27:30:d5:4c: 0a:0c:7e:a8:af:33:f3:36:c5:af:16:3b:8d:3c:52: 30:5f:db:25:79:5d:a8:ef:1a:b2:63:2e:2a:58:a2: 66:87:9b:ff:b6:c5:70:fe:41:28:52:61:46:7a:3e: 86:93:5b:92:23:4c:a3:3f:58:31:d7:2d:5a:05:26: de:73:1b:39:d0:4a:f1:06:c0:68:d7:5b:20:89:15: 33:c6:d7:ec:5e:bb:9e:48:db:7b:33:de:34:a7:30: 86:fb:35:d0:98:e7:ea:ad:a3:3d:0b:aa:e2:4d:d9: 36:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:5A:CA:1E:A0:00:3E:DA:E2:B1:DA:94:9E:DB:C1:68:D4:DC:3B:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2233a29f-9a9b-32a1-b1d6-e6f4b5c32fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:bb:7d:6a:81:e5:5b:3c:02:0b:2a:b3:bd:e1:4c:68:3f:d9: aa:0d:67:17:1c:eb:b0:83:24:67:25:80:ff:8f:7f:1d:35:12: 88:08:15:bf:af:f6:f9:9a:4f:b3:bb:b0:e9:79:01:0e:e1:6c: 56:60:40:24:94:69:e3:2d:60:f9:06:38:4f:03:7e:4a:46:95: 81:1a:a3:e1:5f:df:b8:65:16:50:fc:be:eb:0b:c3:ea:2f:dd: 83:f0:c2:1b:65:21:e9:67:4b:8c:d3:60:ab:8b:c7:81:e4:fe: d9:f1:47:58:ad:42:6d:de:86:c3:67:7e:6c:4a:1e:59:3f:86: 2e:c7:d8:f7:92:c0:42:d8:7e:ad:42:e8:41:dc:f5:b3:de:ea: a6:ec:8f:4a:e8:8e:c1:a9:73:af:99:db:c4:d6:0f:4f:33:54: 92:a8:58:ad:84:ac:e3:65:57:74:f9:4f:f9:4f:75:a0:e4:45: e8:ae:e6:fc:42:18:4e:09:24:66:d1:54:9e:9d:a2:50:ad:0d: 28:62:a5:00:f5:40:32:f3:76:bd:a9:97:1a:4d:58:c1:65:86: 68:2e:dc:cf:94:16:c0:a2:2a:db:af:74:ab:88:4c:2e:0e:23: 94:a6:3e:74:ec:31:35:70:af:42:10:9b:f9:b0:19:16:9d:54: b8:5d:18:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMFi53Dj8CAubXmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc1MFoXDTI1MDQyMTE5Mzc1MFowLzEtMCsGA1UEAxMk ZWJmYTYyMGItOTNlZi00MmRkLWJkNTQtNTE0NDA3ZTM4ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso7LtAPIrYPgLFf3KJmrTiwhVT+MfKWa30wX eU6tIFTWgAOFpcJrqGNnTy203bpNMYbXGrW8xIgjVS8xacg3vuMjYr8cQU6Ogs70 aFSOfIsSzz2gmJgY8Fy1bkUbRzUxHyGb4EQy+velHoBxuCZTlvSjJ3CnFdBzNKA9 7NeMgStP2ucPWcRKDMKHjHLngsHVdycw1UwKDH6orzPzNsWvFjuNPFIwX9sleV2o 7xqyYy4qWKJmh5v/tsVw/kEoUmFGej6Gk1uSI0yjP1gx1y1aBSbecxs50ErxBsBo 11sgiRUzxtfsXrueSNt7M940pzCG+zXQmOfqraM9C6riTdk2bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFayh6gAD7a4rHalJ7bwWjU3DvMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjIzM2EyOWYtOWE5Yi0z MmExLWIxZDYtZTZmNGI1YzMyZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS7fWqB5Vs8Agsqs73hTGg/2aoNZxcc67CDJGclgP+Pfx01EogIFb+v 9vmaT7O7sOl5AQ7hbFZgQCSUaeMtYPkGOE8DfkpGlYEao+Ff37hlFlD8vusLw+ov 3YPwwhtlIelnS4zTYKuLx4Hk/tnxR1itQm3ehsNnfmxKHlk/hi7H2PeSwELYfq1C 6EHc9bPe6qbsj0rojsGpc6+Z28TWD08zVJKoWK2ErONlV3T5T/lPdaDkReiu5vxC GE4JJGbRVJ6dolCtDShipQD1QDLzdr2plxpNWMFlhmgu3M+UFsCiKtuvdKuITC4O I5SmPnTsMTVwr0IQm/mwGRadVLhdGCo= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:22 2025 by rpki-client