$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2514bd75-fb20-39f0-9f0f-346baea9dc49.roa File: 2514bd75-fb20-39f0-9f0f-346baea9dc49.roa (raw, json) Hash identifier: odJ270Zb7YJNVeK8VqX2w+DlwxSsx1nB0+vx8FUnNhE= Subject key identifier: 4A:57:19:4B:29:12:0C:B5:64:48:54:37:43:D8:F9:61:D4:C7:44:EE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F3052F4A72289316D9A25C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2514bd75-fb20-39f0-9f0f-346baea9dc49.roa Signing time: Tue 21 Jan 2025 20:37:47 +0000 ROA not before: Tue 21 Jan 2025 20:37:47 +0000 ROA not after: Mon 21 Apr 2025 19:37:47 +0000 asID: 7029 IP address blocks: 173.189.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:52:f4:a7:22:89:31:6d:9a:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:47 2025 GMT Not After : Apr 21 19:37:47 2025 GMT Subject: CN=a00b3e70-90a9-4e00-aa19-22da4968ac79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:46:34:52:c7:c8:77:b9:de:eb:57:39:51:6d: ab:ea:66:1c:e2:04:16:06:20:02:d9:92:88:29:21: 72:79:07:d4:d2:fe:0e:da:b1:f5:84:b2:93:88:4e: ce:16:96:e1:72:63:ff:85:cf:c6:6a:de:28:8b:1a: 9f:ea:b2:52:ff:d7:bf:7a:dc:58:7a:4f:b4:65:2e: 4c:75:22:53:00:71:5d:0c:9d:c6:cf:d8:60:d3:7f: 81:56:39:a6:71:e6:d1:48:a3:94:d8:32:82:13:ea: ea:69:08:ee:f7:53:59:6a:c4:df:e9:e3:ea:3a:a9: cc:d5:c5:d9:b9:66:e6:25:2f:1d:ce:ae:fd:b7:a1: a6:37:ac:14:45:ff:cb:df:43:11:b0:1f:55:fc:ec: 90:4f:c1:42:6a:2b:24:ec:f0:0a:5f:2d:e9:35:22: 79:b2:d4:3c:86:7f:16:69:1f:aa:7f:e6:2a:f0:a0: 38:b5:95:ce:ba:ba:bc:c5:6c:3a:cd:ec:81:9d:76: ba:ec:3d:24:d7:92:b0:16:04:d3:bf:e3:7a:c6:93: 9e:70:f1:61:3c:50:de:c1:60:82:63:d5:20:8b:d8: c9:34:d6:5a:2f:33:9d:f9:4b:66:02:9f:b6:a7:ac: 2b:f3:e6:13:9e:49:15:d9:bd:ea:5c:80:57:42:e4: 55:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:57:19:4B:29:12:0C:B5:64:48:54:37:43:D8:F9:61:D4:C7:44:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2514bd75-fb20-39f0-9f0f-346baea9dc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f8:01:5f:61:3b:74:9b:82:03:b7:46:0b:8e:c5:69:78:11: 04:d4:67:44:b3:05:02:35:0c:38:37:a9:c4:3a:72:f1:8d:67: bd:69:fc:7a:47:d8:85:6f:b4:7e:db:f9:52:1f:cb:33:73:e8: d0:d5:9f:1e:bb:0d:0f:48:f8:b7:96:55:0d:0d:80:f6:40:bf: 5a:9a:e2:5e:e5:20:05:36:5e:98:ca:56:29:6f:19:86:13:e3: 7d:0e:ee:7d:08:ba:03:7f:90:10:33:34:ac:8e:9e:e3:ff:56: 31:0a:89:c1:65:1b:dc:f1:93:f4:fb:8d:65:67:f6:c4:00:70: 03:12:35:45:a6:0b:8a:97:18:3c:19:ea:e3:16:03:d9:e3:56: 21:8b:92:d6:66:16:10:29:c5:74:26:06:79:8d:57:9b:a3:46: ca:ee:e0:73:4e:55:d5:d3:3a:60:b2:d6:9a:94:2b:68:1e:b5: 1a:6e:f4:97:fb:9e:c7:7d:b1:c9:10:10:f3:3c:f6:8e:46:ac: c0:6e:50:1d:79:89:e2:eb:40:f3:78:bf:79:53:c9:47:f8:a6: 12:52:c0:d6:aa:8a:20:1c:b5:dc:82:9a:10:6a:b5:44:3f:a5: cd:ed:c6:e5:43:85:e7:fa:ea:63:08:10:d2:65:0b:ed:2a:ed: 71:e6:b1:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMFL0pyKJMW2aJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzc0N1oXDTI1MDQyMTE5Mzc0N1owLzEtMCsGA1UEAxMk YTAwYjNlNzAtOTBhOS00ZTAwLWFhMTktMjJkYTQ5NjhhYzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0Y0UsfId7ne61c5UW2r6mYc4gQWBiAC2ZKI KSFyeQfU0v4O2rH1hLKTiE7OFpbhcmP/hc/Gat4oixqf6rJS/9e/etxYek+0ZS5M dSJTAHFdDJ3Gz9hg03+BVjmmcebRSKOU2DKCE+rqaQju91NZasTf6ePqOqnM1cXZ uWbmJS8dzq79t6GmN6wURf/L30MRsB9V/OyQT8FCaisk7PAKXy3pNSJ5stQ8hn8W aR+qf+Yq8KA4tZXOurq8xWw6zeyBnXa67D0k15KwFgTTv+N6xpOecPFhPFDewWCC Y9Ugi9jJNNZaLzOd+UtmAp+2p6wr8+YTnkkV2b3qXIBXQuRVTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpXGUspEgy1ZEhUN0PY+WHUx0TuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjUxNGJkNzUtZmIyMC0z OWYwLTlmMGYtMzQ2YmFlYTlkYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB34AV9hO3SbggO3RguOxWl4EQTUZ0SzBQI1DDg3qcQ6cvGNZ71p/HpH 2IVvtH7b+VIfyzNz6NDVnx67DQ9I+LeWVQ0NgPZAv1qa4l7lIAU2XpjKVilvGYYT 430O7n0IugN/kBAzNKyOnuP/VjEKicFlG9zxk/T7jWVn9sQAcAMSNUWmC4qXGDwZ 6uMWA9njViGLktZmFhApxXQmBnmNV5ujRsru4HNOVdXTOmCy1pqUK2getRpu9Jf7 nsd9sckQEPM89o5GrMBuUB15ieLrQPN4v3lTyUf4phJSwNaqiiActdyCmhBqtUQ/ pc3txuVDhef66mMIENJlC+0q7XHmsRQ= -----END CERTIFICATE-----Generated at Sun Apr 6 11:08:22 2025 by rpki-client