$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27012e10-9931-3aab-89fb-6ee316fd86e0.roa File: 27012e10-9931-3aab-89fb-6ee316fd86e0.roa (raw, json) Hash identifier: ivC0NDa4ffnK5Gt/c670P3qu3FCD8AyNi2y+BS8v4mU= Subject key identifier: 2F:73:B8:9C:4C:21:90:37:50:38:36:FC:80:2B:37:6B:6B:B3:59:42 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211043EB4CD348468922294 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27012e10-9931-3aab-89fb-6ee316fd86e0.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 30363 IP address blocks: 209.156.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:04:3e:b4:cd:34:84:68:92:22:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=eb01d587-52af-4bc1-b595-8bb8ecf76448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:24:ba:2a:c5:33:5b:00:0b:e5:2d:2d:a3:48: 28:5b:28:cf:75:d4:2d:b1:51:13:08:c5:59:a8:70: 43:cc:aa:2d:a1:81:81:36:e9:b2:db:d2:25:59:20: 7d:ad:01:ea:fe:82:be:16:29:80:91:a4:89:ec:0b: 33:ee:45:87:ec:57:87:09:90:28:84:71:2a:8f:09: 52:56:a6:76:2a:81:3b:e9:ab:cb:e1:4b:55:d3:e3: c3:f6:d4:b9:63:8d:83:6c:75:6f:21:d3:05:ec:b0: 65:19:53:94:da:6a:45:2c:c9:fa:ec:1d:1d:9c:79: f8:ba:bb:79:b3:d9:84:3a:02:23:5f:a6:c5:e8:b6: af:e5:4c:1f:fa:d2:21:e8:1e:07:a6:1a:71:cb:b8: d5:15:96:2a:cd:37:64:95:08:e6:29:b0:5d:74:47: d3:1f:c7:ab:b9:a6:ee:c1:83:d7:3e:f7:06:c0:67: e2:05:09:f9:e7:21:77:3a:6a:f5:a7:70:e1:a0:4a: 86:d1:e8:78:8d:65:be:14:54:5c:53:8e:b8:1b:eb: dc:42:50:ef:6d:c0:74:8e:cf:90:ce:5d:96:36:ad: c8:7d:b4:f6:60:bb:ed:f9:d8:d5:7f:33:50:8e:dd: 99:e6:d8:ce:3e:0d:6c:75:ea:bc:6c:57:5d:0f:ce: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:73:B8:9C:4C:21:90:37:50:38:36:FC:80:2B:37:6B:6B:B3:59:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27012e10-9931-3aab-89fb-6ee316fd86e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5e:f8:49:be:10:d3:02:a2:c5:39:18:0d:31:68:d5:34:f7: 22:88:c0:6a:d5:f1:4e:6e:e9:32:49:ea:e8:b2:12:1a:6a:32: 4f:f0:70:b4:95:41:d1:94:a5:9e:d6:90:3f:8c:2b:25:dc:87: f2:7a:7f:e8:53:91:15:0d:78:0a:bf:53:d7:5c:79:d1:c1:56: 10:94:02:7b:bd:18:62:ab:59:2b:a5:cb:31:1f:23:ec:98:cc: f3:84:f4:80:9d:24:ad:57:41:b6:3d:80:c4:c7:79:94:75:20: 22:9a:ee:a0:9e:ac:7d:51:61:28:44:af:d5:e4:5b:0a:9c:97: 5d:17:c4:1e:b2:c5:6b:ca:af:2b:d8:d1:d2:41:fd:38:a6:30: 87:3c:0b:f0:7e:e6:3d:fa:03:73:b2:fa:fb:3b:5d:c8:91:00: 59:1f:c4:10:83:9b:5e:e3:c3:09:26:5b:a7:f7:06:ab:02:f0: cf:65:93:2b:56:a7:cd:ab:f0:2a:e1:00:23:11:24:9b:38:96: 73:27:f7:1a:32:6a:d0:b8:91:ed:a9:68:44:51:9e:75:7a:1a: 9b:32:1f:f0:db:f2:3d:3e:5b:19:e8:2e:7e:09:58:cb:85:a8: ac:dc:56:e7:61:cb:aa:36:9e:29:06:07:a6:bd:de:aa:3b:61: 71:00:47:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQQ+tM00hGiSIpQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWIwMWQ1ODctNTJhZi00YmMxLWI1OTUtOGJiOGVjZjc2NDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCS6KsUzWwAL5S0to0goWyjPddQtsVETCMVZ qHBDzKotoYGBNumy29IlWSB9rQHq/oK+FimAkaSJ7Asz7kWH7FeHCZAohHEqjwlS VqZ2KoE76avL4UtV0+PD9tS5Y42DbHVvIdMF7LBlGVOU2mpFLMn67B0dnHn4urt5 s9mEOgIjX6bF6Lav5Uwf+tIh6B4Hphpxy7jVFZYqzTdklQjmKbBddEfTH8eruabu wYPXPvcGwGfiBQn55yF3Omr1p3DhoEqG0eh4jWW+FFRcU464G+vcQlDvbcB0js+Q zl2WNq3IfbT2YLvt+djVfzNQjt2Z5tjOPg1sdeq8bFddD85VmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC9zuJxMIZA3UDg2/IArN2trs1lCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjcwMTJlMTAtOTkzMS0z YWFiLTg5ZmItNmVlMzE2ZmQ4NmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZzbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGxe+Em+ENMCosU5GA0xaNU09yKIwGrV8U5u6TJJ6uiyEhpqMk/wcLSV QdGUpZ7WkD+MKyXch/J6f+hTkRUNeAq/U9dcedHBVhCUAnu9GGKrWSulyzEfI+yY zPOE9ICdJK1XQbY9gMTHeZR1ICKa7qCerH1RYShEr9XkWwqcl10XxB6yxWvKryvY 0dJB/TimMIc8C/B+5j36A3Oy+vs7XciRAFkfxBCDm17jwwkmW6f3BqsC8M9lkytW p82r8CrhACMRJJs4lnMn9xoyatC4ke2paERRnnV6GpsyH/Db8j0+WxnoLn4JWMuF qKzcVudhy6o2nikGB6a93qo7YXEAR34= -----END CERTIFICATE-----Generated at Mon Apr 7 12:01:04 2025 by rpki-client