$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa File: 2f201d1e-868d-371e-83c4-199549900b92.roa (raw, json) Hash identifier: k6VOa6DCPG3agIb1yy80geiFg8iNXvqvZv4yZJ2716s= Subject key identifier: 69:62:BF:1F:F9:83:AB:4A:32:BB:58:50:89:09:67:6A:28:5F:07:16 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EDEE16D1CCA85FB83200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 69.40.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:ed:ee:16:d1:cc:a8:5f:b8:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=b6617ac0-4b37-4315-8911-cab6854a4377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:71:a2:0d:b2:ef:4c:af:83:94:05:15:40:81: 03:2c:8c:5b:a8:f2:76:71:11:42:19:8a:17:76:fa: f8:04:02:1c:15:5e:5d:da:ba:45:d5:d4:28:58:10: be:7e:da:f4:9d:59:05:53:fd:b8:91:9e:ec:f3:71: 19:69:47:bd:d2:83:de:22:e4:b7:0d:e6:15:d4:30: 43:9f:8f:69:06:16:99:e9:40:3e:dc:8d:14:e2:09: 7d:f4:e4:3e:a1:ed:d4:75:73:71:ce:c1:f9:9f:44: d0:b1:12:a1:1f:9b:18:1e:db:e6:b9:2a:6c:5a:01: 2f:c2:e6:2e:25:7b:11:62:df:0b:59:43:ac:5a:a0: 12:29:0a:ff:fd:88:6c:2c:bc:23:d4:9d:ba:e5:54: 25:ff:f8:35:c8:48:f2:b0:00:09:9e:0d:b8:5e:5f: c3:05:b0:63:e9:66:c8:6c:14:04:9c:b3:c4:f7:c8: 0f:ea:f4:08:e0:fa:ad:4b:03:96:a8:09:8f:d9:13: 0b:92:e9:ed:e4:49:f8:17:cd:1d:bf:17:54:b0:c6: 2d:b3:72:71:da:a7:09:4a:df:81:85:b2:17:13:f9: 9d:38:08:0a:8e:5d:7a:1c:cc:cc:30:85:d7:63:da: dd:59:0c:07:1d:ca:79:93:0b:20:55:10:70:df:55: 43:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:62:BF:1F:F9:83:AB:4A:32:BB:58:50:89:09:67:6A:28:5F:07:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2f201d1e-868d-371e-83c4-199549900b92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:46:8c:ee:9b:2d:86:9f:ee:e8:ae:17:9b:34:5a:3c:14:85: 73:9f:4b:d7:8b:49:62:2b:e3:18:27:aa:3b:40:bb:87:34:29: e0:80:05:f2:4a:15:bb:eb:20:51:a1:34:0d:d9:83:11:cd:4f: 3c:71:d1:3d:34:1b:15:69:6a:d6:f1:df:4a:bc:09:44:d8:c5: 83:77:dd:82:a9:ed:9a:5c:8e:a2:2f:5c:9b:0f:cf:89:23:93: 58:d6:e1:6d:c2:d5:aa:40:6c:0a:ad:e2:66:c8:47:50:52:aa: 80:98:d8:0b:55:b7:a4:2f:86:99:58:86:97:0b:34:b8:ab:08: 30:af:59:70:44:4e:71:60:87:0f:dc:d9:ee:c2:5b:8f:36:53: bb:eb:07:d5:43:c5:3b:80:d8:85:c9:f5:79:e1:3b:4d:e4:5a: e2:43:a8:38:6e:92:f3:0f:78:ab:76:33:53:30:34:bd:9a:f0: ec:38:2c:77:49:94:89:ad:85:67:39:6c:a4:ee:33:c7:3e:fc: 91:63:4e:36:52:30:2c:81:cc:69:eb:b5:88:52:ff:4a:15:50: 16:54:e7:17:5c:87:6f:de:0d:d4:78:d1:e8:9b:15:17:67:58: 5e:fe:aa:d3:59:43:a5:a9:30:5b:d5:d8:e3:f0:d5:cf:df:f1: 8b:0a:1c:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEO3uFtHMqF+4MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk YjY2MTdhYzAtNGIzNy00MzE1LTg5MTEtY2FiNjg1NGE0Mzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXGiDbLvTK+DlAUVQIEDLIxbqPJ2cRFCGYoX dvr4BAIcFV5d2rpF1dQoWBC+ftr0nVkFU/24kZ7s83EZaUe90oPeIuS3DeYV1DBD n49pBhaZ6UA+3I0U4gl99OQ+oe3UdXNxzsH5n0TQsRKhH5sYHtvmuSpsWgEvwuYu JXsRYt8LWUOsWqASKQr//YhsLLwj1J265VQl//g1yEjysAAJng24Xl/DBbBj6WbI bBQEnLPE98gP6vQI4PqtSwOWqAmP2RMLkunt5En4F80dvxdUsMYts3Jx2qcJSt+B hbIXE/mdOAgKjl16HMzMMIXXY9rdWQwHHcp5kwsgVRBw31VDNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlivx/5g6tKMrtYUIkJZ2ooXwcWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmYyMDFkMWUtODY4ZC0z NzFlLTgzYzQtMTk5NTQ5OTAwYjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGRSiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9GjO6bLYaf7uiuF5s0WjwUhXOfS9eLSWIr4xgnqjtAu4c0KeCABfJK FbvrIFGhNA3ZgxHNTzxx0T00GxVpatbx30q8CUTYxYN33YKp7ZpcjqIvXJsPz4kj k1jW4W3C1apAbAqt4mbIR1BSqoCY2AtVt6QvhplYhpcLNLirCDCvWXBETnFghw/c 2e7CW482U7vrB9VDxTuA2IXJ9XnhO03kWuJDqDhukvMPeKt2M1MwNL2a8Ow4LHdJ lImthWc5bKTuM8c+/JFjTjZSMCyBzGnrtYhS/0oVUBZU5xdch2/eDdR40eibFRdn WF7+qtNZQ6WpMFvV2OPw1c/f8YsKHPU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:04:08 2025 by rpki-client