$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa File: 3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa (raw, json) Hash identifier: 8/fwbfUwiOyFEUfvrn7dXUj1PPlTw5zgKj+Z23xNiBg= Subject key identifier: EB:DD:0B:D3:FC:6A:8A:87:90:36:69:50:F7:D5:C0:3F:71:D9:37:70 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849407E15668F0A906173F62BF0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa Signing time: Thu 20 Mar 2025 15:19:36 +0000 ROA not before: Thu 20 Mar 2025 15:19:36 +0000 ROA not after: Wed 18 Jun 2025 15:19:36 +0000 asID: 7029 IP address blocks: 162.39.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:7e:15:66:8f:0a:90:61:73:f6:2b:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 20 15:19:36 2025 GMT Not After : Jun 18 15:19:36 2025 GMT Subject: CN=36e2ad78-0d6f-4af7-9f1b-9d72dc18790d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:40:33:d3:aa:7f:99:c1:ac:9b:17:4c:aa:02: 3c:9a:63:2e:fb:4e:f9:87:60:0f:e2:8a:74:27:e0: 73:06:2c:27:31:c3:50:c9:c9:fd:c0:67:86:fb:0d: f0:79:09:77:22:78:64:94:22:a4:19:1c:60:a0:d0: c5:c3:83:0a:51:40:a9:46:53:39:75:9e:be:cb:a5: 30:02:57:16:ac:c5:d3:5b:4f:d0:37:dd:32:b9:4e: 43:dd:73:72:fd:c0:5e:38:d1:27:96:9d:f4:3f:93: 1f:f5:e6:b7:2c:01:49:68:9f:d5:f5:08:81:ab:ad: ac:d0:c5:a9:e3:13:f7:9f:5a:c4:57:a0:a9:27:5f: 44:49:c3:77:62:69:eb:b2:4d:56:42:9d:f4:34:54: b0:f1:15:12:e9:a7:13:af:7a:dd:33:f0:dd:fc:02: 8c:71:a5:52:4e:b4:25:fa:15:cd:f7:7e:b2:fd:0b: c0:58:07:32:36:52:c8:b0:7f:b1:01:d1:33:90:31: 08:9c:94:6e:76:0b:3c:5a:3d:b2:1b:21:11:e0:d3: 4f:00:97:99:f6:02:fb:be:45:bb:25:21:b5:fe:14: 7f:ac:96:93:f1:54:b7:dc:31:45:26:83:4c:d1:ff: 03:86:1b:a5:fa:8d:16:c2:e8:ce:0d:c8:0c:36:af: cd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DD:0B:D3:FC:6A:8A:87:90:36:69:50:F7:D5:C0:3F:71:D9:37:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3d479b6e-d7de-33d9-b5b4-757ee73cb84a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.39.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:5e:63:99:e8:7a:e8:ae:b0:7e:f1:bd:f8:db:e8:e1:62:e0: 62:d0:08:4e:47:85:dd:5d:6c:25:a8:98:ea:5f:37:55:d0:c3: 95:71:67:b1:99:b4:b8:bd:48:b4:73:68:ab:a1:4e:53:cf:29: f2:93:56:14:e5:a3:62:37:83:72:c3:16:01:26:97:64:98:3c: 36:a2:d3:28:77:59:83:8a:9f:77:20:a3:de:46:eb:a0:4c:da: 46:d3:ee:55:8c:35:b2:90:7b:fd:94:d5:d4:65:14:70:cf:36: 57:ea:b6:5d:4a:8f:c1:a4:3a:52:11:55:ac:b9:05:4e:b9:a7: f5:39:6d:a2:2a:41:3d:eb:da:2c:40:92:0c:19:73:4c:98:9f: f6:39:bc:22:97:03:e3:0e:ea:f5:c8:1d:b2:56:32:e3:49:cb: c4:d2:22:d1:b2:60:5b:c4:16:26:2b:23:0b:2b:18:12:77:b2: 32:82:cf:fc:de:6f:5d:bc:70:d2:e9:8d:a2:19:20:91:a5:05: 67:4a:9d:a5:8d:a5:16:41:21:57:24:98:a0:d0:bc:35:8c:e2: 5c:83:ee:51:84:7d:45:d1:85:05:eb:6c:9a:0f:1a:8a:5a:b5: f9:cb:e5:ff:90:8a:06:70:b2:ef:e8:3b:ab:da:4f:1f:1a:cd: 77:9c:8d:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAfhVmjwqQYXP2K/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyMDE1MTkzNloXDTI1MDYxODE1MTkzNlowLzEtMCsGA1UEAxMk MzZlMmFkNzgtMGQ2Zi00YWY3LTlmMWItOWQ3MmRjMTg3OTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUAz06p/mcGsmxdMqgI8mmMu+075h2AP4op0 J+BzBiwnMcNQycn9wGeG+w3weQl3InhklCKkGRxgoNDFw4MKUUCpRlM5dZ6+y6Uw AlcWrMXTW0/QN90yuU5D3XNy/cBeONEnlp30P5Mf9ea3LAFJaJ/V9QiBq62s0MWp 4xP3n1rEV6CpJ19EScN3Ymnrsk1WQp30NFSw8RUS6acTr3rdM/Dd/AKMcaVSTrQl +hXN936y/QvAWAcyNlLIsH+xAdEzkDEInJRudgs8Wj2yGyER4NNPAJeZ9gL7vkW7 JSG1/hR/rJaT8VS33DFFJoNM0f8Dhhul+o0WwujODcgMNq/N/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvdC9P8aoqHkDZpUPfVwD9x2TdwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2Q0NzliNmUtZDdkZS0z M2Q5LWI1YjQtNzU3ZWU3M2NiODRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoifcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZeY5noeuiusH7xvfjb6OFi4GLQCE5Hhd1dbCWomOpfN1XQw5VxZ7GZ tLi9SLRzaKuhTlPPKfKTVhTlo2I3g3LDFgEml2SYPDai0yh3WYOKn3cgo95G66BM 2kbT7lWMNbKQe/2U1dRlFHDPNlfqtl1Kj8GkOlIRVay5BU65p/U5baIqQT3r2ixA kgwZc0yYn/Y5vCKXA+MO6vXIHbJWMuNJy8TSItGyYFvEFiYrIwsrGBJ3sjKCz/ze b128cNLpjaIZIJGlBWdKnaWNpRZBIVckmKDQvDWM4lyD7lGEfUXRhQXrbJoPGopa tfnL5f+QigZwsu/oO6vaTx8azXecjRY= -----END CERTIFICATE-----Generated at Sat Apr 5 20:48:31 2025 by rpki-client