$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50733f5b-1d9a-3dd6-bae5-1c9cded74c43.roa File: 50733f5b-1d9a-3dd6-bae5-1c9cded74c43.roa (raw, json) Hash identifier: cCTcMkWWZNfg/xOxYqypw+gqsAx50301JcN0a1fbdHU= Subject key identifier: 45:84:32:08:20:D4:AC:5F:E9:E3:A6:1D:E8:57:D7:48:A6:69:EA:94 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21121B72613353C9A84AA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50733f5b-1d9a-3dd6-bae5-1c9cded74c43.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 162.221.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:21:b7:26:13:35:3c:9a:84:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=4eb43a01-5a19-44ed-b3cd-c130c2ef1ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:65:00:04:61:cf:9a:36:78:76:52:db:65:51: f4:c4:1d:40:ab:8f:3c:08:5f:97:fd:50:ec:7f:2a: 06:38:42:38:b2:30:1b:0a:a6:e9:cc:01:ec:74:3f: 5d:ae:d1:30:c6:05:d2:7d:65:c0:11:c8:37:34:c5: 0c:2d:7b:a4:14:f5:29:15:85:3d:41:8b:88:5c:28: 73:5c:03:da:69:c5:0e:3f:94:a6:3a:c1:f4:7f:54: 90:72:75:a2:d2:cf:b5:c7:e3:50:6b:c9:a4:f0:cb: 4d:0d:d9:42:e7:77:02:46:49:f1:7c:a1:7c:f4:15: d6:64:14:16:f9:74:be:49:64:96:94:a0:9d:eb:93: 43:43:08:f8:1d:07:80:6b:fa:f5:57:59:cc:7f:28: 22:20:75:bb:51:6a:5d:e7:ec:d5:48:12:ee:35:4b: fc:6a:2c:ec:7c:1a:48:fa:f4:6f:35:73:92:a2:5c: 6b:39:9f:44:75:35:b7:67:d7:1e:04:8c:67:9a:ff: cb:8b:ca:e0:bf:7b:5a:25:e4:60:cb:93:77:fc:0e: f5:ba:ec:8b:b0:80:32:45:31:10:5d:68:1b:05:db: 73:a5:43:6c:19:53:41:8e:43:ec:f0:6b:df:18:24: d0:cc:a7:27:75:08:0b:76:40:ca:df:ae:ec:a8:43: ad:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:84:32:08:20:D4:AC:5F:E9:E3:A6:1D:E8:57:D7:48:A6:69:EA:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/50733f5b-1d9a-3dd6-bae5-1c9cded74c43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.221.80.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:08:1d:04:77:b5:19:4c:e6:ad:cb:19:ba:d1:29:df:27:46: b4:47:e1:b3:0c:41:17:9a:31:25:15:39:d7:2a:08:dc:e1:cb: 1e:4f:20:7d:68:4a:71:82:a9:c9:2f:4a:07:43:c4:11:89:6b: e9:27:2c:3d:0f:ba:9a:e3:75:27:b5:c2:72:ff:c7:a4:22:b1: ab:1f:65:c6:ab:f2:78:e7:5b:f5:4e:16:0f:ed:7e:3b:0c:25: 46:27:27:72:24:7a:8d:36:f5:9c:bf:bf:ee:d9:56:84:3f:8a: a8:a3:b2:97:7a:d2:31:fb:df:a2:c5:1e:c7:44:ca:ea:6a:8d: 7b:66:60:27:06:b9:ac:be:8d:37:ea:14:5c:67:fc:4a:42:3b: bd:ab:32:23:e6:76:fc:fb:c9:11:38:11:80:bf:c2:9c:91:36: 0f:12:10:0c:de:ec:04:ab:be:ac:ae:a2:12:26:42:e0:e0:ce: 88:8a:c2:f4:b0:c0:4b:0c:fe:b8:9a:a6:14:a9:a4:e3:6a:d6: 77:91:b7:0f:91:ea:ba:3f:f6:d7:48:79:43:84:76:52:7c:0c: a7:55:2c:16:a3:d6:d7:af:84:78:9b:7b:bf:0d:fa:76:87:be: 7b:16:23:82:1c:6a:fe:f9:18:41:d9:51:8e:49:0a:6f:9a:1d: f9:3f:c5:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESG3JhM1PJqEqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NGViNDNhMDEtNWExOS00NGVkLWIzY2QtYzEzMGMyZWYxZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmUABGHPmjZ4dlLbZVH0xB1Aq488CF+X/VDs fyoGOEI4sjAbCqbpzAHsdD9drtEwxgXSfWXAEcg3NMUMLXukFPUpFYU9QYuIXChz XAPaacUOP5SmOsH0f1SQcnWi0s+1x+NQa8mk8MtNDdlC53cCRknxfKF89BXWZBQW +XS+SWSWlKCd65NDQwj4HQeAa/r1V1nMfygiIHW7UWpd5+zVSBLuNUv8aizsfBpI +vRvNXOSolxrOZ9EdTW3Z9ceBIxnmv/Li8rgv3taJeRgy5N3/A71uuyLsIAyRTEQ XWgbBdtzpUNsGVNBjkPs8GvfGCTQzKcndQgLdkDK367sqEOtcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWEMggg1Kxf6eOmHehX10imaeqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTA3MzNmNWItMWQ5YS0z ZGQ2LWJhZTUtMWM5Y2RlZDc0YzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot1QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMIHQR3tRlM5q3LGbrRKd8nRrRH4bMMQReaMSUVOdcqCNzhyx5PIH1o SnGCqckvSgdDxBGJa+knLD0PuprjdSe1wnL/x6QisasfZcar8njnW/VOFg/tfjsM JUYnJ3Ikeo029Zy/v+7ZVoQ/iqijspd60jH736LFHsdEyupqjXtmYCcGuay+jTfq FFxn/EpCO72rMiPmdvz7yRE4EYC/wpyRNg8SEAze7ASrvqyuohImQuDgzoiKwvSw wEsM/riaphSppONq1neRtw+R6ro/9tdIeUOEdlJ8DKdVLBaj1tevhHibe78N+naH vnsWI4Icav75GEHZUY5JCm+aHfk/xRU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:59 2025 by rpki-client