$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa File: 5681d306-27a9-32cc-a97a-f708d3e413c7.roa (raw, json) Hash identifier: kGvbnpsK3EnJUqbDCqkqnYTdL848pYXT7YFDqFGPTUw= Subject key identifier: 22:D9:6A:D1:A1:C0:E6:B4:9C:21:28:67:30:48:CC:34:B7:EB:0D:ED Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E00685A2885AFDCC003D0F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.255.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:85:a2:88:5a:fd:cc:00:3d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=65f42dd4-37e0-45bb-81ae-66391df4f178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:03:a6:24:c9:a4:62:b6:e1:57:f9:b8:59: 51:33:aa:68:d6:ee:ac:09:37:3a:ae:b0:eb:7e:53: 50:e9:81:35:43:70:fd:46:1f:60:1b:1d:59:fa:45: 84:94:52:46:d9:1f:f0:cc:9b:5b:91:66:6f:46:f0: e8:cd:67:63:c5:6f:0d:81:89:80:b3:f1:8d:7c:2a: 0a:f4:c2:bf:68:be:bf:12:e2:1f:e1:4c:bf:c3:e3: d3:cf:26:7c:ba:6e:43:9a:4b:c5:eb:26:f1:2d:83: 8c:ff:3b:d3:51:ea:4b:99:b1:08:2a:f0:bf:52:b7: 87:a3:44:ca:af:f4:f8:9b:49:27:fc:41:4a:4e:9f: fe:bf:64:fa:0a:42:f3:87:86:eb:66:b3:4d:07:61: a6:03:72:88:59:ea:8a:9b:d8:b9:4c:cc:6f:43:a0: 60:32:cc:c0:1b:a5:5f:ea:83:77:1a:63:49:37:08: 6c:0f:74:1b:8e:63:86:76:b3:12:9e:a8:97:7e:e3: 64:e1:b5:01:3e:c3:60:24:3d:ec:a5:82:35:7b:a4: 5f:6d:6c:34:a5:f9:bb:52:99:05:d8:84:bf:84:28: b2:30:4c:66:91:69:78:d7:bf:2b:3c:22:59:c8:fd: 6b:ec:e3:87:bb:c0:01:8a:78:75:d6:ab:0a:3b:13: 13:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D9:6A:D1:A1:C0:E6:B4:9C:21:28:67:30:48:CC:34:B7:EB:0D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:ac:9d:fe:bc:8f:8b:7f:10:5a:49:fc:f0:60:76:71:73:b8: 66:18:7c:58:7b:1b:51:29:ef:69:35:7f:c1:4a:c2:06:cf:52: 94:93:e6:2d:eb:0a:59:96:40:9a:08:e9:a7:13:da:83:83:5f: 04:9b:77:bb:66:8e:01:f5:d4:95:ec:56:98:3a:65:ed:ad:e5: ef:d3:64:10:a3:2b:15:70:3f:d9:b5:f4:dd:ba:9a:b4:b2:66: 0c:04:ee:6d:90:94:c2:3c:bb:9e:01:c3:7b:53:45:4e:ee:8d: 61:99:68:b9:56:ee:e4:84:45:6e:d0:3f:78:92:86:c8:9f:e8: 29:15:01:38:a3:e7:e8:02:96:33:86:c0:da:dc:ac:19:78:d6: da:57:4d:89:37:52:bd:05:ac:fc:bd:65:b5:1f:f5:63:a0:ef: fd:2e:60:3a:be:ab:94:8c:ff:f8:8c:64:02:a5:e0:a7:ad:4c: 72:59:e7:66:07:ce:ea:e2:df:33:e3:a6:60:78:c5:66:42:c7: 94:86:a7:ea:f1:cb:25:b0:ca:00:bf:2a:59:9c:c7:6c:e0:1b: a9:50:81:86:90:56:dc:4b:f1:70:b3:9e:97:14:a8:d2:30:45: f1:c8:5e:19:c4:db:69:a1:34:dc:da:80:1d:63:5d:44:ae:d6: f5:22:1f:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBoWiiFr9zAA9DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NjVmNDJkZDQtMzdlMC00NWJiLTgxYWUtNjYzOTFkZjRmMTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHQDpiTJpGK24Vf5uFlRM6po1u6sCTc6rrDr flNQ6YE1Q3D9Rh9gGx1Z+kWElFJG2R/wzJtbkWZvRvDozWdjxW8NgYmAs/GNfCoK 9MK/aL6/EuIf4Uy/w+PTzyZ8um5DmkvF6ybxLYOM/zvTUepLmbEIKvC/UreHo0TK r/T4m0kn/EFKTp/+v2T6CkLzh4brZrNNB2GmA3KIWeqKm9i5TMxvQ6BgMszAG6Vf 6oN3GmNJNwhsD3QbjmOGdrMSnqiXfuNk4bUBPsNgJD3spYI1e6RfbWw0pfm7UpkF 2IS/hCiyMExmkWl4178rPCJZyP1r7OOHu8ABinh11qsKOxMTAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLZatGhwOa0nCEoZzBIzDS36w3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4MWQzMDYtMjdhOS0z MmNjLWE5N2EtZjcwOGQzZTQxM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6snf68j4t/EFpJ/PBgdnFzuGYYfFh7G1Ep72k1f8FKwgbPUpST5i3r ClmWQJoI6acT2oODXwSbd7tmjgH11JXsVpg6Ze2t5e/TZBCjKxVwP9m19N26mrSy ZgwE7m2QlMI8u54Bw3tTRU7ujWGZaLlW7uSERW7QP3iShsif6CkVATij5+gCljOG wNrcrBl41tpXTYk3Ur0FrPy9ZbUf9WOg7/0uYDq+q5SM//iMZAKl4KetTHJZ52YH zuri3zPjpmB4xWZCx5SGp+rxyyWwygC/Klmcx2zgG6lQgYaQVtxL8XCznpcUqNIw RfHIXhnE22mhNNzagB1jXUSu1vUiH+c= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:28 2025 by rpki-client