$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601ab82f-2e42-35f0-9347-f61a1e8437bd.roa File: 601ab82f-2e42-35f0-9347-f61a1e8437bd.roa (raw, json) Hash identifier: erv/sY5sca1Qi5YnuEP4f+sIKlNYEwBr2H6oRb4IHug= Subject key identifier: BA:F8:C3:36:D0:16:55:14:9F:B4:AC:0A:96:0D:A1:9F:2B:94:AC:75 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE1203E4D65310AD3B5DF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601ab82f-2e42-35f0-9347-f61a1e8437bd.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 162.40.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:20:3e:4d:65:31:0a:d3:b5:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=f6e5e89f-cf6c-4f38-806b-f2862160752e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:23:50:b9:d3:58:db:c7:05:dd:16:e9:13: 32:d9:d3:e9:ad:e3:39:d3:e3:65:79:38:21:59:d0: 5d:4c:b7:d9:7b:23:24:e4:92:eb:f1:4b:ed:10:b5: 19:be:9d:e8:d9:13:b7:d2:79:62:1c:a2:78:ca:f0: dc:ea:dd:ce:3c:28:41:f7:e5:06:55:06:2d:9a:43: 2b:57:95:0c:b4:d0:01:b5:16:60:26:24:18:ae:b0: c7:33:ea:70:e8:20:a8:cf:bb:e1:08:1b:c4:ed:23: f4:72:18:44:23:74:4a:79:96:e0:41:9b:6a:08:a1: 61:36:42:ef:e7:b2:ed:b8:ab:fc:c9:38:e3:9f:a6: 3d:33:f6:e7:96:e2:21:0c:37:ab:19:54:d3:68:e1: 6f:b1:92:d0:43:3f:1c:01:33:87:36:52:30:cf:c0: ca:fc:8b:14:87:6a:3a:2f:35:41:3e:28:e3:b4:40: bd:0a:09:8d:dd:df:23:40:14:dc:21:4c:c3:3b:5c: d2:89:51:55:6d:8a:84:b5:f2:81:22:02:3e:85:36: 65:5e:16:03:b2:b8:52:a5:12:a7:9c:5b:b7:56:82: c3:23:65:6b:47:2d:eb:c4:ea:fe:25:59:6f:67:ab: 02:16:9f:ba:7e:c0:6b:12:40:8b:84:f7:af:37:93: 7c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F8:C3:36:D0:16:55:14:9F:B4:AC:0A:96:0D:A1:9F:2B:94:AC:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/601ab82f-2e42-35f0-9347-f61a1e8437bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:b4:da:8f:05:c9:67:88:ac:88:82:e3:94:16:c7:09:a7:84: 80:f3:96:0d:c1:a9:2b:78:e7:72:57:03:9c:ec:7f:04:fa:99: a2:31:22:d3:3e:27:5d:d6:7f:67:cb:47:c0:45:d4:6f:f8:85: c6:f1:7e:1c:52:6b:bc:5b:f1:27:3b:be:4d:d4:fe:1a:f6:61: db:91:06:8a:fd:0b:30:61:1a:93:18:7c:cc:1f:4f:47:7d:a1: b2:77:a8:be:ec:7c:47:40:9b:38:29:26:92:10:95:63:d9:81: b4:2c:d4:cb:9a:47:fa:26:fb:dc:96:9b:32:75:0f:8e:61:2d: 86:45:50:7f:df:68:ed:09:55:76:89:10:d7:82:87:97:57:8f: c0:cd:9d:b1:d6:a1:42:52:23:66:7d:e3:01:41:6c:fc:5c:ed: 79:df:5a:de:2f:bd:ab:db:bf:80:ca:d5:2e:b2:e6:88:8c:b8: 28:45:98:d9:01:8e:05:01:c6:13:4b:dd:f4:e3:32:04:12:2a: 11:85:5a:84:e0:fa:7a:b9:0b:04:8d:6e:c6:9d:7b:8b:1e:87: 6d:22:65:1f:b5:3d:1b:20:8e:4a:24:5b:4a:64:bd:d8:80:55: 8a:3f:8e:a4:9e:eb:bb:8a:b4:6a:37:49:0f:a9:6f:d0:a4:39: a8:fc:4d:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4SA+TWUxCtO134AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZjZlNWU4OWYtY2Y2Yy00ZjM4LTgwNmItZjI4NjIxNjA3NTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/EjULnTWNvHBd0W6RMy2dPpreM50+NleTgh WdBdTLfZeyMk5JLr8UvtELUZvp3o2RO30nliHKJ4yvDc6t3OPChB9+UGVQYtmkMr V5UMtNABtRZgJiQYrrDHM+pw6CCoz7vhCBvE7SP0chhEI3RKeZbgQZtqCKFhNkLv 57LtuKv8yTjjn6Y9M/bnluIhDDerGVTTaOFvsZLQQz8cATOHNlIwz8DK/IsUh2o6 LzVBPijjtEC9CgmN3d8jQBTcIUzDO1zSiVFVbYqEtfKBIgI+hTZlXhYDsrhSpRKn nFu3VoLDI2VrRy3rxOr+JVlvZ6sCFp+6fsBrEkCLhPevN5N8gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLr4wzbQFlUUn7SsCpYNoZ8rlKx1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjAxYWI4MmYtMmU0Mi0z NWYwLTkzNDctZjYxYTFlODQzN2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoijAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHa02o8FyWeIrIiC45QWxwmnhIDzlg3BqSt453JXA5zsfwT6maIxItM+ J13Wf2fLR8BF1G/4hcbxfhxSa7xb8Sc7vk3U/hr2YduRBor9CzBhGpMYfMwfT0d9 obJ3qL7sfEdAmzgpJpIQlWPZgbQs1MuaR/om+9yWmzJ1D45hLYZFUH/faO0JVXaJ ENeCh5dXj8DNnbHWoUJSI2Z94wFBbPxc7XnfWt4vvavbv4DK1S6y5oiMuChFmNkB jgUBxhNL3fTjMgQSKhGFWoTg+nq5CwSNbsade4seh20iZR+1PRsgjkokW0pkvdiA VYo/jqSe67uKtGo3SQ+pb9CkOaj8Tds= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:19 2025 by rpki-client