$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6689abb9-d89a-3872-a7bd-45f2bcb870d1.roa File: 6689abb9-d89a-3872-a7bd-45f2bcb870d1.roa (raw, json) Hash identifier: TNNr3m2QFjgjhxWbfM7XFkaMIcgx8oi/4qVWTOUgcV0= Subject key identifier: EA:EC:A8:FA:43:D4:4E:8B:65:D1:8F:FA:DE:4A:E9:C1:DB:20:C2:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F438A241B972227A04C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6689abb9-d89a-3872-a7bd-45f2bcb870d1.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 162.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f4:38:a2:41:b9:72:22:7a:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2d9412fd-d110-430b-9ff1-3ed2941f8002 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:44:a3:de:f1:1e:d9:7c:f5:87:a7:7c:bd:3e: 3a:08:9a:7c:6b:7e:6e:9e:66:14:0d:7b:1f:8d:2f: 99:05:d4:84:0b:3d:02:51:89:5f:e8:1f:77:04:02: 79:53:6c:b1:ee:86:a4:76:2c:5e:98:e1:30:ac:de: 0b:1f:66:cf:ac:75:cb:c4:a4:05:0d:80:c3:66:ff: 08:44:51:76:5d:62:21:2f:40:cd:6f:1e:6a:1c:6d: 9e:7d:59:3f:94:0e:10:95:87:d0:b2:0d:ad:8d:55: ab:0a:97:5c:13:51:98:d2:c5:f2:a4:49:1b:8e:0b: e2:56:e7:8e:4b:32:b7:72:e4:c2:b4:06:17:b6:c3: 70:a8:88:14:64:06:dc:a2:b6:4f:cf:4d:ea:9c:31: f3:72:98:d2:08:44:98:92:28:46:a5:5f:65:dd:aa: c9:3c:b4:e1:01:b7:af:bb:90:bd:b5:59:48:ea:b6: 5e:0e:57:53:6b:5d:ee:1d:95:bf:16:aa:ec:8d:ac: 7a:2d:bf:0f:e5:74:c9:b0:89:d3:e9:ad:49:56:7b: 79:8c:8c:d2:00:34:bb:80:7d:bf:21:dd:18:3f:26: 5b:cb:e6:58:c7:83:40:e6:52:ea:ac:37:cf:16:ba: 52:21:7f:40:71:e7:d8:35:cf:7e:fe:df:9e:bb:7c: a6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EC:A8:FA:43:D4:4E:8B:65:D1:8F:FA:DE:4A:E9:C1:DB:20:C2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6689abb9-d89a-3872-a7bd-45f2bcb870d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:be:8f:25:8a:33:5f:bf:a6:21:6b:12:5f:af:6e:84:69:13: 0c:fb:86:0f:71:b1:e3:5c:2b:b4:7d:42:73:10:c2:2e:35:b2: 78:65:4e:fc:68:d1:a1:f5:2f:3b:ff:dc:96:c9:ca:5e:23:39: 1a:b0:2f:1d:bb:52:4d:79:84:ff:ca:26:aa:4b:0a:a3:b6:5a: f8:0f:f8:c3:2b:f2:04:a1:d0:f6:93:43:54:93:38:15:7d:3d: ff:b0:65:8a:65:e1:b6:0d:70:3f:62:22:76:26:dd:fe:ff:61: e8:60:05:3a:07:f3:04:81:21:c5:cf:98:7c:b8:20:fa:56:1f: 9f:30:cb:ef:00:27:70:fa:71:e0:2d:c4:a8:49:09:47:28:e5: 6d:1d:d0:2a:62:d5:92:8a:a8:d3:f0:46:ef:06:d1:a2:0d:9d: a6:bd:c5:85:d6:b3:31:2e:97:0f:cb:6f:a7:59:58:61:24:78: f6:3d:6c:87:36:ed:fb:11:97:3e:d3:23:27:b3:10:a8:33:d9: e2:4a:4b:76:85:eb:eb:98:f0:9a:bb:ea:c9:56:dc:e2:0c:23: 24:a4:d1:69:ff:63:f6:e3:ad:e5:a4:87:96:ff:d6:6f:0f:16: 4e:57:ad:3e:b8:5b:e3:fd:f4:83:13:a3:84:22:8d:e4:67:89: 2d:ff:e3:fb -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSEPQ4okG5ciJ6BMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MmQ5NDEyZmQtZDExMC00MzBiLTlmZjEtM2VkMjk0MWY4MDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUSj3vEe2Xz1h6d8vT46CJp8a35unmYUDXsf jS+ZBdSECz0CUYlf6B93BAJ5U2yx7oakdixemOEwrN4LH2bPrHXLxKQFDYDDZv8I RFF2XWIhL0DNbx5qHG2efVk/lA4QlYfQsg2tjVWrCpdcE1GY0sXypEkbjgviVueO SzK3cuTCtAYXtsNwqIgUZAbcorZPz03qnDHzcpjSCESYkihGpV9l3arJPLThAbev u5C9tVlI6rZeDldTa13uHZW/Fqrsjax6Lb8P5XTJsInT6a1JVnt5jIzSADS7gH2/ Id0YPyZby+ZYx4NA5lLqrDfPFrpSIX9AcefYNc9+/t+eu3ymlQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFOrsqPpD1E6LZdGP+t5K6cHbIMINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjY4OWFiYjktZDg5YS0z ODcyLWE3YmQtNDVmMmJjYjg3MGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoigwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAd76PJYozX7+mIWsSX69uhGkTDPuGD3Gx41wrtH1CcxDCLjWyeGVO/GjR ofUvO//clsnKXiM5GrAvHbtSTXmE/8omqksKo7Za+A/4wyvyBKHQ9pNDVJM4FX09 /7BlimXhtg1wP2Iidibd/v9h6GAFOgfzBIEhxc+YfLgg+lYfnzDL7wAncPpx4C3E qEkJRyjlbR3QKmLVkoqo0/BG7wbRog2dpr3FhdazMS6XD8tvp1lYYSR49j1shzbt +xGXPtMjJ7MQqDPZ4kpLdoXr65jwmrvqyVbc4gwjJKTRaf9j9uOt5aSHlv/Wbw8W TletPrhb4/30gxOjhCKN5GeJLf/j+w== -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:29 2025 by rpki-client