$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa File: 75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa (raw, json) Hash identifier: yyJUnnuav7ZN/rZxQJ/2FKF9D3cK5FIISFCNq/Ik3NU= Subject key identifier: E1:A2:EE:45:E1:8B:E6:A9:36:09:04:D5:88:2A:D3:55:CB:84:6A:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABBFB4F904D9AA407F4F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 174.130.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bf:b4:f9:04:d9:aa:40:7f:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=67245508-7259-4e45-95d0-801e224804f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:51:09:f2:d8:5d:95:1b:11:0b:6b:f5:a1: 2f:82:25:25:30:e9:77:34:25:29:d3:ba:47:56:0d: af:e4:4d:2f:54:af:f7:04:82:07:40:bd:22:4a:ab: 0a:a3:b9:b2:57:0d:01:4a:3f:3f:14:c7:f0:1f:4c: 36:b7:1a:c6:f9:c1:44:3e:03:3c:42:99:61:ee:cf: 11:ea:c1:db:e6:44:fb:fb:ae:df:73:48:6d:b2:7b: 2f:a1:15:1f:d1:01:9b:85:e2:f4:3a:3b:fc:26:0a: 26:81:1f:a6:fa:70:4e:a2:f0:53:a7:c0:a6:53:8b: ac:44:1b:5d:b5:06:28:8a:61:e2:06:fc:0b:df:f4: cb:79:08:d5:4d:ee:6c:c9:29:26:d3:b9:8d:96:7d: 51:7b:9d:26:ed:fb:fa:f9:c6:32:d0:25:54:69:df: f5:55:32:a6:f4:e1:a8:0a:f5:a9:69:19:9a:cf:29: f3:f0:f5:5c:61:8f:84:68:7e:89:5c:7c:21:e3:2a: b1:a0:67:13:23:8d:c3:49:ed:ea:1f:e6:87:7d:1a: 6b:40:49:95:58:0c:d8:f7:8c:87:5e:87:29:9f:18: 00:5d:a5:d2:6d:04:4d:78:33:e2:8f:39:4c:ea:53: ae:d3:38:c5:e1:c2:b5:f9:87:08:7f:5f:38:1b:31: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A2:EE:45:E1:8B:E6:A9:36:09:04:D5:88:2A:D3:55:CB:84:6A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/75bbd339-78b1-3e3f-b5ca-a2cad6c555e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:82:f3:d0:60:08:41:88:77:11:ad:7d:f0:6d:b7:d9:53:a9: b5:f3:70:f4:78:23:59:3b:56:b4:49:14:6d:c3:70:37:4f:52: d0:dc:0f:7d:50:de:60:b5:13:60:d8:3b:c2:e1:72:b9:8e:a1: 52:c4:11:c5:57:e6:ef:65:9b:85:bd:09:31:b6:b2:17:de:7d: e3:15:8e:bb:59:ce:09:d2:bb:eb:b7:ab:93:90:91:41:0b:34: ee:9a:06:00:b5:21:41:ce:1b:e7:7e:a6:dc:53:0d:42:c3:7a: f8:17:67:1c:54:ce:76:59:42:52:a5:c5:8d:c6:70:25:22:cb: 53:d8:38:af:5b:4f:4a:ae:d7:da:2e:53:75:67:19:89:70:82: 24:dd:93:e3:11:15:c4:5b:12:ce:98:d4:bb:86:51:79:c0:04: 76:da:96:9a:98:ce:cf:14:e3:c5:3b:51:7e:5d:07:e4:f8:fd: 7e:eb:c9:d7:85:4e:08:eb:6d:fe:64:2d:c0:55:a7:c8:bc:e6: 0f:69:ec:59:25:35:e0:e5:cc:a6:3d:60:0a:3b:ef:06:5f:1d: 9f:e0:26:e9:85:9b:e5:74:0e:ed:e7:69:24:38:89:96:5d:9b: 3c:63:be:03:88:f0:ea:0b:ff:48:02:0e:61:41:c5:f0:b6:ee: 8d:31:08:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7+0+QTZqkB/T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NjcyNDU1MDgtNzI1OS00ZTQ1LTk1ZDAtODAxZTIyNDgwNGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAtRCfLYXZUbEQtr9aEvgiUlMOl3NCUp07pH Vg2v5E0vVK/3BIIHQL0iSqsKo7myVw0BSj8/FMfwH0w2txrG+cFEPgM8Qplh7s8R 6sHb5kT7+67fc0htsnsvoRUf0QGbheL0Ojv8JgomgR+m+nBOovBTp8CmU4usRBtd tQYoimHiBvwL3/TLeQjVTe5sySkm07mNln1Re50m7fv6+cYy0CVUad/1VTKm9OGo CvWpaRmazynz8PVcYY+EaH6JXHwh4yqxoGcTI43DSe3qH+aHfRprQEmVWAzY94yH XocpnxgAXaXSbQRNeDPijzlM6lOu0zjF4cK1+YcIf184GzEDBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGi7kXhi+apNgkE1Ygq01XLhGp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzViYmQzMzktNzhiMS0z ZTNmLWI1Y2EtYTJjYWQ2YzU1NWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiC89BgCEGIdxGtffBtt9lTqbXzcPR4I1k7VrRJFG3DcDdPUtDcD31Q 3mC1E2DYO8LhcrmOoVLEEcVX5u9lm4W9CTG2shfefeMVjrtZzgnSu+u3q5OQkUEL NO6aBgC1IUHOG+d+ptxTDULDevgXZxxUznZZQlKlxY3GcCUiy1PYOK9bT0qu19ou U3VnGYlwgiTdk+MRFcRbEs6Y1LuGUXnABHbalpqYzs8U48U7UX5dB+T4/X7rydeF Tgjrbf5kLcBVp8i85g9p7FklNeDlzKY9YAo77wZfHZ/gJumFm+V0Du3naSQ4iZZd mzxjvgOI8OoL/0gCDmFBxfC27o0xCLg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:08 2025 by rpki-client