$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa File: 7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa (raw, json) Hash identifier: mipFaTRFXzwisQf+qzz8T4CrnkGXSHZGeS55tulkHkQ= Subject key identifier: A5:23:13:FB:76:71:88:51:2C:55:66:D8:98:C0:71:FD:99:67:F2:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE119ECABD2A569EDB2FC60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 71.30.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:19:ec:ab:d2:a5:69:ed:b2:fc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=eb26a774-a8ec-4958-acc5-75ad9d5fec5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f7:5c:d2:d0:c1:6f:f2:31:ba:96:5c:1a:3e: de:71:fa:26:ac:64:14:da:4f:d6:b3:65:bf:e2:4b: 07:9a:b0:66:64:46:c1:8b:5f:ba:9c:e1:e7:9f:df: 82:86:19:4a:be:de:a7:35:e8:48:0e:d6:75:6f:d2: 46:f5:78:52:0b:0d:a0:b0:ce:ab:bb:cc:b4:1b:db: a8:41:2c:f0:26:5d:2b:8c:08:43:c5:fc:31:01:62: 6a:03:35:e7:e1:52:ca:bb:e9:e4:7e:6a:24:e2:32: 04:63:f1:c5:4b:d0:e1:69:3f:89:29:f1:b5:2d:73: 21:bf:0e:4c:7a:a8:13:b0:9a:57:84:d7:bd:f5:cb: 73:b0:e4:f0:d9:cd:5c:07:4f:d5:4c:c8:8c:a8:f3: 82:72:15:38:af:5f:ea:10:c0:f9:1a:5d:43:e7:3a: 46:95:32:81:0f:73:2b:47:15:d2:fa:55:c3:e0:54: 44:7b:f4:4e:6c:b8:28:61:96:50:86:8f:2f:61:f7: fb:4f:11:c0:94:87:82:1f:cc:cc:28:90:a9:7f:c2: 1f:ae:2b:fd:93:56:c6:54:64:10:f4:74:aa:da:66: d3:a2:3d:af:7b:2c:cd:bd:50:ea:f2:f1:53:17:c4: 19:e8:ba:5c:4d:0d:64:19:7b:78:6a:f1:7a:16:6e: 0b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:23:13:FB:76:71:88:51:2C:55:66:D8:98:C0:71:FD:99:67:F2:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7a9ac8f4-97e9-3f75-a57f-0d08d5538632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:b5:9d:31:be:ec:57:47:8d:9c:3e:27:9a:ca:08:17:77:f5: 59:19:fb:5b:c2:b7:18:63:cc:03:8e:e0:de:7f:0a:94:b9:d4: c5:b2:61:b4:bc:d1:e1:10:d6:47:4f:a1:80:c5:f4:a2:17:96: 67:ce:c1:38:fe:cf:b3:23:0c:ee:2c:ed:39:c0:3a:81:bf:72: 22:8e:93:6b:84:e4:0e:41:80:a9:32:c7:7d:1e:a5:31:0d:4d: e6:6b:9b:83:44:fd:a6:55:46:d3:bb:f2:5e:4c:1c:37:6a:e7: b0:b5:fd:cb:f0:5f:ea:9c:21:74:15:b7:e8:9c:5e:5c:8e:03: bb:79:5f:ad:ad:e4:f2:58:28:be:3e:de:50:49:8a:2c:d3:c8: 24:51:98:e7:39:91:8b:da:6b:d6:c1:2e:f5:90:b1:db:d5:62: d3:ac:e0:c4:b2:ba:f4:9b:5f:9b:8a:00:3f:94:ec:bd:b7:85: 82:bf:aa:0c:a6:b3:23:bd:96:c4:79:80:a1:0c:5f:52:7d:cf: 48:52:63:21:34:a4:d6:e7:6c:0a:30:a8:1c:42:68:f8:66:56: 44:cb:08:3d:6f:1f:15:b8:ac:5c:c1:aa:7e:ef:ca:b7:5f:ee: d6:37:fb:f7:30:b8:b6:cd:51:27:cc:80:1a:77:b2:0f:9a:93: 06:34:53:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4Rnsq9Klae2y/GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZWIyNmE3NzQtYThlYy00OTU4LWFjYzUtNzVhZDlkNWZlYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/dc0tDBb/IxupZcGj7ecfomrGQU2k/Ws2W/ 4ksHmrBmZEbBi1+6nOHnn9+ChhlKvt6nNehIDtZ1b9JG9XhSCw2gsM6ru8y0G9uo QSzwJl0rjAhDxfwxAWJqAzXn4VLKu+nkfmok4jIEY/HFS9DhaT+JKfG1LXMhvw5M eqgTsJpXhNe99ctzsOTw2c1cB0/VTMiMqPOCchU4r1/qEMD5Gl1D5zpGlTKBD3Mr RxXS+lXD4FREe/RObLgoYZZQho8vYff7TxHAlIeCH8zMKJCpf8Ifriv9k1bGVGQQ 9HSq2mbToj2veyzNvVDq8vFTF8QZ6LpcTQ1kGXt4avF6Fm4L0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUjE/t2cYhRLFVm2JjAcf2ZZ/JAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2E5YWM4ZjQtOTdlOS0z Zjc1LWE1N2YtMGQwOGQ1NTM4NjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi1nTG+7FdHjZw+J5rKCBd39VkZ+1vCtxhjzAOO4N5/CpS51MWyYbS8 0eEQ1kdPoYDF9KIXlmfOwTj+z7MjDO4s7TnAOoG/ciKOk2uE5A5BgKkyx30epTEN TeZrm4NE/aZVRtO78l5MHDdq57C1/cvwX+qcIXQVt+icXlyOA7t5X62t5PJYKL4+ 3lBJiizTyCRRmOc5kYvaa9bBLvWQsdvVYtOs4MSyuvSbX5uKAD+U7L23hYK/qgym syO9lsR5gKEMX1J9z0hSYyE0pNbnbAowqBxCaPhmVkTLCD1vHxW4rFzBqn7vyrdf 7tY3+/cwuLbNUSfMgBp3sg+akwY0U1Q= -----END CERTIFICATE-----Generated at Sat Apr 5 22:38:16 2025 by rpki-client