$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa File: 7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa (raw, json) Hash identifier: BWRW7b0RwJC5StkLOhmLfZHM7iYBkMhMZPe4TfJ/3CM= Subject key identifier: 45:73:5B:1F:5F:86:23:FE:20:E4:5F:3B:FB:F6:00:04:92:9B:84:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21107115C43D3BEAC3D9100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 54682 IP address blocks: 74.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:07:11:5c:43:d3:be:ac:3d:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=ed61ce2f-f6cf-4899-a8eb-7539f704dc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:10:bb:65:59:22:96:6c:94:eb:cf:73:c3: 48:7b:cf:4e:11:6b:4e:f8:56:a7:a9:34:2c:a1:2d: f1:ad:42:9a:23:a5:76:8c:39:31:4a:a7:f9:eb:e5: f3:2f:40:87:6e:b2:da:8f:0a:76:dd:37:c4:1e:e6: fd:eb:ef:22:f5:c8:b3:b4:7d:6b:fa:45:2d:b2:1f: f1:34:10:da:0c:d7:31:92:fe:6a:8f:78:75:de:f3: 12:ee:49:73:c3:00:ba:a0:79:17:91:0d:12:1e:d7: e5:05:3f:93:14:54:5d:d5:62:50:e4:5d:e2:8a:56: df:f5:2f:62:30:51:48:b1:3a:0e:d8:61:2e:49:57: 7b:19:0d:a1:c8:24:46:53:ab:e1:d4:18:bf:49:20: b0:36:a1:f4:31:8f:00:90:02:b9:be:94:05:3d:27: 9c:ff:5a:89:98:f9:d2:63:5c:ee:46:87:21:3c:61: 29:cb:41:d7:ba:57:f5:fd:da:44:72:1a:28:09:ef: 35:db:ee:38:4d:fd:85:e4:f4:2a:15:a5:85:23:ff: 8d:c4:0f:ec:61:dd:ea:7f:8d:4b:87:8e:6f:cb:55: 0b:7b:97:1b:bf:82:c8:be:f9:4b:a5:3d:95:c2:1f: b4:3a:d2:0b:3b:86:10:de:f6:dc:81:51:50:05:c3: eb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:73:5B:1F:5F:86:23:FE:20:E4:5F:3B:FB:F6:00:04:92:9B:84:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:83:de:10:9f:86:95:05:08:07:36:be:66:86:60:16:58:8e: 22:e1:87:ce:9a:46:52:02:16:6a:80:4f:a7:48:e3:13:2f:71: cc:72:f2:6a:e2:a8:f3:58:db:57:e0:80:cc:bd:9f:be:8d:e7: d8:17:18:09:71:a9:83:53:fe:26:1a:20:2e:32:07:de:bd:d6: 03:7e:1b:c4:5d:6e:7e:2b:cc:4a:71:e4:d6:dc:e9:f5:cd:39: b8:f3:46:fe:f8:50:9b:6a:c0:50:7b:50:bc:d0:de:1d:2c:07: 37:5f:44:7b:22:b3:dc:f3:b5:08:e3:14:df:5c:13:12:f8:ad: ae:cd:8c:c2:63:c4:ca:d6:d1:61:07:66:d4:1d:97:86:a1:44: 73:f8:36:bd:99:0d:a7:30:1a:8a:24:52:4c:94:d7:d6:61:f6: c0:0a:91:85:9a:ee:00:f6:d4:b5:34:47:d8:69:8c:51:f5:ed: b6:6c:80:1f:44:df:2b:a4:26:11:9a:8a:f7:d2:b1:b9:8e:cb: d4:10:42:3c:4e:3f:58:cc:00:4f:8f:55:7f:37:0a:ab:6d:8e: 59:aa:71:7b:bf:0e:99:bb:06:07:28:3b:b1:63:0f:c0:a6:4d: d9:17:df:11:f8:1b:fa:c9:42:1b:95:f6:7f:14:c5:8a:3f:5b: aa:3a:1f:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQcRXEPTvqw9kQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ2MWNlMmYtZjZjZi00ODk5LWE4ZWItNzUzOWY3MDRkYzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVsQu2VZIpZslOvPc8NIe89OEWtO+FanqTQs oS3xrUKaI6V2jDkxSqf56+XzL0CHbrLajwp23TfEHub96+8i9ciztH1r+kUtsh/x NBDaDNcxkv5qj3h13vMS7klzwwC6oHkXkQ0SHtflBT+TFFRd1WJQ5F3iilbf9S9i MFFIsToO2GEuSVd7GQ2hyCRGU6vh1Bi/SSCwNqH0MY8AkAK5vpQFPSec/1qJmPnS Y1zuRochPGEpy0HXulf1/dpEchooCe812+44Tf2F5PQqFaWFI/+NxA/sYd3qf41L h45vy1ULe5cbv4LIvvlLpT2Vwh+0OtILO4YQ3vbcgVFQBcPrPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVzWx9fhiP+IORfO/v2AASSm4SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UyOGM0ZDYtZmNiNy0z MjQ0LWFkZGUtNzk4ZTA5NGEyZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmD3hCfhpUFCAc2vmaGYBZYjiLhh86aRlICFmqAT6dI4xMvccxy8mri qPNY21fggMy9n76N59gXGAlxqYNT/iYaIC4yB9691gN+G8Rdbn4rzEpx5Nbc6fXN ObjzRv74UJtqwFB7ULzQ3h0sBzdfRHsis9zztQjjFN9cExL4ra7NjMJjxMrW0WEH ZtQdl4ahRHP4Nr2ZDacwGookUkyU19Zh9sAKkYWa7gD21LU0R9hpjFH17bZsgB9E 3yukJhGaivfSsbmOy9QQQjxOP1jMAE+PVX83CqttjlmqcXu/Dpm7BgcoO7FjD8Cm TdkX3xH4G/rJQhuV9n8UxYo/W6o6H54= -----END CERTIFICATE-----Generated at Sun Feb 16 20:43:58 2025 by rpki-client