$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8eb76a58-1df4-3fdc-ae1b-51884e4db3a4.roa File: 8eb76a58-1df4-3fdc-ae1b-51884e4db3a4.roa (raw, json) Hash identifier: i/NkERvd5rw4BdCRzUlBwQqMyQVaxUbKUuutVc0/W0Q= Subject key identifier: C9:0A:AE:F4:05:D4:CA:AF:DC:82:8A:46:B6:32:52:E9:B0:C5:0F:63 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584960541357AECA256306A4B500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8eb76a58-1df4-3fdc-ae1b-51884e4db3a4.roa Signing time: Tue 01 Apr 2025 01:00:47 +0000 ROA not before: Tue 01 Apr 2025 01:00:47 +0000 ROA not after: Mon 30 Jun 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.119.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:60:54:13:57:ae:ca:25:63:06:a4:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 1 01:00:47 2025 GMT Not After : Jun 30 01:00:47 2025 GMT Subject: CN=5e59f31c-e176-4575-95d1-3fbda27e3ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9d:7d:80:36:a2:64:99:89:88:7a:54:d8:01: a3:2d:a4:18:5b:91:26:68:68:bb:b4:af:a9:67:62: e2:79:5b:68:97:ee:ea:65:d7:b6:ab:65:64:e9:e3: 50:ff:91:62:d9:80:9d:8e:4b:e1:89:e8:2a:55:95: 4f:5c:f8:db:41:b9:99:70:33:f4:80:45:39:6f:f0: c5:61:fb:80:12:fd:98:b5:7f:21:3c:0f:8c:13:e8: a0:cd:30:ee:47:db:52:62:a4:37:95:13:ad:98:67: 1e:43:e6:a7:d9:e2:fc:ba:1c:4d:a4:4a:cc:4f:42: 2e:b7:46:83:e4:c1:f8:bf:6c:7a:a2:10:d2:0c:f9: 24:36:89:d4:ff:3b:65:59:fc:b5:66:91:51:7b:ba: 38:ca:4f:ac:e0:e3:c0:88:2e:51:27:d3:8b:f3:9f: 39:50:cb:fe:2f:d7:d5:3d:1c:2f:ca:1d:2d:a9:51: 40:9b:17:d3:ef:58:92:35:0b:ec:cd:c3:58:25:fd: 96:2b:b1:d0:57:09:90:b7:1f:9c:d7:fa:00:d7:92: 16:7b:5a:79:9c:ae:f1:01:7f:59:f9:90:a1:9e:15: 55:e3:a3:1d:1c:e7:7a:d0:6e:15:89:50:7e:1f:8e: f7:22:65:26:d9:e7:19:0a:55:2f:4b:af:76:65:aa: 6d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:AE:F4:05:D4:CA:AF:DC:82:8A:46:B6:32:52:E9:B0:C5:0F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8eb76a58-1df4-3fdc-ae1b-51884e4db3a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.119.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:16:f8:2b:a3:c6:04:f5:c0:8f:db:9e:78:bc:1d:47:0e:fe: 00:67:fd:d7:77:84:e3:22:14:16:a0:7d:74:1c:15:f8:3b:18: cf:fd:db:1d:18:bf:5c:fc:4f:51:26:f3:af:5f:eb:9b:19:ba: 28:b2:7e:06:e3:e1:20:14:ff:c0:54:1e:3b:5f:11:ec:a2:2f: ff:33:49:8a:2b:65:04:b2:0f:65:28:d3:af:0a:3e:dd:61:36: 3a:f0:7d:67:d0:a3:18:9d:92:34:72:51:3d:d2:5e:61:71:82: 12:6f:8f:7b:87:21:8a:6f:9b:9c:09:29:76:4e:7f:9a:0c:c7: f3:87:e3:1d:91:24:6a:e6:ed:88:17:e5:5f:f5:2e:7c:03:d8: 86:10:da:a0:2b:65:53:7a:e3:9c:9f:c3:c0:d1:80:3e:4e:29: ed:b5:11:07:72:40:bd:7a:e0:6a:ab:3e:20:55:19:82:c9:fc: c9:10:ca:75:8c:79:3c:20:4f:e8:61:ce:89:12:f1:70:18:52: 21:8d:5c:6a:8e:30:5e:f5:7b:9a:1a:b4:c6:ae:cc:c9:13:8f: 24:42:f8:5b:36:eb:5d:25:a1:32:2a:9c:01:b1:bb:6b:42:28: f6:72:a5:f7:6b:75:53:2a:cf:a7:6a:c3:18:94:3a:d5:49:bd: 8a:37:ee:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBNXrsolYwaktQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk NWU1OWYzMWMtZTE3Ni00NTc1LTk1ZDEtM2ZiZGEyN2UzYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlp19gDaiZJmJiHpU2AGjLaQYW5EmaGi7tK+p Z2LieVtol+7qZde2q2Vk6eNQ/5Fi2YCdjkvhiegqVZVPXPjbQbmZcDP0gEU5b/DF YfuAEv2YtX8hPA+ME+igzTDuR9tSYqQ3lROtmGceQ+an2eL8uhxNpErMT0Iut0aD 5MH4v2x6ohDSDPkkNonU/ztlWfy1ZpFRe7o4yk+s4OPAiC5RJ9OL8585UMv+L9fV PRwvyh0tqVFAmxfT71iSNQvszcNYJf2WK7HQVwmQtx+c1/oA15IWe1p5nK7xAX9Z +ZChnhVV46MdHOd60G4ViVB+H473ImUm2ecZClUvS692ZaptiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkKrvQF1Mqv3IKKRrYyUumwxQ9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGViNzZhNTgtMWRmNC0z ZmRjLWFlMWItNTE4ODRlNGRiM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2HfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMW+CujxgT1wI/bnni8HUcO/gBn/dd3hOMiFBagfXQcFfg7GM/92x0Y v1z8T1Em869f65sZuiiyfgbj4SAU/8BUHjtfEeyiL/8zSYorZQSyD2Uo068KPt1h NjrwfWfQoxidkjRyUT3SXmFxghJvj3uHIYpvm5wJKXZOf5oMx/OH4x2RJGrm7YgX 5V/1LnwD2IYQ2qArZVN645yfw8DRgD5OKe21EQdyQL164GqrPiBVGYLJ/MkQynWM eTwgT+hhzokS8XAYUiGNXGqOMF71e5oatMauzMkTjyRC+Fs2610loTIqnAGxu2tC KPZypfdrdVMqz6dqwxiUOtVJvYo37vY= -----END CERTIFICATE-----Generated at Wed Apr 9 17:17:25 2025 by rpki-client