$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ec35253-fae3-31b5-8251-ff663b8b8790.roa File: 8ec35253-fae3-31b5-8251-ff663b8b8790.roa (raw, json) Hash identifier: QXpBtI1jsOtdb1ceWdd6e767PWQiB0ewuEqwJRYjMX4= Subject key identifier: 4E:48:63:F9:B8:BA:6C:E7:C5:DE:72:6E:A2:9B:55:79:FC:25:B1:9E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA7101ACC4984E562B0F8480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ec35253-fae3-31b5-8251-ff663b8b8790.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 75.117.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:01:ac:c4:98:4e:56:2b:0f:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=41481a10-635f-4dd2-a5b3-b16e91e20850 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:99:6d:80:ab:6c:f3:f8:13:6e:07:4f:3b:61: e6:56:04:9b:f4:16:30:36:d3:08:7b:f9:ac:67:3f: 45:d7:04:a0:79:9a:bf:04:e5:a1:7f:d6:3a:8a:c3: 97:89:8f:ef:a6:ab:69:38:5a:d6:69:4f:f0:6e:02: 45:b3:17:e2:05:97:7c:19:ed:76:dc:7f:09:03:48: 7e:6f:66:62:fd:e2:0e:99:b4:cb:77:dd:6e:17:ec: 4b:36:0d:80:94:21:2f:c6:6b:b2:9f:20:3a:2a:f7: e2:9d:58:1a:54:c3:c1:7a:d5:41:fc:4c:21:df:91: 7a:e6:75:fb:70:e1:e6:d6:06:52:18:59:45:ca:bb: 16:17:76:04:51:df:66:1c:51:f4:e5:77:62:56:0f: 6f:73:bb:f4:74:a8:78:54:af:7c:09:ec:f5:db:5f: 30:39:7f:89:38:e3:64:74:7d:2d:19:ff:49:01:42: a0:a8:3c:80:fd:91:74:72:15:45:7c:e8:9b:1f:41: 07:3b:86:05:4b:06:d4:c2:8c:d4:41:f6:65:d3:58: 96:db:8a:1e:c3:4d:88:4c:d4:cd:a7:29:74:2e:d8: e7:36:27:9c:ea:c5:6f:0b:59:0b:db:3e:ef:16:44: cb:bc:d0:d3:42:32:7e:e1:fd:2d:98:f2:a1:9f:2a: 3a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:48:63:F9:B8:BA:6C:E7:C5:DE:72:6E:A2:9B:55:79:FC:25:B1:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8ec35253-fae3-31b5-8251-ff663b8b8790.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 75.117.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:af:bc:c9:df:07:e7:fd:f8:ff:2c:87:77:80:34:7e:c3:c3: a4:40:bc:fc:d7:dd:1c:b7:fb:00:48:1e:82:07:b8:df:dd:c7: e7:04:0b:dc:56:79:9f:ae:95:35:d4:7a:d0:f6:46:de:39:3e: ed:84:9e:86:a2:05:ff:54:1b:cc:1c:a7:2a:22:22:00:f9:d5: 04:2c:50:26:05:cd:aa:f8:6a:f3:65:c5:45:d1:5e:62:c7:15: c4:5c:6d:92:06:b2:9d:35:ac:9c:67:e7:df:df:74:5d:ba:3c: ee:df:6e:24:22:56:d8:8b:48:7e:91:c9:72:8a:f8:38:42:73: a9:c9:c5:64:52:c8:dd:c2:58:a7:5a:3f:85:38:b0:e2:98:4c: 46:21:43:09:02:8b:8a:f1:34:18:45:14:15:cc:88:86:1b:5d: 4a:d8:3e:cd:48:e9:c1:63:d9:3a:8b:80:13:8b:55:0c:d7:64: 88:91:5c:6e:9e:70:b3:1c:d2:12:83:3a:3f:88:bd:10:b8:6d: e7:4f:cd:6f:06:8a:7b:20:81:ea:cf:fa:1c:8d:21:c4:68:e2: b4:40:ce:e7:78:78:38:a5:44:01:70:35:20:1c:33:26:20:b6: 5a:25:c8:8f:dd:2d:dd:57:1f:aa:bc:c2:b1:b7:18:7d:6f:80: 68:43:a9:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQGsxJhOVisPhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk NDE0ODFhMTAtNjM1Zi00ZGQyLWE1YjMtYjE2ZTkxZTIwODUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ltgKts8/gTbgdPO2HmVgSb9BYwNtMIe/ms Zz9F1wSgeZq/BOWhf9Y6isOXiY/vpqtpOFrWaU/wbgJFsxfiBZd8Ge123H8JA0h+ b2Zi/eIOmbTLd91uF+xLNg2AlCEvxmuynyA6KvfinVgaVMPBetVB/Ewh35F65nX7 cOHm1gZSGFlFyrsWF3YEUd9mHFH05XdiVg9vc7v0dKh4VK98Cez1218wOX+JOONk dH0tGf9JAUKgqDyA/ZF0chVFfOibH0EHO4YFSwbUwozUQfZl01iW24oew02ITNTN pyl0LtjnNiec6sVvC1kL2z7vFkTLvNDTQjJ+4f0tmPKhnyo6YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5IY/m4umznxd5ybqKbVXn8JbGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGVjMzUyNTMtZmFlMy0z MWI1LTgyNTEtZmY2NjNiOGI4NzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDS3VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6vvMnfB+f9+P8sh3eANH7Dw6RAvPzX3Ry3+wBIHoIHuN/dx+cEC9xW eZ+ulTXUetD2Rt45Pu2EnoaiBf9UG8wcpyoiIgD51QQsUCYFzar4avNlxUXRXmLH FcRcbZIGsp01rJxn59/fdF26PO7fbiQiVtiLSH6RyXKK+DhCc6nJxWRSyN3CWKda P4U4sOKYTEYhQwkCi4rxNBhFFBXMiIYbXUrYPs1I6cFj2TqLgBOLVQzXZIiRXG6e cLMc0hKDOj+IvRC4bedPzW8GinsggerP+hyNIcRo4rRAzud4eDilRAFwNSAcMyYg tlolyI/dLd1XH6q8wrG3GH1vgGhDqVw= -----END CERTIFICATE-----Generated at Sat Apr 5 18:41:35 2025 by rpki-client