$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa File: 99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa (raw, json) Hash identifier: MNl3wOVvp/5vFNb1LNFMwVIm4e/6GUEAF91O7XyLgR0= Subject key identifier: 76:57:EA:68:97:72:9C:F2:FE:50:8F:DA:D7:0C:C0:6D:44:1F:CA:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584968B42BF98DCFF3BDD202A700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 27338 IP address blocks: 74.8.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:2b:f9:8d:cf:f3:bd:d2:02:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=ef484482-b7b5-4ce3-8b42-c34adae0a902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:59:4b:5e:5d:6d:74:d8:24:96:dc:c9:f1:5c: cc:43:f7:c8:0f:2a:0f:db:52:29:67:c7:bd:d2:09: 04:a4:42:db:a2:c9:c8:c1:29:36:1c:d5:07:cd:5d: 90:86:f3:2a:75:d1:af:76:3c:8d:53:14:50:a2:81: 03:90:fd:e1:32:47:46:40:9d:ce:5b:f6:eb:95:a5: 29:f0:58:b0:5f:ca:68:a0:95:4f:ab:02:15:96:2e: 30:ad:ff:62:1f:7d:5d:d2:db:66:45:a8:0a:46:dd: 95:02:06:ee:f0:a1:b7:df:45:a4:03:54:ce:1e:5d: 3b:bb:cd:64:08:a3:ea:e6:8c:a0:2a:2b:75:7d:fc: d0:01:77:8f:f0:2d:70:08:34:ea:95:35:3d:5a:4b: bc:a9:e6:eb:66:34:76:e1:7d:ef:47:30:15:f9:e8: b7:60:cc:56:df:38:2b:f1:20:f9:3c:1a:94:92:b8: ce:f8:0f:b2:c2:82:33:ca:ec:2c:ba:1e:2f:d3:69: de:ad:1c:31:7d:04:99:65:e7:db:0b:6b:83:f6:b7: f2:a6:57:43:93:e9:3c:72:ac:64:22:19:ea:58:43: e6:19:5d:eb:23:61:94:aa:17:b2:ea:9c:14:a0:a9: 58:0b:a9:fd:df:c2:f5:03:c6:2d:07:12:d5:30:cc: f4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:57:EA:68:97:72:9C:F2:FE:50:8F:DA:D7:0C:C0:6D:44:1F:CA:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/99ba8f0c-ae4b-39ce-ad7b-1811926fb054.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bb:7b:28:b9:53:3c:1b:55:bf:74:97:b0:b0:a7:d3:a1:88: 92:6c:98:8e:cd:2e:99:e6:51:38:8e:89:a5:c7:73:87:d9:88: ed:65:cc:49:25:f2:7c:c5:3d:0c:b3:f1:d6:3b:2e:2e:61:c5: cd:80:e8:c1:68:b4:b5:70:d2:f3:04:01:16:85:99:d0:60:f7: 47:99:6d:46:08:0b:fd:d9:90:df:2c:85:37:2d:6b:b5:71:80: 9b:7b:80:4d:7e:4b:61:9a:c0:38:fb:a9:07:00:7f:3f:4c:bc: bf:46:cf:49:82:e7:a8:83:7a:b6:70:4a:05:5a:1f:6f:83:d3: 9c:d0:75:bc:d5:f5:69:0c:94:e8:e5:57:25:00:28:e4:2e:b9: 76:24:f7:7d:06:9a:c3:dc:21:f9:3b:f3:6f:4d:b9:e2:95:3e: 45:eb:06:27:28:40:7a:6c:07:3a:6a:73:f0:ea:38:55:82:d5: 79:b9:0c:2f:a2:2b:c5:19:95:b1:bc:64:8b:ae:43:45:22:b6: bc:37:1e:76:28:c2:dd:74:8f:e3:7c:3c:f9:74:49:3b:96:ea: 1c:5a:e1:93:86:5e:31:28:df:93:79:36:22:98:99:3a:ca:c2: 12:6f:24:3e:b3:8a:28:6b:f5:91:0d:06:6a:3e:23:a3:1b:51: 55:f3:99:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCv5jc/zvdICpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk ZWY0ODQ0ODItYjdiNS00Y2UzLThiNDItYzM0YWRhZTBhOTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVlLXl1tdNgkltzJ8VzMQ/fIDyoP21IpZ8e9 0gkEpELbosnIwSk2HNUHzV2QhvMqddGvdjyNUxRQooEDkP3hMkdGQJ3OW/brlaUp 8FiwX8pooJVPqwIVli4wrf9iH31d0ttmRagKRt2VAgbu8KG330WkA1TOHl07u81k CKPq5oygKit1ffzQAXeP8C1wCDTqlTU9Wku8qebrZjR24X3vRzAV+ei3YMxW3zgr 8SD5PBqUkrjO+A+ywoIzyuwsuh4v02nerRwxfQSZZefbC2uD9rfypldDk+k8cqxk IhnqWEPmGV3rI2GUqhey6pwUoKlYC6n938L1A8YtBxLVMMz0hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZX6miXcpzy/lCP2tcMwG1EH8rqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTliYThmMGMtYWU0Yi0z OWNlLWFkN2ItMTgxMTkyNmZiMDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+7eyi5UzwbVb90l7Cwp9OhiJJsmI7NLpnmUTiOiaXHc4fZiO1lzEkl 8nzFPQyz8dY7Li5hxc2A6MFotLVw0vMEARaFmdBg90eZbUYIC/3ZkN8shTcta7Vx gJt7gE1+S2GawDj7qQcAfz9MvL9Gz0mC56iDerZwSgVaH2+D05zQdbzV9WkMlOjl VyUAKOQuuXYk930GmsPcIfk7829NueKVPkXrBicoQHpsBzpqc/DqOFWC1Xm5DC+i K8UZlbG8ZIuuQ0Uitrw3HnYowt10j+N8PPl0STuW6hxa4ZOGXjEo35N5NiKYmTrK whJvJD6ziihr9ZENBmo+I6MbUVXzmbU= -----END CERTIFICATE-----Generated at Mon Apr 7 12:01:01 2025 by rpki-client