$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d7da212-adcb-3788-8401-b64192d2f926.roa File: 9d7da212-adcb-3788-8401-b64192d2f926.roa (raw, json) Hash identifier: sPZXHNiYGU8p0qDgrA6RYY6RowHNWUw612bjpGa8yUc= Subject key identifier: A2:60:89:DC:49:31:ED:76:CD:89:3F:FB:04:EE:53:63:0E:B3:FC:04 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210EB92251DA634FBE67978 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d7da212-adcb-3788-8401-b64192d2f926.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 65.23.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:eb:92:25:1d:a6:34:fb:e6:79:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=51856e4e-da32-45d5-9373-42516d802b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:b3:41:c3:7f:11:ca:1c:a8:56:0d:b2:59: 44:27:61:a6:a6:24:e3:00:5d:3a:e9:ec:04:58:17: e7:82:59:d3:18:31:5b:1c:a5:af:df:b4:de:9e:00: 8e:c0:97:a9:10:36:6a:aa:75:e5:c2:78:26:ee:bf: 37:73:09:6f:73:34:97:6a:24:45:50:ff:68:e7:9e: 5c:df:5c:0d:2c:8c:02:65:b4:9d:8c:8a:e8:c7:5a: 59:af:0a:3d:c6:7a:36:d5:89:ef:43:8d:62:a9:96: c2:c8:77:ff:68:d1:6a:68:7b:de:65:ad:f3:4e:5e: 88:4d:5f:29:77:34:aa:c0:05:7e:72:86:83:5b:43: 8c:f7:02:82:43:bb:92:38:4b:18:0d:83:95:f1:fc: 2c:06:82:21:76:c0:8d:fb:e0:bf:81:87:cc:13:45: 8f:61:4f:5b:f4:af:95:68:d3:6f:fc:e3:47:51:2e: 50:4b:84:81:71:e1:72:19:f0:6d:9a:32:aa:ff:44: 64:66:96:65:ba:98:19:c2:29:8b:0d:91:ab:b5:66: 98:ee:c6:67:87:c6:3a:23:3e:cd:f5:fa:15:e5:5f: 34:86:11:3b:83:d7:6e:76:a0:5f:46:2b:13:17:ab: 62:45:a9:c6:af:3c:b2:be:cb:4f:37:b9:f9:38:08: 40:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:60:89:DC:49:31:ED:76:CD:89:3F:FB:04:EE:53:63:0E:B3:FC:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9d7da212-adcb-3788-8401-b64192d2f926.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 65.23.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:78:66:ce:80:04:d3:99:b6:60:8b:9f:ed:03:51:c3:b8:31: ce:f9:62:58:28:8a:4b:a2:79:6c:f7:5e:9c:79:23:b2:5d:a5: 89:7f:b3:0d:26:43:3f:86:c4:18:84:e3:00:dd:31:ed:1e:e6: 7e:aa:14:66:5f:03:94:d6:bb:31:64:7d:c6:35:68:03:c1:cc: ad:ed:75:5f:c6:2a:7a:b2:58:b6:46:3b:2a:24:7a:51:a5:e0: 90:a4:f5:c8:b7:b1:dd:00:9d:01:e7:6f:43:0a:11:d6:93:18: 38:d7:27:7d:70:e3:8b:27:f6:c1:52:e0:24:cb:9b:a8:d7:9a: 14:0b:55:49:0f:e6:15:66:e3:48:68:13:6b:b1:30:44:e9:c8: f1:7e:0c:2d:fb:fc:2b:e8:f3:06:2c:c1:3e:3b:a8:1b:12:84: 81:e0:c8:98:0a:d0:27:a7:42:ac:dd:5a:60:1d:56:8a:9b:02: 4f:9c:ca:77:ec:fc:4e:61:1e:d2:9f:90:22:e2:7d:ce:9d:55: c3:4d:1e:ee:19:6e:e1:f4:59:ba:20:d3:8c:d1:2a:84:1f:d3: ae:ee:e9:9d:2d:81:48:0a:4a:29:8f:ba:7e:a9:d0:08:93:67: eb:ed:c3:27:40:39:d1:7a:aa:78:cc:27:cf:75:72:4a:9f:f2: d8:0a:41:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEOuSJR2mNPvmeXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NTE4NTZlNGUtZGEzMi00NWQ1LTkzNzMtNDI1MTZkODAyYjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyizQcN/EcocqFYNsllEJ2GmpiTjAF066ewE WBfnglnTGDFbHKWv37TengCOwJepEDZqqnXlwngm7r83cwlvczSXaiRFUP9o555c 31wNLIwCZbSdjIrox1pZrwo9xno21YnvQ41iqZbCyHf/aNFqaHveZa3zTl6ITV8p dzSqwAV+coaDW0OM9wKCQ7uSOEsYDYOV8fwsBoIhdsCN++C/gYfME0WPYU9b9K+V aNNv/ONHUS5QS4SBceFyGfBtmjKq/0RkZpZlupgZwimLDZGrtWaY7sZnh8Y6Iz7N 9foV5V80hhE7g9dudqBfRisTF6tiRanGrzyyvstPN7n5OAhA9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJgidxJMe12zYk/+wTuU2MOs/wEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWQ3ZGEyMTItYWRjYi0z Nzg4LTg0MDEtYjY0MTkyZDJmOTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQRdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd4Zs6ABNOZtmCLn+0DUcO4Mc75YlgoikuieWz3Xpx5I7JdpYl/sw0m Qz+GxBiE4wDdMe0e5n6qFGZfA5TWuzFkfcY1aAPBzK3tdV/GKnqyWLZGOyokelGl 4JCk9ci3sd0AnQHnb0MKEdaTGDjXJ31w44sn9sFS4CTLm6jXmhQLVUkP5hVm40ho E2uxMETpyPF+DC37/Cvo8wYswT47qBsShIHgyJgK0CenQqzdWmAdVoqbAk+cynfs /E5hHtKfkCLifc6dVcNNHu4ZbuH0Wbog04zRKoQf067u6Z0tgUgKSimPun6p0AiT Z+vtwydAOdF6qnjMJ891ckqf8tgKQeI= -----END CERTIFICATE-----Generated at Sun Apr 6 08:56:59 2025 by rpki-client