$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6fe6e5e-d601-34ed-a099-aba532cbd9a9.roa File: a6fe6e5e-d601-34ed-a099-aba532cbd9a9.roa (raw, json) Hash identifier: 4i6J7ZlhA2Ecsv8rxZ9YEOT+rGHYT4ANHXPWs2XWhU4= Subject key identifier: 2B:5D:7F:73:B5:2E:A4:B4:87:F7:CF:81:F6:4D:FA:60:43:26:56:97 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112464E3F4DBC5DCA8D390 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6fe6e5e-d601-34ed-a099-aba532cbd9a9.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 199.96.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:24:64:e3:f4:db:c5:dc:a8:d3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2a4828e9-1b6c-47e2-9a80-f5242bd5e006 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b2:af:08:dc:16:1b:28:2f:c5:8e:c5:d2:98: 18:72:e1:8e:e5:7a:9e:b6:11:65:f3:db:0d:ba:94: cd:48:7b:22:93:4b:e3:85:54:ff:07:2e:8f:65:8b: 46:12:f4:2c:13:9d:11:63:35:0f:c5:ed:a5:d0:a8: 1a:1b:be:03:94:a2:92:18:64:9c:fa:c8:96:12:51: 4a:54:96:b1:9e:83:cb:7a:de:9f:5e:b1:c2:e0:07: 59:8c:99:46:62:21:69:56:1d:44:d7:fc:ea:97:24: d9:00:84:73:d4:bf:25:ab:0e:da:96:00:12:1f:44: 40:57:f6:2e:c3:bc:b4:41:f3:3a:dc:eb:17:76:d1: a5:50:59:28:b4:31:4c:b7:0c:5c:61:6a:05:89:d8: db:21:d4:31:ac:1d:67:67:7b:9d:77:74:30:69:82: e8:16:ee:ba:ae:e5:6e:cb:bf:ed:92:8d:6b:3a:7f: c4:ff:9e:8a:5c:d0:92:de:9a:cc:3e:ea:0e:63:f8: b6:73:67:44:17:f7:10:47:67:f0:9a:9c:86:a5:96: 8d:71:e3:0d:50:28:3c:b6:89:a2:58:b3:27:43:51: a4:e2:e4:18:c4:df:e7:3c:1c:aa:c2:a9:2c:f7:d7: 7d:13:92:a2:f9:35:b7:a2:ab:65:b4:78:d8:c7:11: 3f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:5D:7F:73:B5:2E:A4:B4:87:F7:CF:81:F6:4D:FA:60:43:26:56:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a6fe6e5e-d601-34ed-a099-aba532cbd9a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.96.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4b:d0:a9:f2:f0:27:8f:89:67:c0:0d:bf:13:87:96:88:95: 9c:1d:3b:75:ae:e2:f9:0d:83:ed:86:89:05:dd:0f:f6:b9:80: 92:35:9f:8c:8f:89:fe:1c:d0:50:ee:9f:ca:fd:97:27:71:68: f4:21:c6:6c:bd:51:06:b3:1a:85:21:27:e7:00:8a:2e:25:22: f4:87:3d:22:7b:2d:41:6d:5d:ee:da:14:cf:32:de:b8:46:89: 64:64:95:a2:44:d0:90:c5:28:ca:34:c4:fa:9c:f8:cf:98:68: 32:26:e7:ac:fb:f4:b4:7d:51:e6:3a:28:00:86:a4:3e:c3:d1: a9:02:73:f1:c1:36:67:d4:8e:aa:3d:44:86:b0:43:a3:5b:85: 82:96:c4:df:0a:af:ec:5e:5f:56:3f:a7:59:9b:4e:53:57:ab: 05:52:39:b8:ad:0b:5f:17:3b:54:dd:3a:f3:dc:0f:d2:38:9c: 56:b5:ec:f0:2b:58:ac:3a:07:b2:c6:c6:22:53:c2:3e:20:1c: fa:94:0e:2b:49:d3:d6:82:9f:79:55:d3:6f:9a:14:42:fe:a1: 75:93:89:58:28:da:d0:04:f0:7a:b3:b6:60:53:50:13:c8:fa: d1:6e:50:6e:db:97:34:ee:6c:f9:4a:e6:83:aa:d3:b2:d7:0d: 11:0b:d0:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESRk4/Tbxdyo05AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MmE0ODI4ZTktMWI2Yy00N2UyLTlhODAtZjUyNDJiZDVlMDA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7KvCNwWGygvxY7F0pgYcuGO5XqethFl89sN upTNSHsik0vjhVT/By6PZYtGEvQsE50RYzUPxe2l0KgaG74DlKKSGGSc+siWElFK VJaxnoPLet6fXrHC4AdZjJlGYiFpVh1E1/zqlyTZAIRz1L8lqw7algASH0RAV/Yu w7y0QfM63OsXdtGlUFkotDFMtwxcYWoFidjbIdQxrB1nZ3udd3QwaYLoFu66ruVu y7/tko1rOn/E/56KXNCS3prMPuoOY/i2c2dEF/cQR2fwmpyGpZaNceMNUCg8tomi WLMnQ1Gk4uQYxN/nPByqwqks99d9E5Ki+TW3oqtltHjYxxE/twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtdf3O1LqS0h/fPgfZN+mBDJlaXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTZmZTZlNWUtZDYwMS0z NGVkLWEwOTktYWJhNTMyY2JkOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx2CQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZL0Kny8CePiWfADb8Th5aIlZwdO3Wu4vkNg+2GiQXdD/a5gJI1n4yP if4c0FDun8r9lydxaPQhxmy9UQazGoUhJ+cAii4lIvSHPSJ7LUFtXe7aFM8y3rhG iWRklaJE0JDFKMo0xPqc+M+YaDIm56z79LR9UeY6KACGpD7D0akCc/HBNmfUjqo9 RIawQ6NbhYKWxN8Kr+xeX1Y/p1mbTlNXqwVSObitC18XO1TdOvPcD9I4nFa17PAr WKw6B7LGxiJTwj4gHPqUDitJ09aCn3lV02+aFEL+oXWTiVgo2tAE8HqztmBTUBPI +tFuUG7blzTubPlK5oOq07LXDREL0Hk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:19:21 2025 by rpki-client