$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa File: a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa (raw, json) Hash identifier: MkXU8U4aHxtzD9qs0xonEnmcpyX6dGRjm9nOg2GHNBQ= Subject key identifier: B3:7E:D5:7B:80:1A:95:AB:F4:8E:58:AE:87:3C:D9:79:6D:DA:4B:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE120FA72E9DE6FC537C680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 174.130.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:20:fa:72:e9:de:6f:c5:37:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=56398ea2-535e-4f2a-be1b-96ec605237c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f9:27:bb:7a:a4:a8:92:46:4e:36:96:19:68: fd:dc:6d:70:7c:61:01:79:00:27:d4:a8:a7:0a:3f: 7f:64:dd:be:e7:fa:ea:04:5a:7c:39:c6:57:53:01: 73:cc:f7:ff:bc:94:da:b7:a7:1e:65:54:58:61:57: a2:6b:84:6e:ca:24:69:97:89:f0:f4:be:6c:67:ee: 35:fc:cd:7c:a8:1e:14:94:8e:27:a7:2a:02:ec:f6: 9a:2e:cb:5d:47:99:4e:0c:9a:4b:1a:92:e3:01:d6: e8:6c:56:52:b5:6b:64:78:1b:c2:de:30:37:97:9d: f8:95:1c:a8:99:60:87:d8:d5:50:a2:92:7b:70:c8: 32:0c:14:2e:a5:3d:63:75:ae:0a:11:46:d7:2c:d5: 45:91:4a:3b:bf:47:7d:f5:97:f5:fb:20:b0:8e:4e: 2a:85:60:5c:7a:95:55:3c:4b:15:2d:8a:2f:94:4a: ad:7b:0e:5b:0b:68:19:8d:33:e5:cf:57:9a:e8:34: 80:6b:05:7c:8f:98:10:77:4b:b5:67:f4:47:c1:b5: 9a:3c:e7:9d:84:d1:36:63:92:73:a1:6a:1b:93:f4: 88:13:d5:96:0c:3d:84:fb:1e:88:67:4f:b7:5f:75: bf:54:aa:3b:6a:c9:87:f6:68:8a:78:7d:b4:43:0c: e6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7E:D5:7B:80:1A:95:AB:F4:8E:58:AE:87:3C:D9:79:6D:DA:4B:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a77b0085-1c04-3cac-ba52-cfc0545d4ac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.130.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:80:1a:cd:36:0e:c6:c1:f9:2b:f3:d5:5f:62:aa:e2:27:67: e5:20:a4:9c:ca:10:38:54:8b:8a:db:2a:1d:85:47:ab:ff:43: 2e:38:29:c7:3b:ea:8b:f6:6e:c8:ce:52:bb:a3:6d:4b:76:67: 5e:4c:66:49:79:01:2d:cf:47:05:22:7b:0e:a4:58:4f:7e:ec: a4:a5:00:e2:7f:08:5c:80:2a:21:d4:26:14:38:aa:cc:61:7b: 2e:23:11:fe:70:37:c6:f6:eb:a0:66:14:ce:6c:99:9b:1c:0a: 43:27:c2:d0:4c:90:90:91:8e:3e:90:56:e0:46:f7:95:58:06: 75:74:93:12:85:f4:a5:85:6f:30:82:2b:12:b4:5a:3a:37:b4: 55:e6:8b:f5:6d:60:3f:26:20:11:ae:12:65:8d:49:7f:b4:3b: ce:55:da:2e:80:84:1e:61:a0:e6:aa:37:0d:34:46:a9:95:a4: cd:9f:73:4f:d5:59:a7:b3:1e:e3:4d:82:fc:75:19:6a:1a:d0: cf:5d:c3:6c:4a:24:69:f7:d6:cf:7b:ab:f4:a7:4e:88:81:07: 8a:cf:64:e2:e7:e6:c7:58:f3:7a:ba:af:11:57:e4:06:84:34: 9b:57:99:80:23:83:32:07:bd:db:52:cf:ca:bb:d7:35:e4:c1: 55:de:20:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4SD6cuneb8U3xoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk NTYzOThlYTItNTM1ZS00ZjJhLWJlMWItOTZlYzYwNTIzN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfknu3qkqJJGTjaWGWj93G1wfGEBeQAn1Kin Cj9/ZN2+5/rqBFp8OcZXUwFzzPf/vJTat6ceZVRYYVeia4RuyiRpl4nw9L5sZ+41 /M18qB4UlI4npyoC7PaaLstdR5lODJpLGpLjAdbobFZStWtkeBvC3jA3l534lRyo mWCH2NVQopJ7cMgyDBQupT1jda4KEUbXLNVFkUo7v0d99Zf1+yCwjk4qhWBcepVV PEsVLYovlEqtew5bC2gZjTPlz1ea6DSAawV8j5gQd0u1Z/RHwbWaPOedhNE2Y5Jz oWobk/SIE9WWDD2E+x6IZ0+3X3W/VKo7asmH9miKeH20Qwzm7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN+1XuAGpWr9I5Yroc82Xlt2ktyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTc3YjAwODUtMWMwNC0z Y2FjLWJhNTItY2ZjMDU0NWQ0YWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEroLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2AGs02DsbB+Svz1V9iquInZ+UgpJzKEDhUi4rbKh2FR6v/Qy44Kcc7 6ov2bsjOUrujbUt2Z15MZkl5AS3PRwUiew6kWE9+7KSlAOJ/CFyAKiHUJhQ4qsxh ey4jEf5wN8b266BmFM5smZscCkMnwtBMkJCRjj6QVuBG95VYBnV0kxKF9KWFbzCC KxK0Wjo3tFXmi/VtYD8mIBGuEmWNSX+0O85V2i6AhB5hoOaqNw00RqmVpM2fc0/V WaezHuNNgvx1GWoa0M9dw2xKJGn31s97q/SnToiBB4rPZOLn5sdY83q6rxFX5AaE NJtXmYAjgzIHvdtSz8q71zXkwVXeIJc= -----END CERTIFICATE-----Generated at Sun Apr 6 06:01:03 2025 by rpki-client