$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa File: c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa (raw, json) Hash identifier: Ne4XpTtHEU7RjoAJXs8n9PcAV9lsU0ykMjHqsl3PVkY= Subject key identifier: 54:64:3B:B4:76:8A:AB:61:25:CA:F7:78:27:10:07:80:77:01:9B:1B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FA56CE7680D39AE05D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.23.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fa:56:ce:76:80:d3:9a:e0:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=f7184648-0492-48d3-b2b9-e1d6ad050dae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:7a:72:39:99:78:d8:3d:ac:a1:62:0a:7c: 04:03:60:5c:76:8f:ca:fb:3b:be:c6:14:3e:2b:02: 9a:e9:b1:80:f7:7b:50:45:6a:9d:19:8e:c0:ca:8d: ee:c5:aa:e8:cc:7d:51:e4:77:4a:d6:dc:cb:1b:53: ae:02:ad:ea:28:84:6a:d5:f6:a3:c9:db:62:04:85: 80:f6:a5:6d:33:de:04:82:82:5c:f6:93:4d:16:ba: 0a:66:83:62:a0:6f:1d:97:2f:57:20:0d:d3:4f:0d: 39:ba:06:97:52:4e:49:b4:23:a1:54:8f:54:1d:21: 5c:3c:0c:af:f3:1c:57:16:76:7d:86:5d:af:d7:5d: fd:41:4e:fa:58:c0:da:50:18:35:f7:75:3b:58:fc: 60:a7:43:ad:63:57:af:4c:a4:7e:95:73:1f:95:13: 9d:8a:60:27:5d:9b:d4:cd:b1:41:bf:8e:6b:ac:ba: de:c1:63:52:2a:63:73:42:4d:92:ea:d0:52:50:b5: c9:4a:62:72:37:4b:6b:7a:98:6d:e0:6c:47:69:8d: 7f:fe:c4:59:a3:00:a0:9c:0e:3e:4d:80:9d:70:04: ed:bd:af:0d:08:8d:15:4a:51:4c:0d:46:ec:68:17: da:f7:49:9c:92:d1:f8:57:06:18:f5:07:9a:a7:1a: 7a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:64:3B:B4:76:8A:AB:61:25:CA:F7:78:27:10:07:80:77:01:9B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.23.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:11:de:46:11:0e:e2:81:27:cc:ba:e0:c0:ba:1a:bf:02:10: 41:3d:07:74:ac:85:35:3c:54:fa:db:8d:08:91:59:a2:51:b5: 30:4a:49:e5:19:58:fb:d6:9d:df:00:b9:95:d6:aa:16:5f:b6: 90:fc:a1:b9:5d:98:96:da:ba:cb:0f:53:db:3c:1f:39:25:2c: eb:5b:ad:5e:d0:11:ee:c7:2a:5f:87:08:e2:25:cf:90:42:00: 54:d7:66:f0:7a:2d:2d:c5:97:df:88:ce:2c:c0:32:d7:49:fe: 45:2b:4e:3b:cf:bf:93:8a:2b:a9:ea:97:df:de:5b:c0:d9:c0: da:21:9d:98:6a:27:f7:da:5a:48:7d:27:f8:1a:13:24:b5:2e: ae:ca:f1:8a:20:91:3e:c0:bc:52:39:f2:3d:8b:58:9e:b8:b5: 72:00:a7:b3:d4:6c:41:88:db:87:8d:9a:6b:57:3d:dc:27:5b: c7:d4:3f:e6:fc:c4:a4:d8:27:06:14:f5:72:70:b5:a5:22:d5: f7:e8:b5:7a:e0:8b:61:3b:17:ae:c8:52:58:5c:ec:e5:0f:ef: 8a:09:3b:03:ff:3c:0b:2a:e6:24:ef:2c:b7:46:8a:59:28:4b: 20:8f:e6:8b:59:f1:e4:81:1c:4f:d4:86:90:a9:66:09:5a:9c: 52:ad:9f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPpWznaA05rgXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZjcxODQ2NDgtMDQ5Mi00OGQzLWIyYjktZTFkNmFkMDUwZGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/l6cjmZeNg9rKFiCnwEA2Bcdo/K+zu+xhQ+ KwKa6bGA93tQRWqdGY7Ayo3uxarozH1R5HdK1tzLG1OuAq3qKIRq1fajydtiBIWA 9qVtM94EgoJc9pNNFroKZoNioG8dly9XIA3TTw05ugaXUk5JtCOhVI9UHSFcPAyv 8xxXFnZ9hl2v1139QU76WMDaUBg193U7WPxgp0OtY1evTKR+lXMflROdimAnXZvU zbFBv45rrLrewWNSKmNzQk2S6tBSULXJSmJyN0trepht4GxHaY1//sRZowCgnA4+ TYCdcATtva8NCI0VSlFMDUbsaBfa90mcktH4VwYY9Qeapxp6JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRkO7R2iqthJcr3eCcQB4B3AZsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY1NGYzYWQtNGU4Mi0z MzM0LWExYjUtYWM5Y2MzMmRhMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2BcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4R3kYRDuKBJ8y64MC6Gr8CEEE9B3SshTU8VPrbjQiRWaJRtTBKSeUZ WPvWnd8AuZXWqhZftpD8obldmJbaussPU9s8HzklLOtbrV7QEe7HKl+HCOIlz5BC AFTXZvB6LS3Fl9+IzizAMtdJ/kUrTjvPv5OKK6nql9/eW8DZwNohnZhqJ/faWkh9 J/gaEyS1Lq7K8YogkT7AvFI58j2LWJ64tXIAp7PUbEGI24eNmmtXPdwnW8fUP+b8 xKTYJwYU9XJwtaUi1ffotXrgi2E7F67IUlhc7OUP74oJOwP/PAsq5iTvLLdGilko SyCP5otZ8eSBHE/UhpCpZglanFKtn3Y= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:39 2025 by rpki-client