$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa File: ca0fc261-9584-34a4-974c-31bffd768a15.roa (raw, json) Hash identifier: HdgNcqrv0D2/aRiFLoUkkpqKzeH0tveUCHQpQdp7jw0= Subject key identifier: BB:36:A3:8A:30:1A:DA:8D:E9:1E:C7:74:F0:2C:E2:FB:6A:9F:ED:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584893C56E957FDD0FFBEDEC2300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa Signing time: Fri 17 Jan 2025 18:28:31 +0000 ROA not before: Fri 17 Jan 2025 18:28:31 +0000 ROA not after: Thu 17 Apr 2025 17:28:31 +0000 asID: 7029 IP address blocks: 173.187.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:c5:6e:95:7f:dd:0f:fb:ed:ec:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 17 18:28:31 2025 GMT Not After : Apr 17 17:28:31 2025 GMT Subject: CN=73223855-1855-4f74-be53-f79cd87b7a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:32:2b:f4:65:64:35:c7:61:4d:7f:e2:7b:25: 7f:69:53:fb:9f:52:f7:94:f7:49:bd:4b:ca:9c:56: f9:62:51:da:df:5c:ee:46:fd:f8:79:dd:2b:27:06: 30:03:2f:d3:54:ad:2d:89:57:0f:e5:ba:3b:59:31: 64:28:6c:7e:67:40:84:1f:b8:ac:9a:12:54:67:89: 38:49:18:f2:52:d0:d3:24:9b:58:32:24:c8:46:49: bd:d3:7f:17:69:dd:38:a5:54:7a:81:6c:d6:b3:43: e0:e9:b7:48:28:62:1b:f1:ca:8c:8f:24:e5:4d:bb: 63:98:34:9b:a3:91:57:84:34:5b:0e:f9:45:ba:26: 64:f5:22:96:23:f4:70:a9:7a:2b:06:30:e4:d4:33: 94:a9:96:cf:04:ba:39:1c:af:c2:4d:20:b8:87:01: 88:9c:aa:b4:00:05:05:98:5c:42:3d:16:80:72:92: cd:42:e0:d2:99:b3:59:e4:8a:5b:54:13:9b:d2:45: 70:bf:ba:06:64:bb:e5:c0:cb:29:ed:fa:b1:fa:2d: 5a:82:2a:27:70:20:2c:4e:33:ac:24:ae:b0:0e:5e: b2:44:06:d3:8b:fc:5f:e3:02:0c:0e:83:61:e5:74: 20:d6:13:9e:6a:c5:71:37:d3:a8:05:8a:e6:e9:a9: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:36:A3:8A:30:1A:DA:8D:E9:1E:C7:74:F0:2C:E2:FB:6A:9F:ED:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:c4:48:10:2b:e5:76:7e:be:e8:1a:5d:ca:83:ae:11:f5:5f: 8b:39:45:df:72:76:58:52:97:68:ba:7b:82:40:0e:7d:c6:02: dd:65:1e:c9:b2:49:a8:71:9e:ba:36:fd:c9:c2:8d:3c:a5:54: f0:93:ba:8a:2e:a3:4f:7f:48:ad:0c:9e:09:fa:6d:87:55:e4: 0b:21:34:89:37:49:75:a9:c8:8f:1c:e8:93:04:0f:cd:b6:70: cc:ce:94:d0:83:9e:a6:f5:df:4c:d8:1e:51:93:52:21:d7:e1: 3f:14:f4:91:b6:4b:73:44:72:52:d1:7f:0a:74:e3:0c:f3:cb: 81:81:94:42:bc:7e:b3:1e:85:84:3c:7d:98:8c:46:60:ba:d7: 22:34:4e:35:1b:28:14:c5:61:94:b9:a3:05:5a:b7:c6:18:24: e7:ec:a2:ba:79:8e:80:03:1d:ff:1c:30:d2:f4:48:58:86:c4: f1:01:8f:7f:99:e0:fc:56:a6:bd:f0:ea:de:a7:2f:01:be:7a: 3e:9d:81:15:6f:26:84:59:d8:50:7e:00:48:7f:ea:9c:2d:86: 81:7f:49:81:50:9f:85:6a:76:df:f2:d4:a9:26:51:40:55:5e: 45:82:d7:d4:43:92:0c:c3:cd:6a:d6:15:39:de:ff:cd:5f:19: 74:bc:1f:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTxW6Vf90P++3sIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNzE4MjgzMVoXDTI1MDQxNzE3MjgzMVowLzEtMCsGA1UEAxMk NzMyMjM4NTUtMTg1NS00Zjc0LWJlNTMtZjc5Y2Q4N2I3YTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTIr9GVkNcdhTX/ieyV/aVP7n1L3lPdJvUvK nFb5YlHa31zuRv34ed0rJwYwAy/TVK0tiVcP5bo7WTFkKGx+Z0CEH7ismhJUZ4k4 SRjyUtDTJJtYMiTIRkm9038Xad04pVR6gWzWs0Pg6bdIKGIb8cqMjyTlTbtjmDSb o5FXhDRbDvlFuiZk9SKWI/RwqXorBjDk1DOUqZbPBLo5HK/CTSC4hwGInKq0AAUF mFxCPRaAcpLNQuDSmbNZ5IpbVBOb0kVwv7oGZLvlwMsp7fqx+i1agioncCAsTjOs JK6wDl6yRAbTi/xf4wIMDoNh5XQg1hOeasVxN9OoBYrm6alK+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs2o4owGtqN6R7HdPAs4vtqn+2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2EwZmMyNjEtOTU4NC0z NGE0LTk3NGMtMzFiZmZkNzY4YTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADESBAr5XZ+vugaXcqDrhH1X4s5Rd9ydlhSl2i6e4JADn3GAt1lHsmy Sahxnro2/cnCjTylVPCTuoouo09/SK0Mngn6bYdV5AshNIk3SXWpyI8c6JMED822 cMzOlNCDnqb130zYHlGTUiHX4T8U9JG2S3NEclLRfwp04wzzy4GBlEK8frMehYQ8 fZiMRmC61yI0TjUbKBTFYZS5owVat8YYJOfsorp5joADHf8cMNL0SFiGxPEBj3+Z 4PxWpr3w6t6nLwG+ej6dgRVvJoRZ2FB+AEh/6pwthoF/SYFQn4Vqdt/y1KkmUUBV XkWC19RDkgzDzWrWFTne/81fGXS8H/0= -----END CERTIFICATE-----Generated at Sun Apr 6 05:22:30 2025 by rpki-client