$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ccefc081-96ed-372d-91e0-eb03727578bb.roa File: ccefc081-96ed-372d-91e0-eb03727578bb.roa (raw, json) Hash identifier: ObtyygNwCI/TE7pmY0qgoQjlb/jaY2PVXXAluUczL1k= Subject key identifier: 04:6D:C0:2C:18:FF:DA:CA:15:65:99:75:66:59:55:96:88:B0:F6:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848116FB720A1B4B9B1C5738A80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ccefc081-96ed-372d-91e0-eb03727578bb.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 7029 IP address blocks: 72.172.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:b7:20:a1:b4:b9:b1:c5:73:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=a5349d65-b715-4edb-b852-4d4dd026ead1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:1e:61:b6:05:5d:44:ae:d2:1b:17:c3:69:b6: 27:4f:97:bc:e3:12:09:f2:56:50:33:53:d1:5b:2a: 2e:27:8e:fb:0a:9d:d2:18:6a:70:9b:36:9a:45:02: 16:62:10:51:34:f5:32:56:79:0c:61:b2:93:29:bd: ec:b2:ac:b1:4f:41:f2:45:99:62:7c:b4:ab:d7:36: b4:ed:ea:29:a7:b4:fd:7e:67:9f:43:3a:f1:0b:31: 98:5b:20:d3:ab:e0:99:0a:9a:c7:46:41:50:42:68: 68:78:99:f6:85:b6:96:dd:04:a9:33:a9:57:65:56: 88:0f:ce:cc:e0:ee:ba:30:86:74:d8:cf:7c:6d:f2: a5:61:ac:f6:57:31:14:17:e8:47:3c:fa:84:1b:ce: 17:72:0f:ca:68:64:a3:c1:23:01:60:bb:9e:db:be: 27:e7:ff:66:83:88:8b:72:f8:c0:d9:97:c4:a7:6c: 4c:c8:b5:06:5e:65:f8:5e:37:31:ec:5d:59:57:2f: fe:2f:5e:a2:16:e8:0d:66:04:c1:2b:59:71:cf:ab: 59:38:c8:e8:12:2e:06:37:ee:f8:02:31:ac:7f:62: b7:b2:5b:33:1a:62:d9:2e:2a:b8:54:f3:94:df:9f: 86:cf:31:0e:00:e6:7e:8f:f2:8d:5d:b2:a4:b3:a3: 19:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6D:C0:2C:18:FF:DA:CA:15:65:99:75:66:59:55:96:88:B0:F6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ccefc081-96ed-372d-91e0-eb03727578bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 72.172.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:aa:1a:c8:65:be:9c:87:eb:cc:b8:70:8c:e7:f0:6a:4d:f2: fd:fd:e0:67:3b:57:76:4a:af:d5:f5:e4:dc:8c:63:6b:d6:f4: 18:34:42:4e:e5:05:6d:c2:b1:b3:11:4f:29:a0:d0:a4:c2:53: ef:80:8c:b8:ab:fb:48:c1:45:8c:f3:d4:af:65:e4:4e:e7:a4: dd:74:5f:82:8b:1c:0e:15:6c:1e:91:4f:2f:4b:7d:cb:e4:0b: e7:51:58:35:03:5b:c3:a0:d4:89:0e:d7:62:de:cb:69:21:97: 0e:a1:da:f4:9b:64:45:8e:95:5b:56:33:76:e6:59:10:34:3a: 3c:b3:a2:f1:44:67:08:93:c6:b4:c4:9a:4d:98:40:d0:d3:05: 89:f0:f3:fb:76:d1:0c:cf:24:c5:ee:8a:df:0f:b3:da:b0:3f: 3c:9d:c3:38:ac:29:27:73:4c:bb:6d:12:65:74:68:8d:4b:46: e2:21:be:20:97:76:a7:f8:6f:b2:80:05:55:51:ed:6c:2e:04: 77:a1:02:6e:b2:1c:73:1c:d9:ff:35:b4:35:17:1a:92:e8:d9: 2d:4c:76:89:90:da:5b:c4:98:45:c5:af:6f:63:2e:a6:54:b9: 37:23:ea:f2:c3:16:e3:6b:a8:dc:3c:4c:50:c4:35:10:85:6a: 4a:fd:70:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgRb7cgobS5scVzioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk YTUzNDlkNjUtYjcxNS00ZWRiLWI4NTItNGQ0ZGQwMjZlYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8h5htgVdRK7SGxfDabYnT5e84xIJ8lZQM1PR WyouJ477Cp3SGGpwmzaaRQIWYhBRNPUyVnkMYbKTKb3ssqyxT0HyRZlifLSr1za0 7eopp7T9fmefQzrxCzGYWyDTq+CZCprHRkFQQmhoeJn2hbaW3QSpM6lXZVaID87M 4O66MIZ02M98bfKlYaz2VzEUF+hHPPqEG84Xcg/KaGSjwSMBYLue274n5/9mg4iL cvjA2ZfEp2xMyLUGXmX4Xjcx7F1ZVy/+L16iFugNZgTBK1lxz6tZOMjoEi4GN+74 AjGsf2K3slszGmLZLiq4VPOU35+GzzEOAOZ+j/KNXbKks6MZIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARtwCwY/9rKFWWZdWZZVZaIsPaCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2NlZmMwODEtOTZlZC0z NzJkLTkxZTAtZWIwMzcyNzU3OGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSKwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOqGshlvpyH68y4cIzn8GpN8v394Gc7V3ZKr9X15NyMY2vW9Bg0Qk7l BW3CsbMRTymg0KTCU++AjLir+0jBRYzz1K9l5E7npN10X4KLHA4VbB6RTy9Lfcvk C+dRWDUDW8Og1IkO12Ley2khlw6h2vSbZEWOlVtWM3bmWRA0OjyzovFEZwiTxrTE mk2YQNDTBYnw8/t20QzPJMXuit8Ps9qwPzydwzisKSdzTLttEmV0aI1LRuIhviCX dqf4b7KABVVR7WwuBHehAm6yHHMc2f81tDUXGpLo2S1MdomQ2lvEmEXFr29jLqZU uTcj6vLDFuNrqNw8TFDENRCFakr9cOs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:40 2025 by rpki-client