$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa File: d01fa785-c9d0-379b-945c-f32c18629967.roa (raw, json) Hash identifier: 2SDiKHgNbwRvwv1nKPvx/Dr4aEubCCRcAxPJsjck4z0= Subject key identifier: A2:5D:F3:32:34:DE:36:5C:63:AA:D5:0B:66:26:D7:7C:5A:0E:65:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848897B26F9BFC8FE223F825780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa Signing time: Tue 14 Jan 2025 02:00:39 +0000 ROA not before: Tue 14 Jan 2025 02:00:39 +0000 ROA not after: Mon 14 Apr 2025 01:00:39 +0000 asID: 27338 IP address blocks: 74.8.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:89:7b:26:f9:bf:c8:fe:22:3f:82:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 14 02:00:39 2025 GMT Not After : Apr 14 01:00:39 2025 GMT Subject: CN=cf8210d6-5377-4734-8821-9a9ff4cfe542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2a:0c:17:af:4f:6a:c0:7d:1b:b4:80:11:e5: 65:d4:2e:6e:8c:5d:2d:61:df:65:f0:3a:5d:3b:85: 97:00:50:1d:bc:31:87:a9:f6:22:da:96:73:97:02: f5:69:19:05:65:63:7a:78:2b:04:cd:d5:9c:28:2b: 69:70:a2:44:6e:1d:b5:13:00:c5:01:0a:48:ec:bb: d8:5c:e5:24:cd:64:78:72:e5:e4:99:78:72:b5:e2: 58:ea:13:06:84:66:40:3c:f3:b4:ee:33:3b:67:22: e0:ba:40:49:65:09:88:32:c2:7b:aa:b6:5f:03:af: a9:6e:c7:ac:6e:b3:e4:17:ff:1d:85:b2:0c:66:d1: 10:37:72:2c:e6:23:7d:76:e1:2e:91:e4:86:98:12: a5:b3:0d:ee:96:36:ec:ca:62:13:c4:fa:f3:89:46: cd:91:47:22:94:71:de:1d:88:4a:e4:66:20:96:7c: 6a:7d:24:4e:09:34:b3:9a:59:2c:ab:d9:0b:ee:c5: 8c:6f:2a:40:19:14:0e:56:b1:b0:f2:80:de:63:8b: 4d:14:6e:c6:9b:ec:50:d5:c4:f1:6a:72:96:1c:1b: 95:9b:46:22:a4:fe:30:22:32:08:d8:ac:88:03:bf: 2f:fc:bb:8b:fe:07:9f:69:72:92:35:33:e7:10:23: 2d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:F3:32:34:DE:36:5C:63:AA:D5:0B:66:26:D7:7C:5A:0E:65:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:06:cf:5e:f0:a6:1f:91:b6:7f:da:94:28:3a:fb:08:94:f1: c8:11:ac:bb:b5:f1:76:33:ac:8e:e9:da:d5:b3:7d:27:9d:20: a9:7f:08:39:d4:c8:81:8b:c7:4d:eb:0b:05:a7:6a:b6:19:76: 84:00:fd:31:a7:2f:7a:cf:03:46:bb:9f:ca:e3:2c:2d:b0:25: 6b:0e:ab:2c:d7:c6:31:c0:ee:04:2b:f8:f3:aa:b1:9e:35:53: c9:9b:e0:42:6c:f9:bb:98:4a:64:63:87:27:a3:af:bf:3e:48: 02:0b:ed:b1:84:16:92:84:88:16:fc:2f:a8:11:63:1a:dc:60: 8e:e8:ce:ce:49:30:3c:bc:a3:6f:63:fe:d8:3b:0a:e2:6e:5d: e2:96:65:cd:ed:ec:e3:0e:93:9b:26:9d:f9:16:c2:fa:b8:f8: 01:b7:ac:19:f3:d3:66:9a:a3:ee:55:32:e7:4f:38:c3:c0:66: 4a:ac:bd:e7:96:f0:f1:1d:65:fd:d3:eb:d4:dc:3c:b0:68:3a: da:46:bb:77:45:07:55:ed:3b:6a:2f:22:72:c0:c7:70:c4:6d: 56:5f:28:20:94:12:98:65:cf:99:cd:cc:b7:52:68:e0:d2:c8: 80:38:e4:84:cd:fd:a2:48:c1:bc:1c:b7:fd:55:d3:ed:97:c0: 2f:78:75:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiJeyb5v8j+Ij+CV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDExNDAyMDAzOVoXDTI1MDQxNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2Y4MjEwZDYtNTM3Ny00NzM0LTg4MjEtOWE5ZmY0Y2ZlNTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyoMF69PasB9G7SAEeVl1C5ujF0tYd9l8Dpd O4WXAFAdvDGHqfYi2pZzlwL1aRkFZWN6eCsEzdWcKCtpcKJEbh21EwDFAQpI7LvY XOUkzWR4cuXkmXhyteJY6hMGhGZAPPO07jM7ZyLgukBJZQmIMsJ7qrZfA6+pbses brPkF/8dhbIMZtEQN3Is5iN9duEukeSGmBKlsw3uljbsymITxPrziUbNkUcilHHe HYhK5GYglnxqfSROCTSzmlksq9kL7sWMbypAGRQOVrGw8oDeY4tNFG7Gm+xQ1cTx anKWHBuVm0YipP4wIjII2KyIA78v/LuL/gefaXKSNTPnECMtEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJd8zI03jZcY6rVC2Ym13xaDmUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAxZmE3ODUtYzlkMC0z NzliLTk0NWMtZjMyYzE4NjI5OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgGz17wph+Rtn/alCg6+wiU8cgRrLu18XYzrI7p2tWzfSedIKl/CDnU yIGLx03rCwWnarYZdoQA/TGnL3rPA0a7n8rjLC2wJWsOqyzXxjHA7gQr+POqsZ41 U8mb4EJs+buYSmRjhyejr78+SAIL7bGEFpKEiBb8L6gRYxrcYI7ozs5JMDy8o29j /tg7CuJuXeKWZc3t7OMOk5smnfkWwvq4+AG3rBnz02aao+5VMudPOMPAZkqsveeW 8PEdZf3T69TcPLBoOtpGu3dFB1XtO2ovInLAx3DEbVZfKCCUEphlz5nNzLdSaODS yIA45ITN/aJIwbwct/1V0+2XwC94dew= -----END CERTIFICATE-----Generated at Sun Feb 16 20:35:43 2025 by rpki-client