$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa File: d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa (raw, json) Hash identifier: yC4hy1d0wOVmQWbiVtml3OkAznLKYQuICafZLlMzthw= Subject key identifier: 42:69:28:D1:15:49:A4:22:1F:52:9F:D4:CE:9A:6A:F3:DA:EB:82:67 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584968B42999D0888A6FB3398AC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 27338 IP address blocks: 74.9.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:29:99:d0:88:8a:6f:b3:39:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=5f0ea199-e18a-4226-bdaf-8c9c513b0d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c0:7b:07:8c:39:21:9f:09:6d:65:4b:1f:6a: 49:79:ac:dc:18:1a:fb:98:0e:d1:21:de:6c:ba:c9: e2:cb:91:92:f1:6c:0d:f5:51:4e:f7:7e:07:a7:04: 61:82:17:e3:d1:ee:51:78:c6:55:cf:72:d7:73:8c: ce:5a:a8:a8:f5:c3:05:aa:1e:ab:00:9d:c1:59:e2: 2f:2f:94:ef:37:12:1b:d1:a9:2b:9d:50:f9:2c:5c: 33:ef:ae:2d:89:c3:d7:53:29:1e:6c:fb:5a:cf:0e: 46:f7:49:2e:94:1c:2f:cc:70:6d:bb:9b:83:92:f2: 51:db:7d:d7:1e:b8:a0:57:4d:32:6b:92:2e:a5:49: 07:cb:19:23:c8:46:6d:be:b2:84:71:21:fe:35:2d: 9a:28:97:0e:e0:b3:91:63:53:6b:b8:c6:dd:97:4f: df:5a:38:a4:7d:12:40:6f:e9:d4:c1:1b:58:5d:e0: 05:3b:e5:96:57:07:43:27:07:6e:4e:85:f1:5e:fa: a3:f3:c0:d2:a1:4f:92:f7:dc:e3:b8:8f:bc:e6:c8: 83:cf:d5:5d:d7:f1:91:58:d4:90:47:6b:97:94:ae: c7:d2:56:ce:c4:e6:1f:2e:ce:97:ab:51:d2:4c:b7: 1a:e6:07:6a:5e:56:04:6d:b4:9f:af:fe:62:76:a1: 04:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:69:28:D1:15:49:A4:22:1F:52:9F:D4:CE:9A:6A:F3:DA:EB:82:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d2f2da6c-e558-3154-bb71-4b2a8c0a0762.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.9.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:6a:ea:c5:9b:ac:fd:9c:46:ba:f4:c2:34:3c:e0:1c:ea:a3: 18:13:aa:e0:1d:10:56:9b:62:c3:0b:8c:4f:74:c2:18:d4:17: 5b:c9:ad:86:b4:5f:ea:c8:61:bf:29:e1:e6:83:9a:5c:30:81: 27:bf:20:c0:53:de:ab:dc:6d:c2:16:5b:b0:ae:a7:ac:63:0e: e1:e1:34:d8:f8:ad:16:87:a1:82:be:0a:25:fc:ff:03:e7:4e: ce:b8:e8:8f:f1:b8:bf:8b:8f:e6:47:d4:e8:62:a2:f5:bb:d5: e7:78:10:05:b4:ca:cb:db:a1:e8:a1:c7:8a:d4:90:83:96:89: 7e:7d:3e:21:bb:ca:fe:17:b6:41:bf:e1:86:f7:ab:07:37:3b: 80:db:e4:3a:a7:27:b9:65:45:69:25:a1:5b:63:74:ef:46:54: 83:95:1d:25:67:bc:d1:ef:af:51:82:f9:87:72:23:52:a5:e4: f1:06:d2:15:85:c4:a0:8c:f9:24:6f:d9:41:87:6c:ac:93:1f: f1:a0:c6:09:b8:46:31:29:25:7d:38:73:26:0b:52:29:38:52: 61:0e:56:b7:b0:b5:7b:dc:28:0c:b5:01:91:ea:3c:9c:39:6d: 5d:3d:03:95:18:41:cc:f4:e6:d1:c3:cd:a4:36:d1:a5:68:94: 46:1d:86:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCmZ0IiKb7M5isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk NWYwZWExOTktZTE4YS00MjI2LWJkYWYtOGM5YzUxM2IwZDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcB7B4w5IZ8JbWVLH2pJeazcGBr7mA7RId5s usniy5GS8WwN9VFO934HpwRhghfj0e5ReMZVz3LXc4zOWqio9cMFqh6rAJ3BWeIv L5TvNxIb0akrnVD5LFwz764ticPXUykebPtazw5G90kulBwvzHBtu5uDkvJR233X HrigV00ya5IupUkHyxkjyEZtvrKEcSH+NS2aKJcO4LORY1NruMbdl0/fWjikfRJA b+nUwRtYXeAFO+WWVwdDJwduToXxXvqj88DSoU+S99zjuI+85siDz9Vd1/GRWNSQ R2uXlK7H0lbOxOYfLs6Xq1HSTLca5gdqXlYEbbSfr/5idqEEsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJpKNEVSaQiH1Kf1M6aavPa64JnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDJmMmRhNmMtZTU1OC0z MTU0LWJiNzEtNGIyYThjMGEwNzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgkGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJq6sWbrP2cRrr0wjQ84BzqoxgTquAdEFabYsMLjE90whjUF1vJrYa0 X+rIYb8p4eaDmlwwgSe/IMBT3qvcbcIWW7Cup6xjDuHhNNj4rRaHoYK+CiX8/wPn Ts646I/xuL+Lj+ZH1OhiovW71ed4EAW0ysvboeihx4rUkIOWiX59PiG7yv4XtkG/ 4Yb3qwc3O4Db5DqnJ7llRWkloVtjdO9GVIOVHSVnvNHvr1GC+YdyI1Kl5PEG0hWF xKCM+SRv2UGHbKyTH/Ggxgm4RjEpJX04cyYLUik4UmEOVrewtXvcKAy1AZHqPJw5 bV09A5UYQcz05tHDzaQ20aVolEYdhn8= -----END CERTIFICATE-----Generated at Mon Apr 7 11:47:47 2025 by rpki-client