$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa File: d85384b2-fc8f-3f52-8f12-9ccad266f344.roa (raw, json) Hash identifier: fHjHcfbTcG48O9Io6Z8+HFYUDutSxFx8ZoLXx+r/viI= Subject key identifier: 9E:A9:3D:69:2B:54:60:B1:57:79:D8:16:3C:B1:EE:6A:BD:4D:DD:00 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858489F30224EF8A9E755FF320E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa Signing time: Tue 21 Jan 2025 20:37:24 +0000 ROA not before: Tue 21 Jan 2025 20:37:24 +0000 ROA not after: Mon 21 Apr 2025 19:37:24 +0000 asID: 7029 IP address blocks: 198.14.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:30:22:4e:f8:a9:e7:55:ff:32:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 21 20:37:24 2025 GMT Not After : Apr 21 19:37:24 2025 GMT Subject: CN=2018ecdc-3b9e-42ab-bc47-81c38a84a8e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:66:f5:98:cc:22:6d:71:63:15:3a:f0:1d:7c: b5:b7:22:3c:15:a3:54:33:f4:6c:44:cf:94:3c:4b: 85:6f:b3:3d:64:00:55:19:cf:dc:8b:7c:cc:86:76: 65:97:4e:bb:a9:c8:58:82:d2:8e:b9:ed:6b:dc:0f: db:00:0d:5e:e2:09:d0:69:62:49:f2:6f:9b:ce:55: b6:01:a0:9d:ee:47:5d:d1:46:b5:e8:8d:55:4f:33: 89:d3:cc:f4:ef:21:de:fa:60:5a:6c:04:f7:53:9f: e2:9c:c9:87:57:82:b7:fa:a6:75:9d:7e:e2:af:66: 45:89:9f:72:55:76:92:d4:0a:00:3e:d2:5f:92:85: 1f:72:28:e3:97:42:ff:c5:bc:ba:cd:c2:90:43:30: 69:0e:8b:80:89:0d:73:2a:d5:9d:36:c3:33:87:a6: a7:5c:10:e4:1c:83:85:65:ed:75:01:93:a3:9e:2f: c8:ea:b3:c0:14:cd:11:91:43:14:9c:c9:bf:76:8f: b5:6e:a1:43:99:bf:ba:87:e3:e8:42:dd:8d:ae:99: 2f:95:09:27:34:98:61:cb:8c:75:16:37:ab:46:38: 5a:b5:d3:35:37:aa:f9:a2:c7:53:ed:71:42:8b:9a: 50:d4:a7:ff:61:f0:52:25:c7:1d:d5:bb:c6:0b:ba: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A9:3D:69:2B:54:60:B1:57:79:D8:16:3C:B1:EE:6A:BD:4D:DD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d85384b2-fc8f-3f52-8f12-9ccad266f344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.14.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:00:55:27:90:28:08:53:76:98:44:b2:21:f4:d3:9a:6c:27: 35:3c:cf:f1:9e:2a:99:c9:43:bb:e0:96:66:4b:9c:43:bf:eb: 83:33:57:c0:e7:e8:06:15:ba:dd:c7:51:5a:75:79:03:d2:a9: c4:82:0a:5e:6a:8d:3d:43:c2:51:d4:01:a1:0a:ae:4e:bc:84: 6a:d2:57:19:f6:bf:55:86:76:dc:b4:d6:15:29:b5:d9:44:20: cf:63:1a:30:fd:8a:f1:ae:38:53:e3:63:67:f0:9d:41:9e:a7: 33:6d:f8:c1:3d:ad:9b:a2:f6:a8:18:ef:15:26:29:17:4e:d7: 44:a3:56:be:7d:81:34:a8:6b:f7:1b:9e:35:88:6b:f2:5d:6f: ff:8d:16:4b:d3:b6:5f:c3:d9:6b:b2:61:47:51:2b:5b:16:09: 43:35:d2:ae:e6:79:ab:e4:5e:2d:4d:bc:78:94:6b:75:cd:ba: 56:e9:5f:77:46:14:05:cb:89:da:ac:9c:c1:10:ce:84:1e:db: 59:49:4d:15:14:00:c9:0d:ff:77:54:41:1f:82:b8:5c:8f:13: 5d:b5:c1:e5:ac:0a:13:8c:b8:37:b9:89:ff:be:70:ec:00:42: d7:52:d8:d7:1b:c5:7a:44:52:3b:56:41:50:24:4a:96:e8:b0: eb:41:02:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEifMCJO+KnnVf8yDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEyMTIwMzcyNFoXDTI1MDQyMTE5MzcyNFowLzEtMCsGA1UEAxMk MjAxOGVjZGMtM2I5ZS00MmFiLWJjNDctODFjMzhhODRhOGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGb1mMwibXFjFTrwHXy1tyI8FaNUM/RsRM+U PEuFb7M9ZABVGc/ci3zMhnZll067qchYgtKOue1r3A/bAA1e4gnQaWJJ8m+bzlW2 AaCd7kdd0Ua16I1VTzOJ08z07yHe+mBabAT3U5/inMmHV4K3+qZ1nX7ir2ZFiZ9y VXaS1AoAPtJfkoUfcijjl0L/xby6zcKQQzBpDouAiQ1zKtWdNsMzh6anXBDkHIOF Ze11AZOjni/I6rPAFM0RkUMUnMm/do+1bqFDmb+6h+PoQt2NrpkvlQknNJhhy4x1 FjerRjhatdM1N6r5osdT7XFCi5pQ1Kf/YfBSJccd1bvGC7qbvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ6pPWkrVGCxV3nYFjyx7mq9Td0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDg1Mzg0YjItZmM4Zi0z ZjUyLThmMTItOWNjYWQyNjZmMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExg7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEAVSeQKAhTdphEsiH005psJzU8z/GeKpnJQ7vglmZLnEO/64MzV8Dn 6AYVut3HUVp1eQPSqcSCCl5qjT1DwlHUAaEKrk68hGrSVxn2v1WGdty01hUptdlE IM9jGjD9ivGuOFPjY2fwnUGepzNt+ME9rZui9qgY7xUmKRdO10SjVr59gTSoa/cb njWIa/Jdb/+NFkvTtl/D2WuyYUdRK1sWCUM10q7meavkXi1NvHiUa3XNulbpX3dG FAXLidqsnMEQzoQe21lJTRUUAMkN/3dUQR+CuFyPE121weWsChOMuDe5if++cOwA QtdS2NcbxXpEUjtWQVAkSpbosOtBAt8= -----END CERTIFICATE-----Generated at Sat Apr 5 18:24:32 2025 by rpki-client