$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa File: d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa (raw, json) Hash identifier: /XfVuzt8QqS/y1geBQBpRvLswi9tr13cnFK2hFrSDqA= Subject key identifier: C5:FA:9D:43:6C:7A:9A:1A:33:3F:59:F1:B3:71:30:A2:0D:8D:32:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2112D1389356FBE2FDBB280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 19917 IP address blocks: 209.255.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:2d:13:89:35:6f:be:2f:db:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=5b1f0242-cb6b-4d59-b58e-bff4ed3f7f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:75:cb:9a:42:74:1a:f9:61:d3:6b:11:4e:79: 44:44:98:9d:cc:20:35:69:22:58:4d:a2:45:6c:64: 5c:7c:ed:25:4a:e2:55:ca:51:df:9e:96:33:be:73: 47:69:18:05:a3:43:ed:d3:e9:ea:91:70:41:14:83: c0:c2:e9:a4:21:8c:35:52:90:35:b8:94:47:b7:5d: e5:e5:c4:9a:11:32:02:c6:fa:4c:23:39:06:80:7c: a3:0b:9d:9b:f7:78:c8:d1:da:e9:c0:f2:f8:57:e1: 19:d5:5f:b1:a0:1c:ce:d5:3b:32:cf:d0:3c:70:44: b0:76:64:2e:72:cc:1f:be:94:c6:a9:12:c5:af:cb: 0e:b0:fc:60:02:9f:5a:0b:73:19:c9:f4:32:be:95: 41:47:79:6e:01:02:8c:88:13:f6:15:d7:d0:3c:df: 77:df:4b:90:a3:bf:3e:17:b9:d7:4e:c6:31:9f:6a: bd:0d:45:fe:7e:0e:da:0c:f4:9d:b7:da:7e:e1:47: 0a:21:fe:bd:64:3a:70:92:c0:47:75:91:06:6b:20: 68:10:63:b4:fb:56:e6:a0:d6:8b:6c:b4:1c:3b:75: 1a:af:47:68:c9:e3:e2:9a:bb:f8:03:5f:90:47:81: ba:9e:93:e6:f5:3d:94:0b:7c:cc:d0:ad:ad:ec:aa: 6c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FA:9D:43:6C:7A:9A:1A:33:3F:59:F1:B3:71:30:A2:0D:8D:32:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d97ef7de-aa5a-31b8-b019-d825d95a6bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5a:2d:bb:d6:ad:86:9b:59:44:2f:d0:75:4e:79:6e:e4:66: 2c:01:82:ea:8f:a9:05:a9:6c:78:52:7e:be:c7:9d:cd:d2:4b: ba:9c:1e:93:aa:2d:67:87:fb:59:f5:9e:ba:97:81:b7:10:13: 00:22:ba:d4:7d:71:0f:00:da:10:c2:e4:48:e2:04:92:f9:a4: e5:8d:36:76:a3:6a:5f:33:cc:b3:99:ad:0b:75:2b:39:74:eb: c2:51:dc:40:b7:54:7c:0d:38:65:21:4a:a9:4a:d8:82:c4:42: ea:57:fb:d9:a8:5c:af:07:b5:c2:49:8c:cb:a4:16:69:1b:87: 1c:60:42:f9:09:e9:56:8b:ce:bc:ae:28:d7:a1:19:62:c2:ec: 7d:a3:b9:9b:c4:82:61:d1:7e:02:f7:da:71:7a:e8:35:89:73: 3a:f0:f2:4a:58:50:c7:a5:df:d6:72:7f:85:ac:6f:69:46:42: 2c:37:c7:19:cf:e5:48:ef:7d:3a:5e:5d:1d:54:03:b4:ca:7b: 86:eb:d3:7f:ad:9c:ad:0d:10:37:78:30:a0:b7:1f:51:02:5a: 4f:96:4f:49:c6:c9:e4:5a:3f:84:9f:f4:0b:95:ea:e7:fe:79: 62:3b:87:19:5f:24:99:ea:56:8a:a0:b4:46:4f:a1:cf:f1:14: e0:d4:71:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSES0TiTVvvi/bsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NWIxZjAyNDItY2I2Yi00ZDU5LWI1OGUtYmZmNGVkM2Y3ZjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnXLmkJ0Gvlh02sRTnlERJidzCA1aSJYTaJF bGRcfO0lSuJVylHfnpYzvnNHaRgFo0Pt0+nqkXBBFIPAwumkIYw1UpA1uJRHt13l 5cSaETICxvpMIzkGgHyjC52b93jI0drpwPL4V+EZ1V+xoBzO1Tsyz9A8cESwdmQu cswfvpTGqRLFr8sOsPxgAp9aC3MZyfQyvpVBR3luAQKMiBP2FdfQPN9330uQo78+ F7nXTsYxn2q9DUX+fg7aDPSdt9p+4UcKIf69ZDpwksBHdZEGayBoEGO0+1bmoNaL bLQcO3Uar0doyePimrv4A1+QR4G6npPm9T2UC3zM0K2t7Kps8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX6nUNsepoaMz9Z8bNxMKINjTIwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDk3ZWY3ZGUtYWE1YS0z MWI4LWIwMTktZDgyNWQ5NWE2YmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0f/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1aLbvWrYabWUQv0HVOeW7kZiwBguqPqQWpbHhSfr7Hnc3SS7qcHpOq LWeH+1n1nrqXgbcQEwAiutR9cQ8A2hDC5EjiBJL5pOWNNnajal8zzLOZrQt1Kzl0 68JR3EC3VHwNOGUhSqlK2ILEQupX+9moXK8HtcJJjMukFmkbhxxgQvkJ6VaLzryu KNehGWLC7H2juZvEgmHRfgL32nF66DWJczrw8kpYUMel39Zyf4Wsb2lGQiw3xxnP 5UjvfTpeXR1UA7TKe4br03+tnK0NEDd4MKC3H1ECWk+WT0nGyeRaP4Sf9AuV6uf+ eWI7hxlfJJnqVoqgtEZPoc/xFODUcfA= -----END CERTIFICATE-----Generated at Mon Apr 7 11:58:17 2025 by rpki-client