$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa File: dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa (raw, json) Hash identifier: +ROVOoxf+66IeY2J04wQ7rVHaZn76iUba5Ttn1ImrDw= Subject key identifier: F6:20:84:53:E1:13:48:21:AA:96:CA:B1:A3:D7:4B:F4:E7:7C:0E:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21125BF4DFF26FD21C54900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 207.59.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:25:bf:4d:ff:26:fd:21:c5:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=69100830-09c0-4c75-8d12-9ae83c045489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:4f:a2:5c:a3:85:62:0d:ea:a3:1b:02:c8: df:e9:de:98:2a:b5:0c:df:5a:37:98:6c:6c:1e:d8: e5:1e:80:f5:8f:ae:34:d3:c3:bb:5e:d9:22:ed:c5: a3:e4:f1:2e:e4:f4:36:91:cd:cd:13:08:46:18:e2: 1c:1d:38:f5:a6:cc:a5:65:d8:9d:de:5c:7c:e9:06: c0:02:fa:25:4a:41:3c:cd:b9:a5:f8:f5:56:9f:67: 45:c4:b2:d6:42:ff:db:ee:96:23:60:7f:f6:5d:38: 30:5a:1f:f7:92:7b:30:7b:a1:7f:3f:b9:25:bc:be: 20:ea:44:0d:4e:ec:bb:f6:de:f1:eb:89:a3:52:e8: d5:91:ce:61:22:09:c7:85:0f:0b:ce:40:73:5c:18: fe:49:09:e3:89:19:25:bd:74:bc:2d:08:5c:1c:c4: c3:6e:fd:d7:51:24:b2:09:e7:87:fc:e6:d4:9b:a9: 44:53:7a:8b:44:86:d1:25:5a:b8:68:5a:f3:16:87: cd:f3:0b:a9:b7:5c:0d:48:4d:12:8d:93:c5:d4:3a: 29:5f:87:d4:9c:15:1c:01:5e:3d:8a:3d:d7:e3:13: d2:66:0d:31:f6:00:8a:af:a0:db:5a:65:14:4e:cb: a5:a7:f5:8b:0b:d6:47:b9:c1:60:dd:ec:0e:ec:4b: 2f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:20:84:53:E1:13:48:21:AA:96:CA:B1:A3:D7:4B:F4:E7:7C:0E:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dab53c89-6c1e-3b4d-8d1c-41ca2b54bd3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.59.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d8:7f:f4:b4:4f:06:f5:1f:ef:54:35:58:80:3f:23:88:4e: 16:28:72:d3:2e:99:c1:f9:bd:78:19:67:01:1e:36:f3:31:89: 8b:50:57:93:37:5f:1f:90:42:c0:fd:b9:0f:f4:1f:75:43:6e: 5d:c1:d1:20:18:fd:01:a7:f6:42:c7:c7:86:a4:1d:ab:fb:c3: c6:5c:43:87:36:0a:9a:76:34:0a:fc:8e:48:3f:09:12:95:4a: ff:e0:fa:58:2f:d2:16:03:0a:92:3a:40:36:cb:b3:87:69:2c: 61:e4:1b:13:fa:34:ff:e3:5e:e5:3b:cb:21:e6:49:a8:17:a8: 7f:4a:bf:07:9c:df:9d:84:c3:36:8d:aa:2e:26:c4:99:46:92: 73:b2:cd:62:42:42:5f:11:82:79:ed:66:29:4c:6b:42:83:c4: 8f:06:5e:ca:02:e6:b8:24:23:3f:fc:61:36:3b:fd:be:6e:92: 74:6c:a1:94:db:70:a2:6c:ef:00:f7:db:c1:1e:b7:a7:1c:05: a7:a9:82:d9:91:bb:fb:eb:9f:d7:7d:a8:58:43:fb:e6:10:52: ee:96:e5:a9:f2:a4:71:5e:47:42:b6:ce:cf:ac:e1:a2:2e:a2: ae:0f:3e:59:6e:6a:b3:ce:e6:ef:4a:8f:59:46:bf:7a:52:0a: 87:6c:43:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESW/Tf8m/SHFSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NjkxMDA4MzAtMDljMC00Yzc1LThkMTItOWFlODNjMDQ1NDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/tPolyjhWIN6qMbAsjf6d6YKrUM31o3mGxs HtjlHoD1j64008O7Xtki7cWj5PEu5PQ2kc3NEwhGGOIcHTj1psylZdid3lx86QbA AvolSkE8zbml+PVWn2dFxLLWQv/b7pYjYH/2XTgwWh/3knswe6F/P7klvL4g6kQN Tuy79t7x64mjUujVkc5hIgnHhQ8LzkBzXBj+SQnjiRklvXS8LQhcHMTDbv3XUSSy CeeH/ObUm6lEU3qLRIbRJVq4aFrzFofN8wupt1wNSE0SjZPF1DopX4fUnBUcAV49 ij3X4xPSZg0x9gCKr6DbWmUUTsulp/WLC9ZHucFg3ewO7EsvbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYghFPhE0ghqpbKsaPXS/TnfA6GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFiNTNjODktNmMxZS0z YjRkLThkMWMtNDFjYTJiNTRiZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzuvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Yf/S0Twb1H+9UNViAPyOIThYoctMumcH5vXgZZwEeNvMxiYtQV5M3 Xx+QQsD9uQ/0H3VDbl3B0SAY/QGn9kLHx4akHav7w8ZcQ4c2Cpp2NAr8jkg/CRKV Sv/g+lgv0hYDCpI6QDbLs4dpLGHkGxP6NP/jXuU7yyHmSagXqH9Kvwec352EwzaN qi4mxJlGknOyzWJCQl8RgnntZilMa0KDxI8GXsoC5rgkIz/8YTY7/b5uknRsoZTb cKJs7wD328Eet6ccBaepgtmRu/vrn9d9qFhD++YQUu6W5anypHFeR0K2zs+s4aIu oq4PPlluarPO5u9Kj1lGv3pSCodsQ14= -----END CERTIFICATE-----Generated at Wed Apr 9 06:30:32 2025 by rpki-client