$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa File: db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa (raw, json) Hash identifier: 5kbFcnaVRC08qm1rGAv5c9Foc6DvGs9AQq48Yu+qBkI= Subject key identifier: 93:7C:F2:20:D5:EC:29:AB:F3:C3:C0:96:4B:4E:E7:E5:A4:15:28:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2111921768A878ECD993180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 63.255.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:19:21:76:8a:87:8e:cd:99:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=6a393d40-7315-47c7-a748-6eacb56d0184 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:e4:ea:af:36:d2:71:44:d2:17:9b:c8:18: e5:1a:91:82:e8:bc:ed:b6:65:88:00:7d:c2:f7:f9: 0b:0f:5f:c1:ec:af:20:ce:89:c1:9a:9c:2e:24:b1: 89:80:b0:28:41:a0:b7:e7:ea:f8:96:1a:77:e3:ce: 7a:79:11:dd:a1:27:f5:67:34:19:4a:59:06:23:3a: 80:3d:dc:76:d1:43:f7:73:33:be:09:73:cf:02:47: 41:de:8f:49:a8:80:da:d1:7a:1f:d8:b3:d8:e1:fa: 99:4e:cc:df:d6:f6:be:a3:80:e3:b6:82:c6:48:d8: 4d:18:13:3f:56:44:95:72:50:c4:fa:e2:36:17:35: 80:4b:a1:8f:b4:d4:54:a1:11:6b:9f:bd:6c:97:26: 7f:49:5f:f1:5e:4b:57:b9:6d:6a:dc:0f:41:3f:0b: 6f:16:4e:06:b8:39:23:ce:a6:bc:5a:b8:1e:83:b6: 08:08:7e:c8:c7:0b:42:a6:62:5f:33:76:58:09:18: f7:76:3b:72:7c:b7:99:0c:25:1c:12:bf:45:5e:f5: e0:79:3e:7d:f8:d4:7e:a2:07:a8:63:2c:2f:09:ff: 64:b4:b6:23:16:cf:7f:aa:82:4b:51:92:17:3e:15: ee:43:47:ca:e5:89:13:e8:7d:94:74:71:9e:97:c6: 76:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:7C:F2:20:D5:EC:29:AB:F3:C3:C0:96:4B:4E:E7:E5:A4:15:28:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1f8ff7-5e08-3727-83f3-f7fd47f5ce3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e9:c4:ef:44:c5:dc:b5:a6:87:09:13:b1:d4:ff:e8:19:ff: 63:b1:10:4b:d8:be:e0:8e:8e:81:d5:50:b4:35:0b:3b:ee:1d: 41:b3:58:25:03:ce:13:45:83:0d:66:ee:b0:89:7c:8c:a1:04: 71:33:8e:e7:74:c5:41:c4:10:96:1d:5c:1b:1e:98:2d:aa:73: f3:24:4f:8c:1b:92:db:52:f5:0b:fe:72:62:4e:9c:5b:d6:ac: 63:c8:88:c6:a4:9b:ba:0d:19:49:df:b2:a1:93:db:53:2f:f2: 3c:e7:c8:ef:eb:d4:51:3f:e0:b7:79:c8:e8:bb:09:de:29:84: 94:d0:fe:f7:6a:44:9e:2c:11:9e:62:3e:a3:24:ec:eb:e4:fa: 6d:61:bc:8d:a4:c2:f2:4f:26:ae:45:4c:92:14:cc:da:ae:12: 39:6e:15:06:21:f7:84:9f:d8:f5:2c:92:96:82:ba:9f:37:d8: 0f:80:ee:9d:11:94:f6:70:df:22:f7:db:c1:53:c1:f8:dd:c3: c1:57:12:5f:a6:fb:e9:d7:4d:0d:d2:da:3c:ac:ac:35:c5:fc: d1:d6:e5:e8:9a:54:02:bb:ea:e0:5e:63:73:8d:bb:bd:b8:03: bd:0a:e8:04:25:b1:60:49:03:dd:c0:f9:cc:56:1c:27:5d:a1: 24:6f:73:e0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjSERkhdoqHjs2ZMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk NmEzOTNkNDAtNzMxNS00N2M3LWE3NDgtNmVhY2I1NmQwMTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyrk6q820nFE0hebyBjlGpGC6LzttmWIAH3C 9/kLD1/B7K8gzonBmpwuJLGJgLAoQaC35+r4lhp34856eRHdoSf1ZzQZSlkGIzqA Pdx20UP3czO+CXPPAkdB3o9JqIDa0Xof2LPY4fqZTszf1va+o4DjtoLGSNhNGBM/ VkSVclDE+uI2FzWAS6GPtNRUoRFrn71slyZ/SV/xXktXuW1q3A9BPwtvFk4GuDkj zqa8Wrgeg7YICH7IxwtCpmJfM3ZYCRj3djtyfLeZDCUcEr9FXvXgeT59+NR+ogeo YywvCf9ktLYjFs9/qoJLUZIXPhXuQ0fK5YkT6H2UdHGel8Z2AwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJN88iDV7Cmr88PAlktO5+WkFSh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIxZjhmZjctNWUwOC0z NzI3LTgzZjMtZjdmZDQ3ZjVjZTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAP/8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACenE70TF3LWmhwkTsdT/6Bn/Y7EQS9i+4I6OgdVQtDULO+4dQbNYJQPO E0WDDWbusIl8jKEEcTOO53TFQcQQlh1cGx6YLapz8yRPjBuS21L1C/5yYk6cW9as Y8iIxqSbug0ZSd+yoZPbUy/yPOfI7+vUUT/gt3nI6LsJ3imElND+92pEniwRnmI+ oyTs6+T6bWG8jaTC8k8mrkVMkhTM2q4SOW4VBiH3hJ/Y9SySloK6nzfYD4DunRGU 9nDfIvfbwVPB+N3DwVcSX6b76ddNDdLaPKysNcX80dbl6JpUArvq4F5jc427vbgD vQroBCWxYEkD3cD5zFYcJ12hJG9z4A== -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:39 2025 by rpki-client