$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa File: deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa (raw, json) Hash identifier: U9aT4qZtw1sfC1ooTop5u4vMqWbzUdr19Z9RgwM8m74= Subject key identifier: DB:FF:D7:72:94:48:48:E8:C6:43:97:FA:B4:57:86:FB:31:99:9B:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848CDE11FD8EDBE81139D87E920 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa Signing time: Fri 07 Feb 2025 14:00:53 +0000 ROA not before: Fri 07 Feb 2025 14:00:53 +0000 ROA not after: Thu 08 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 151.213.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cd:e1:1f:d8:ed:be:81:13:9d:87:e9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 7 14:00:53 2025 GMT Not After : May 8 13:00:53 2025 GMT Subject: CN=fcc4a612-dd8b-4f18-9971-4de659961466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f5:50:30:71:08:57:00:f7:14:b8:7f:77:76: 5b:46:31:64:eb:66:d6:4c:bf:dc:10:1d:d0:79:00: 30:5a:ff:7b:a9:58:11:b0:22:d4:8f:c1:4c:b6:00: d5:ee:a3:02:34:32:12:93:1b:f8:40:3f:1c:67:58: f4:da:2a:4e:ba:cd:2f:b1:7d:84:b4:88:7f:6c:c9: 2c:53:71:88:95:21:b8:15:b0:3d:40:4e:07:88:8a: de:88:80:06:7e:b6:7d:79:f6:c9:d4:50:6f:b1:3b: bc:6f:40:56:c2:43:1e:28:71:de:d1:df:41:2f:2d: 35:c9:d4:dd:27:e6:21:c9:dd:02:a0:78:8f:d3:07: 31:49:a6:75:3e:83:f1:13:85:ce:30:c3:0e:e1:67: 13:0e:6f:64:8f:f3:1f:a3:eb:01:f5:4f:38:16:9d: 1c:d1:2e:5e:e6:5c:54:19:19:68:d4:e2:51:28:30: 60:35:50:b2:b5:9b:8b:f2:51:2d:4a:21:81:c9:4d: 97:7d:90:92:69:ca:b8:b5:c8:76:fa:63:9d:5c:9b: e7:3f:4b:1e:a6:a9:a0:a0:69:d7:c0:6a:36:42:69: 82:bf:57:cc:4b:ee:94:c7:40:0e:f0:25:4e:9d:b8: a0:c6:ed:02:ee:9b:6f:70:1d:a5:d6:bc:ba:2e:48: 56:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:FF:D7:72:94:48:48:E8:C6:43:97:FA:B4:57:86:FB:31:99:9B:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/deb5dc56-a4cd-3efa-91bd-496c0cd50a5b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:2d:cb:67:d9:1e:80:ee:db:64:c9:c2:12:e4:88:d2:83:1f: 04:80:3d:6e:1a:12:cf:a9:1b:9f:45:43:18:02:21:03:4f:25: da:34:39:af:02:c6:90:43:45:70:f7:6f:a4:d1:57:af:84:c1: 0c:79:dc:eb:b9:78:d2:1b:9a:b4:c2:ae:77:b9:f8:ed:1d:92: f3:3b:08:bd:41:1a:3e:3a:e6:63:ef:68:d0:ae:68:36:3d:7f: 0e:f6:c6:40:4e:53:f7:d3:a5:fb:14:ae:de:30:51:91:54:70: 32:85:92:0e:78:5e:6e:29:e2:59:af:f1:b4:84:21:5b:d8:89: e3:32:bc:78:a2:65:67:d5:2b:39:82:26:f0:d5:90:8f:e5:89: ff:67:e5:12:c7:89:74:d4:72:90:1d:c4:4f:95:55:59:d9:bc: eb:b6:5f:03:ac:4a:eb:98:26:e5:3b:f5:67:b0:85:ae:2b:4f: 53:44:55:94:ce:65:69:f7:36:9a:4a:fe:5c:fc:f9:9f:e1:87: 08:e1:e1:15:3a:86:fe:0d:cd:88:57:87:10:d7:aa:a9:6f:f1: 06:cf:ec:ae:cf:5b:ae:d1:a9:c0:66:92:dd:1f:1e:fb:21:a7: fd:fa:df:33:51:fe:03:e6:2a:4f:bd:65:89:d1:63:68:06:e3: 9f:4d:4e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjN4R/Y7b6BE52H6SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwNzE0MDA1M1oXDTI1MDUwODEzMDA1M1owLzEtMCsGA1UEAxMk ZmNjNGE2MTItZGQ4Yi00ZjE4LTk5NzEtNGRlNjU5OTYxNDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPVQMHEIVwD3FLh/d3ZbRjFk62bWTL/cEB3Q eQAwWv97qVgRsCLUj8FMtgDV7qMCNDISkxv4QD8cZ1j02ipOus0vsX2EtIh/bMks U3GIlSG4FbA9QE4HiIreiIAGfrZ9efbJ1FBvsTu8b0BWwkMeKHHe0d9BLy01ydTd J+Yhyd0CoHiP0wcxSaZ1PoPxE4XOMMMO4WcTDm9kj/Mfo+sB9U84Fp0c0S5e5lxU GRlo1OJRKDBgNVCytZuL8lEtSiGByU2XfZCSacq4tch2+mOdXJvnP0sepqmgoGnX wGo2QmmCv1fMS+6Ux0AO8CVOnbigxu0C7ptvcB2l1ry6LkhW6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNv/13KUSEjoxkOX+rRXhvsxmZs7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGViNWRjNTYtYTRjZC0z ZWZhLTkxYmQtNDk2YzBjZDUwYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIty2fZHoDu22TJwhLkiNKDHwSAPW4aEs+pG59FQxgCIQNPJdo0Oa8C xpBDRXD3b6TRV6+EwQx53Ou5eNIbmrTCrne5+O0dkvM7CL1BGj465mPvaNCuaDY9 fw72xkBOU/fTpfsUrt4wUZFUcDKFkg54Xm4p4lmv8bSEIVvYieMyvHiiZWfVKzmC JvDVkI/lif9n5RLHiXTUcpAdxE+VVVnZvOu2XwOsSuuYJuU79Wewha4rT1NEVZTO ZWn3NppK/lz8+Z/hhwjh4RU6hv4NzYhXhxDXqqlv8QbP7K7PW67RqcBmkt0fHvsh p/363zNR/gPmKk+9ZYnRY2gG459NToI= -----END CERTIFICATE-----Generated at Fri Mar 14 08:34:04 2025 by rpki-client