$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e22580c7-dc39-3c87-8291-39f8582fca6b.roa File: e22580c7-dc39-3c87-8291-39f8582fca6b.roa (raw, json) Hash identifier: YtpDw5eMTaN4M6AbthFXwYZYZj/92au/38QlfuACBKI= Subject key identifier: 2D:1F:60:79:61:15:1B:6E:1B:32:27:04:CA:AB:45:80:ED:12:4C:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848BFEBDA384947E618BD777590 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e22580c7-dc39-3c87-8291-39f8582fca6b.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 7029 IP address blocks: 173.188.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:da:38:49:47:e6:18:bd:77:75:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=fabc0c42-7dc8-4a6b-be8d-60211e3639cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4d:a4:f9:6a:4f:ae:3f:5f:88:32:50:8c:d2: 26:0b:7d:80:08:a7:7d:f0:49:d7:af:86:a5:e2:be: 2a:c6:ce:72:06:eb:b2:9f:5b:54:ad:80:f5:3e:b9: ef:68:37:81:cd:dd:29:7e:db:60:9b:05:ef:03:20: 29:9b:dd:2f:cc:db:30:5b:1e:26:16:ea:b0:d1:a3: 88:af:e7:21:7e:1d:f9:16:61:63:5e:5f:26:45:44: ea:4a:46:53:c5:cb:04:a0:b8:46:5f:2b:a4:3b:65: 72:77:c5:93:a0:f9:6c:2f:de:eb:42:2f:f7:59:19: fd:de:1a:25:bd:9a:50:d0:09:bc:06:e4:f3:2d:ea: 59:fc:8b:18:d4:cf:27:c7:57:33:51:40:43:e0:87: 5a:da:76:5a:2b:ae:d4:9a:ea:80:b7:0c:d3:f1:09: cd:4f:d7:63:e7:73:82:d2:b8:20:39:c0:79:f4:7c: 5b:93:3b:c2:ef:7e:b9:7f:ff:46:77:13:2c:d9:64: ee:ad:bb:aa:9b:87:32:9f:ea:fc:a9:44:ba:c9:9d: 8c:d7:68:97:8e:b4:cc:64:d7:20:b1:68:87:b5:68: c7:84:c7:d6:1d:2f:51:4a:ef:7f:fd:a5:ec:39:5b: bd:4d:fa:a0:f1:de:67:e5:2c:91:c6:2b:b7:13:49: 69:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1F:60:79:61:15:1B:6E:1B:32:27:04:CA:AB:45:80:ED:12:4C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e22580c7-dc39-3c87-8291-39f8582fca6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.188.178.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:58:a4:da:9d:db:6c:ab:d6:16:6d:00:29:f9:ab:3c:50:00: d9:51:fe:b3:e6:30:67:f9:c2:1b:2a:3b:c1:35:fb:4a:1c:e9: e5:9c:1a:e6:07:8e:ac:1e:6a:86:ea:e6:5a:60:60:40:6f:7d: 4f:c7:53:57:8a:80:9b:51:ff:83:0c:1a:ac:8e:ad:f9:62:66: 3a:fe:13:d0:3a:64:88:15:1a:83:ea:fd:91:d0:3c:1a:f5:0a: ec:99:78:85:89:1a:5a:a2:05:3b:3c:16:7c:07:52:5b:03:8a: d7:37:03:d8:bb:fd:0c:0c:da:3c:0d:27:1e:8d:5c:cd:ba:1d: a3:40:da:da:4c:02:e1:21:8c:df:fa:b2:cf:44:0c:3b:28:f9: 3f:4e:6f:9c:8b:2d:c8:b9:e4:76:4b:d4:6a:3c:aa:56:6e:00: 1a:09:59:58:85:a6:cc:b1:29:ca:85:16:eb:eb:fc:3d:ac:01: 20:98:3a:c1:22:85:e4:f3:37:46:03:bf:c6:dc:12:08:ec:af: 37:a2:2e:c1:4d:db:1f:5c:f7:f2:4a:fa:33:27:86:f5:26:62: 68:60:83:b9:6e:a8:15:71:ae:ea:d9:18:56:dc:b2:52:83:eb: 78:f6:1e:36:a6:aa:53:2d:c6:1e:53:27:5a:da:18:e1:a2:14: af:88:e1:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69o4SUfmGL13dZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk ZmFiYzBjNDItN2RjOC00YTZiLWJlOGQtNjAyMTFlMzYzOWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApE2k+WpPrj9fiDJQjNImC32ACKd98EnXr4al 4r4qxs5yBuuyn1tUrYD1PrnvaDeBzd0pfttgmwXvAyApm90vzNswWx4mFuqw0aOI r+chfh35FmFjXl8mRUTqSkZTxcsEoLhGXyukO2Vyd8WToPlsL97rQi/3WRn93hol vZpQ0Am8BuTzLepZ/IsY1M8nx1czUUBD4Ida2nZaK67UmuqAtwzT8QnNT9dj53OC 0rggOcB59HxbkzvC7365f/9GdxMs2WTurbuqm4cyn+r8qUS6yZ2M12iXjrTMZNcg sWiHtWjHhMfWHS9RSu9//aXsOVu9Tfqg8d5n5SyRxiu3E0lp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0fYHlhFRtuGzInBMqrRYDtEkznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTIyNTgwYzctZGMzOS0z Yzg3LTgyOTEtMzlmODU4MmZjYTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbyyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxYpNqd22yr1hZtACn5qzxQANlR/rPmMGf5whsqO8E1+0oc6eWcGuYH jqweaobq5lpgYEBvfU/HU1eKgJtR/4MMGqyOrfliZjr+E9A6ZIgVGoPq/ZHQPBr1 CuyZeIWJGlqiBTs8FnwHUlsDitc3A9i7/QwM2jwNJx6NXM26HaNA2tpMAuEhjN/6 ss9EDDso+T9Ob5yLLci55HZL1Go8qlZuABoJWViFpsyxKcqFFuvr/D2sASCYOsEi heTzN0YDv8bcEgjsrzeiLsFN2x9c9/JK+jMnhvUmYmhgg7luqBVxrurZGFbcslKD 63j2HjamqlMtxh5TJ1raGOGiFK+I4bE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:29:33 2025 by rpki-client