$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa File: e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa (raw, json) Hash identifier: EFIuHZMXhjtxE1/m/2xL8Q5nfj0PB6rnpg3nhKMvbrg= Subject key identifier: 12:FE:FF:47:9E:E4:B5:5F:53:13:A8:4C:2B:C8:D9:07:44:BB:4D:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584867FAED98E716645F6BA70A40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa Signing time: Thu 02 Jan 2025 02:00:39 +0000 ROA not before: Thu 02 Jan 2025 02:00:39 +0000 ROA not after: Wed 02 Apr 2025 01:00:39 +0000 asID: 7029 IP address blocks: 209.83.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:67:fa:ed:98:e7:16:64:5f:6b:a7:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jan 2 02:00:39 2025 GMT Not After : Apr 2 01:00:39 2025 GMT Subject: CN=1997f09e-7559-4c6c-b510-ffada0482035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:20:e4:56:eb:08:b7:3c:e7:7e:b4:1d:34:8d: df:43:2c:6e:21:6a:66:4d:66:59:63:7d:8b:f0:9a: 12:41:d4:4a:14:1f:e1:3e:4f:6e:10:5f:de:86:ca: a1:fe:29:6a:e3:ea:3b:3e:3d:6b:6d:d0:0f:87:b1: 66:69:f3:83:e6:18:3a:4a:23:5d:15:f9:54:07:42: e6:72:9a:d8:eb:dd:d9:5b:21:6c:2f:8c:b4:86:ba: 31:6f:01:70:38:e2:83:d6:e2:94:14:83:d9:aa:9c: 95:b0:d5:aa:6c:72:b6:f8:12:68:d9:8e:13:94:9c: 51:51:a8:98:f0:bf:c4:50:e9:18:ad:9b:d6:72:5c: 78:15:a8:36:f5:96:6d:59:64:5f:e6:84:ed:e3:27: f0:93:69:cc:d4:4e:18:21:7c:c0:9e:c6:b9:bc:c9: e9:97:cd:ff:83:77:95:9b:2d:f0:af:02:7e:1d:25: f4:24:ad:05:08:4c:8d:9e:b5:c6:3b:0f:18:b4:2a: 43:8c:7b:d2:cc:70:05:40:53:c1:15:1a:3b:a7:8f: df:aa:c7:f6:cf:da:bc:df:d5:37:85:5d:7a:3b:1e: d0:f2:5b:8d:69:5e:88:a8:52:13:07:bb:0b:fa:75: 25:72:db:bb:4c:c2:13:5c:b3:22:59:17:70:a2:9f: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FE:FF:47:9E:E4:B5:5F:53:13:A8:4C:2B:C8:D9:07:44:BB:4D:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e687d499-0b9f-30f6-ae9c-b7ee3cf38f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.83.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:88:e5:8a:17:26:ed:0c:fc:de:5b:77:fa:e9:27:e0:b0:db: bb:41:72:02:80:f9:bd:63:fd:5f:6d:96:29:0c:4e:bc:fe:57: 7e:30:6a:ee:af:63:7e:6d:5c:0c:89:40:5d:a4:a8:03:4f:d4: 16:9a:8f:d0:58:c7:91:97:f7:e9:37:35:9a:b3:f2:eb:76:82: 56:1b:e6:02:13:21:11:15:18:60:0a:0d:cc:be:12:11:c1:77: 08:c4:8b:aa:89:ce:2a:58:9a:76:a4:aa:78:f5:03:13:80:e1: cd:cc:85:de:3b:b4:4b:af:d6:e2:22:92:a7:22:c6:bc:f0:53: b6:70:61:26:6a:bb:0d:28:14:9e:ab:aa:73:74:00:d3:8c:b1: c3:76:c8:72:31:27:9c:05:70:0e:10:f4:a3:5c:9b:bf:b6:51: b5:8f:85:9c:58:f9:cf:88:9f:30:31:38:d9:b5:fd:dc:96:36: 20:b7:db:c4:d9:82:83:01:5c:a4:85:6f:ea:4b:9f:1b:d4:40: 44:aa:d9:f5:ad:3a:ec:7a:8d:2a:9c:4d:76:b8:e9:32:b6:78: d0:31:e9:f2:6f:c5:87:c8:d5:08:d0:90:62:56:ee:15:2d:81: 26:41:fd:f3:2a:bc:b6:77:6a:3c:00:20:1a:d2:79:70:3f:0a: 8b:87:28:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhn+u2Y5xZkX2unCkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDEwMjAyMDAzOVoXDTI1MDQwMjAxMDAzOVowLzEtMCsGA1UEAxMk MTk5N2YwOWUtNzU1OS00YzZjLWI1MTAtZmZhZGEwNDgyMDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiDkVusItzznfrQdNI3fQyxuIWpmTWZZY32L 8JoSQdRKFB/hPk9uEF/ehsqh/ilq4+o7Pj1rbdAPh7FmafOD5hg6SiNdFflUB0Lm cprY693ZWyFsL4y0hroxbwFwOOKD1uKUFIPZqpyVsNWqbHK2+BJo2Y4TlJxRUaiY 8L/EUOkYrZvWclx4Fag29ZZtWWRf5oTt4yfwk2nM1E4YIXzAnsa5vMnpl83/g3eV my3wrwJ+HSX0JK0FCEyNnrXGOw8YtCpDjHvSzHAFQFPBFRo7p4/fqsf2z9q839U3 hV16Ox7Q8luNaV6IqFITB7sL+nUlctu7TMITXLMiWRdwop8rkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBL+/0ee5LVfUxOoTCvI2QdEu03LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY4N2Q0OTktMGI5Zi0z MGY2LWFlOWMtYjdlZTNjZjM4ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+I5YoXJu0M/N5bd/rpJ+Cw27tBcgKA+b1j/V9tlikMTrz+V34wau6v Y35tXAyJQF2kqANP1Baaj9BYx5GX9+k3NZqz8ut2glYb5gITIREVGGAKDcy+EhHB dwjEi6qJzipYmnakqnj1AxOA4c3Mhd47tEuv1uIikqcixrzwU7ZwYSZquw0oFJ6r qnN0ANOMscN2yHIxJ5wFcA4Q9KNcm7+2UbWPhZxY+c+InzAxONm1/dyWNiC328TZ goMBXKSFb+pLnxvUQESq2fWtOux6jSqcTXa46TK2eNAx6fJvxYfI1QjQkGJW7hUt gSZB/fMqvLZ3ajwAIBrSeXA/CouHKMA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:12 2025 by rpki-client