$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa File: e69787f3-2ec1-3f53-901b-4da1c04da846.roa (raw, json) Hash identifier: MoQVDdDY/qOGPSh7E+LDEFoe6sENrVNFTWZWmrWVUyI= Subject key identifier: FA:4A:DE:A6:34:87:2E:56:71:9C:34:09:29:22:3A:D8:EE:C5:2D:3B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21117E9C2D3D532FCFBEC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 40.141.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:17:e9:c2:d3:d5:32:fc:fb:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=effa7edc-8f44-44a4-b8bc-90553c584208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:91:ce:9b:d9:a9:e4:7a:12:67:af:19:b3:8c: 23:b0:29:43:bd:fd:9b:8a:bf:e6:89:5a:b2:4a:4d: 59:35:bb:6a:4f:26:ad:ec:fb:88:7b:0b:21:71:f9: 95:af:11:c2:99:e4:14:d9:5b:7c:4d:f1:eb:b0:b8: 13:ed:22:c4:5f:19:84:63:36:bc:58:59:77:65:62: 99:8e:f9:f3:02:08:e7:b6:9b:2f:64:29:94:42:04: 84:c7:b9:5e:17:a7:56:d9:82:a2:77:8b:58:77:a3: 00:84:04:4d:83:45:9c:ab:d7:bf:4b:30:0e:f8:fa: 27:16:8c:6d:ef:bd:e9:59:95:dc:24:6f:68:b7:a4: 85:ee:46:87:6e:6d:5b:4b:c5:51:98:3a:05:dd:fa: 8a:89:83:8f:81:61:6b:b2:9a:23:2e:06:d5:af:6d: 9a:b0:60:21:5f:c6:09:da:3b:cb:67:31:03:bb:4b: e9:34:91:a8:15:e6:95:65:14:59:41:7b:81:45:15: 86:66:e0:ef:6a:fa:74:42:26:2b:9f:a3:fa:97:99: 9f:2f:1c:88:00:5b:d0:ca:21:c7:f1:9a:cc:6c:19: e4:91:81:f8:b7:ad:48:63:cd:7d:bd:d1:d9:03:51: ba:f6:d9:7a:7e:24:20:de:17:6f:32:43:fb:19:36: 77:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:4A:DE:A6:34:87:2E:56:71:9C:34:09:29:22:3A:D8:EE:C5:2D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e69787f3-2ec1-3f53-901b-4da1c04da846.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.141.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:40:d4:fb:57:13:0f:f9:d3:a6:e7:78:bd:37:80:66:86:9f: 83:69:85:59:2c:12:f0:42:f2:57:e5:f8:7c:72:8a:d7:59:e4: 07:7f:13:f3:f5:dc:d5:b3:f4:1a:00:b0:50:a0:93:e6:91:f4: 85:18:54:5a:66:52:6a:5b:50:ee:10:65:1a:fc:dc:ea:4c:b2: 43:a3:94:e9:03:0d:a0:0a:a2:bd:0c:4b:db:b3:28:d3:a3:b7: 19:8e:a2:d6:64:33:ee:4d:89:4c:4c:12:4a:d3:03:97:a1:d6: 15:e9:39:34:d1:b9:0d:6d:49:b8:f2:0c:b0:0f:e8:26:42:9b: 2d:28:78:aa:c5:5b:b8:3e:b4:32:c6:81:39:99:39:61:ea:14: 1e:bb:cc:02:f8:4e:0a:bb:00:1e:bf:66:90:93:cc:3c:67:d5: 4b:c2:95:31:5f:b7:12:c1:7e:40:bc:e9:8d:fc:f4:75:59:fc: 0d:75:1c:ae:85:96:96:9c:4e:48:1f:13:d8:e0:fe:9b:e6:60: de:56:42:34:5c:55:bc:9a:d8:ad:fc:db:3c:b5:52:c9:7f:11: 4e:ab:e8:cd:5d:37:93:d4:c3:1f:7f:dc:85:0e:fc:53:f0:04: fe:9d:63:77:8b:90:b7:e4:f6:1c:3c:36:a8:2e:7d:7e:c8:a2: f3:9c:bf:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSERfpwtPVMvz77AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk ZWZmYTdlZGMtOGY0NC00NGE0LWI4YmMtOTA1NTNjNTg0MjA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5HOm9mp5HoSZ68Zs4wjsClDvf2bir/miVqy Sk1ZNbtqTyat7PuIewshcfmVrxHCmeQU2Vt8TfHrsLgT7SLEXxmEYza8WFl3ZWKZ jvnzAgjntpsvZCmUQgSEx7leF6dW2YKid4tYd6MAhARNg0Wcq9e/SzAO+PonFoxt 773pWZXcJG9ot6SF7kaHbm1bS8VRmDoF3fqKiYOPgWFrspojLgbVr22asGAhX8YJ 2jvLZzEDu0vpNJGoFeaVZRRZQXuBRRWGZuDvavp0QiYrn6P6l5mfLxyIAFvQyiHH 8ZrMbBnkkYH4t61IY819vdHZA1G69tl6fiQg3hdvMkP7GTZ3cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpK3qY0hy5WcZw0CSkiOtjuxS07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTY5Nzg3ZjMtMmVjMS0z ZjUzLTkwMWItNGRhMWMwNGRhODQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAKI2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhA1PtXEw/506bneL03gGaGn4NphVksEvBC8lfl+HxyitdZ5Ad/E/P1 3NWz9BoAsFCgk+aR9IUYVFpmUmpbUO4QZRr83OpMskOjlOkDDaAKor0MS9uzKNOj txmOotZkM+5NiUxMEkrTA5eh1hXpOTTRuQ1tSbjyDLAP6CZCmy0oeKrFW7g+tDLG gTmZOWHqFB67zAL4Tgq7AB6/ZpCTzDxn1UvClTFftxLBfkC86Y389HVZ/A11HK6F lpacTkgfE9jg/pvmYN5WQjRcVbya2K382zy1Usl/EU6r6M1dN5PUwx9/3IUO/FPw BP6dY3eLkLfk9hw8NqgufX7IovOcvzY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:48 2025 by rpki-client