$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa File: f08df877-a0a6-3b38-b4f7-a229952babc8.roa (raw, json) Hash identifier: AsTJgyFZGXkLHKhZdiCqfRRu5TAobhhEX3uhQornV88= Subject key identifier: 0F:F3:58:0D:1C:84:5E:60:A1:2D:C0:AB:38:47:E2:CB:7D:BE:66:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848E0069E9D2D542B9464A4D080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 71.30.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:9e:9d:2d:54:2b:94:64:a4:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=6a0a84ad-616b-4d29-8f46-439acee4508a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e7:22:57:fb:22:a3:3f:08:57:d7:a9:f1:ef: 46:b9:30:10:88:34:ec:f6:3d:94:c5:fd:fd:d1:a4: 2c:47:f8:bd:40:ef:99:1d:25:c0:e9:f8:f4:3c:67: fa:3f:1c:87:e4:71:46:dc:ba:04:c0:c7:c0:b8:3a: 70:be:e9:bb:0e:ac:ee:e0:70:70:9d:0d:5e:ab:65: c6:5c:af:b4:63:7e:77:e5:44:f6:09:a5:58:d7:74: e6:01:d1:00:37:8a:65:ee:40:2f:01:2c:52:52:ed: 7c:9a:3f:da:fe:34:89:18:39:12:c2:ea:45:b1:95: 7c:8e:4e:a1:da:47:3b:92:40:d5:25:bd:37:33:ac: 45:0f:20:54:58:a5:2a:08:25:d1:81:d1:65:5d:09: 16:0c:33:a9:61:6e:fd:45:00:a4:5f:e5:29:aa:df: 0f:d1:a4:6a:b2:ff:55:b8:2a:e3:bc:39:be:95:9a: 9d:0b:73:41:e6:6d:2b:11:2f:e2:a4:98:ff:29:4c: fe:ca:da:f8:31:4b:b6:da:65:d5:a7:d3:8d:a0:e8: 1b:af:02:e5:24:d1:16:11:7e:9d:60:ae:f0:04:fa: fb:ab:99:0f:3a:0f:1a:81:4f:12:27:c7:9b:4c:fc: 31:e2:20:9c:1c:0e:4a:36:86:39:9f:52:b5:b9:95: e1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:F3:58:0D:1C:84:5E:60:A1:2D:C0:AB:38:47:E2:CB:7D:BE:66:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:82:c0:43:7a:b7:ba:2d:16:e9:41:31:60:24:56:c2:7e:1b: 2a:73:1e:cd:1c:a3:23:66:ed:ef:56:0a:bd:68:8b:a0:17:d5: 11:d3:1a:1d:ce:b8:cc:2a:cf:33:93:84:50:69:2a:ac:26:11: 32:b7:6a:18:c7:ba:4d:3b:43:6c:09:75:99:58:c9:d5:e6:6a: 1e:94:ce:05:63:74:f6:1d:cc:f6:5b:43:78:66:56:1a:0a:dc: 3f:4a:2b:be:b9:39:89:2c:b3:a3:20:3c:63:93:9e:2f:bd:d7: 29:ea:88:41:18:63:2c:06:30:99:e2:05:0c:4a:3f:dc:93:7f: 41:f6:dc:88:55:ae:80:f0:2a:89:dc:ec:e8:56:5c:57:bd:6a: ce:cb:ac:cb:ea:29:cb:84:39:50:7c:45:2a:f0:4f:24:52:00: 36:ea:d1:08:17:9d:e6:1b:3c:73:0f:4d:6a:04:d6:32:50:0f: 8c:e4:2d:41:83:78:ef:5c:36:04:e8:b3:5d:77:06:2d:b0:d7: db:ab:94:29:7b:1a:f1:33:fd:d8:42:e4:4f:d8:d3:f7:5c:b6: df:17:44:03:57:b7:8b:8d:2d:89:43:8c:70:05:90:3c:f6:3f: 68:ef:88:ad:49:12:5b:89:56:29:1a:76:af:1a:a4:78:d5:89: 7c:a4:bd:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjgBp6dLVQrlGSk0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk NmEwYTg0YWQtNjE2Yi00ZDI5LThmNDYtNDM5YWNlZTQ1MDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeciV/sioz8IV9ep8e9GuTAQiDTs9j2Uxf39 0aQsR/i9QO+ZHSXA6fj0PGf6PxyH5HFG3LoEwMfAuDpwvum7Dqzu4HBwnQ1eq2XG XK+0Y3535UT2CaVY13TmAdEAN4pl7kAvASxSUu18mj/a/jSJGDkSwupFsZV8jk6h 2kc7kkDVJb03M6xFDyBUWKUqCCXRgdFlXQkWDDOpYW79RQCkX+Upqt8P0aRqsv9V uCrjvDm+lZqdC3NB5m0rES/ipJj/KUz+ytr4MUu22mXVp9ONoOgbrwLlJNEWEX6d YK7wBPr7q5kPOg8agU8SJ8ebTPwx4iCcHA5KNoY5n1K1uZXh4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/zWA0chF5goS3AqzhH4st9vmZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjA4ZGY4NzctYTBhNi0z YjM4LWI0ZjctYTIyOTk1MmJhYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWCwEN6t7otFulBMWAkVsJ+GypzHs0coyNm7e9WCr1oi6AX1RHTGh3O uMwqzzOThFBpKqwmETK3ahjHuk07Q2wJdZlYydXmah6UzgVjdPYdzPZbQ3hmVhoK 3D9KK765OYkss6MgPGOTni+91ynqiEEYYywGMJniBQxKP9yTf0H23IhVroDwKonc 7OhWXFe9as7LrMvqKcuEOVB8RSrwTyRSADbq0QgXneYbPHMPTWoE1jJQD4zkLUGD eO9cNgTos113Bi2w19urlCl7GvEz/dhC5E/Y0/dctt8XRANXt4uNLYlDjHAFkDz2 P2jviK1JEluJVikadq8apHjViXykvTk= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:33 2025 by rpki-client