$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa File: f214b74c-400e-3cf1-b976-685a01ebde20.roa (raw, json) Hash identifier: 8AQ2gSR+JyueOtYswIVmSAyTW4qBieXLA2HPhOLqiw8= Subject key identifier: C9:12:0A:BB:C5:D7:2F:31:1B:9F:47:0C:C3:AD:E8:F0:7D:39:37:84 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D2113122C270310D2C830600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 53610 IP address blocks: 63.252.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:31:22:c2:70:31:0d:2c:83:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=0fb3cbec-a8a1-4a19-ad91-f048cd6d21a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:d0:5a:1b:0a:89:09:4e:da:bf:10:13:44: 65:c0:c1:6a:24:64:b4:dc:03:f0:09:36:4c:5a:d6: 0d:5f:b0:17:ad:68:b5:ab:06:45:35:60:a1:ff:ae: ee:0a:3a:ab:8b:b5:d7:c5:7c:5e:ae:0c:9e:ae:0a: 3c:34:41:d3:99:77:b1:0e:b1:74:9b:ec:27:a0:f4: f4:7a:8c:5f:2f:d0:dc:f5:df:25:a0:e2:c2:df:75: fa:9a:6d:c6:44:47:ce:1d:e1:06:a5:a5:14:13:1a: f0:9f:2c:87:c9:85:23:94:58:45:c0:6a:ca:4c:45: d1:fd:7a:56:d8:1e:19:35:a3:5b:83:20:31:3f:16: e7:86:c3:ff:16:3d:1a:88:3d:1b:91:8e:c9:14:73: af:71:e5:41:98:1e:c2:24:af:82:9b:5d:de:34:29: 35:9c:54:d0:a8:87:1d:69:fa:af:04:02:b4:8e:76: 27:4c:b9:08:3f:a3:91:9b:6b:0f:cf:a0:91:40:d2: fa:0f:ed:f7:36:fd:79:2a:da:3b:04:0d:3b:b0:64: a0:59:50:b2:1f:ad:e8:a8:d1:90:f2:51:95:19:0d: c1:96:cb:7b:d8:f3:d6:72:b3:00:6d:8e:9e:3d:42: 9f:1f:29:73:14:f4:b9:2c:d2:a7:2c:4f:54:f9:ea: ef:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:12:0A:BB:C5:D7:2F:31:1B:9F:47:0C:C3:AD:E8:F0:7D:39:37:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.252.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:56:29:f7:6a:96:88:0a:e7:64:87:57:9e:15:ef:26:db:a5: 37:35:89:35:54:d7:eb:34:6f:4c:9f:54:00:d1:0c:38:af:eb: 27:1c:94:62:7f:08:de:47:ff:a8:11:d5:17:ef:8f:6b:ab:a5: 94:3d:e1:7e:90:16:6d:9f:c9:96:5b:1c:4b:65:81:f5:8a:33: 20:10:f4:1d:e3:50:0a:08:97:8b:5e:21:b2:73:dc:ac:1a:32: 1b:ce:6a:1e:e8:29:8f:09:5f:b0:b4:1b:4a:26:e7:13:dc:25: 58:00:61:37:1c:87:09:9c:fb:4e:54:9f:f7:a4:ec:94:85:f3: b6:09:06:7d:39:da:6a:d0:94:22:05:3a:7e:24:13:fb:2d:a9: 50:d5:3e:1f:32:7e:98:47:dc:51:ee:32:31:c6:01:1a:60:85: 83:2a:e3:9d:f1:07:4d:5c:78:5e:1a:b5:88:be:6a:b2:9d:cb: 81:b6:73:72:47:fb:f6:25:76:20:71:db:d6:5b:fd:c3:a1:51: e1:b8:a8:c4:ff:56:cb:df:a8:33:67:43:6f:c3:7b:be:8c:cf: 82:77:bb:cf:57:5e:2d:1f:86:6c:e9:be:7e:d7:4e:d1:11:a6: fb:4c:d7:df:4b:1c:33:ea:a2:82:2e:45:06:20:b8:43:ff:58: 52:99:fa:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSETEiwnAxDSyDBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MGZiM2NiZWMtYThhMS00YTE5LWFkOTEtZjA0OGNkNmQyMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRvQWhsKiQlO2r8QE0RlwMFqJGS03APwCTZM WtYNX7AXrWi1qwZFNWCh/67uCjqri7XXxXxergyergo8NEHTmXexDrF0m+wnoPT0 eoxfL9Dc9d8loOLC33X6mm3GREfOHeEGpaUUExrwnyyHyYUjlFhFwGrKTEXR/XpW 2B4ZNaNbgyAxPxbnhsP/Fj0aiD0bkY7JFHOvceVBmB7CJK+Cm13eNCk1nFTQqIcd afqvBAK0jnYnTLkIP6ORm2sPz6CRQNL6D+33Nv15Kto7BA07sGSgWVCyH63oqNGQ 8lGVGQ3Blst72PPWcrMAbY6ePUKfHylzFPS5LNKnLE9U+ervbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkSCrvF1y8xG59HDMOt6PB9OTeEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIxNGI3NGMtNDAwZS0z Y2YxLWI5NzYtNjg1YTAxZWJkZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9WKfdqlogK52SHV54V7ybbpTc1iTVU1+s0b0yfVADRDDiv6ycclGJ/ CN5H/6gR1Rfvj2urpZQ94X6QFm2fyZZbHEtlgfWKMyAQ9B3jUAoIl4teIbJz3Kwa MhvOah7oKY8JX7C0G0om5xPcJVgAYTcchwmc+05Un/ek7JSF87YJBn052mrQlCIF On4kE/stqVDVPh8yfphH3FHuMjHGARpghYMq453xB01ceF4atYi+arKdy4G2c3JH +/YldiBx29Zb/cOhUeG4qMT/VsvfqDNnQ2/De76Mz4J3u89XXi0fhmzpvn7XTtER pvtM199LHDPqooIuRQYguEP/WFKZ+us= -----END CERTIFICATE-----Generated at Mon Apr 7 11:50:09 2025 by rpki-client