$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa File: f363de57-c40e-349f-b019-70a573f7e01a.roa (raw, json) Hash identifier: KbB6vHsOl8Jn9/qcIP7swm21A7ZkgfQ1qxx7tuJW0PI= Subject key identifier: E0:88:89:D4:66:6A:41:E4:80:7C:18:ED:0D:E6:82:BE:2B:0F:FD:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210FB6D722F8474A8173400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 216.235.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:fb:6d:72:2f:84:74:a8:17:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=22a92951-eb89-492f-b35d-0bdc27447077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:19:b1:3a:63:05:87:b8:25:c2:bf:71:10:22: 6f:27:e2:4f:31:a6:22:fc:ad:fc:5b:c6:d7:b3:7b: 61:6e:b0:57:e1:5a:a7:3b:ae:06:40:cd:b7:f2:77: 40:ca:6c:06:fd:a9:ec:72:85:c3:e7:10:ac:f3:d4: ee:de:61:fc:21:45:a5:13:dc:ab:2d:e1:d8:f0:23: 55:03:f5:8a:03:99:65:ed:95:25:86:c0:1f:16:93: 48:39:03:b3:46:09:64:7a:1b:ab:78:11:9a:10:8f: 3e:17:58:1e:05:5d:b7:57:44:ad:07:a7:d7:37:3c: 69:e6:dc:92:86:5c:f1:46:ad:ba:5f:0b:a6:31:a7: 35:8e:00:8f:ea:8b:24:b0:03:fa:54:7a:77:a3:00: f6:52:e8:03:ba:92:5f:13:35:65:7d:9e:97:e7:07: df:f4:c0:bb:41:2d:bc:b9:65:1a:a7:6b:75:d7:2a: 9d:08:0a:a8:b3:19:e9:a0:08:72:c0:37:77:c1:79: 5b:59:32:56:be:7f:92:80:c9:b1:1d:4e:53:2d:67: bc:c3:e7:83:bf:ae:2e:ec:b6:2f:33:f4:b8:eb:6e: f8:a7:51:a4:fb:d2:b1:1d:25:5d:d9:6c:ef:8c:a0: 5f:7f:9d:27:97:da:7c:80:5c:3d:8e:e0:b3:d6:f7: 3a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:88:89:D4:66:6A:41:E4:80:7C:18:ED:0D:E6:82:BE:2B:0F:FD:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.235.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:91:d4:9f:b4:5d:c0:e0:07:e5:dc:5c:91:06:ec:7d:8d:77: 93:e0:09:6f:41:be:a7:1b:9a:a8:7e:75:58:0a:3f:bc:47:cb: d3:75:11:f0:6a:e4:0e:75:2f:77:af:b0:5d:b4:9a:5c:28:49: 01:34:f8:91:a0:b4:23:43:e4:14:ae:63:44:81:42:6b:60:fe: 19:11:7a:75:b8:4d:74:33:07:be:3c:29:9a:d5:d1:99:0c:f1: 93:f4:e7:05:22:73:0a:12:07:59:15:35:b1:dd:ae:fe:a2:0e: 26:f0:7c:c8:96:54:81:68:b0:e6:51:65:bc:99:30:c2:df:fd: 49:e7:59:c5:1f:9d:6c:2a:0e:4f:88:04:56:5b:d1:98:f8:36: 44:d9:b5:08:0d:eb:36:41:8d:45:a7:9f:18:c3:3a:99:36:ff: 95:49:f4:d6:8f:1c:57:a1:5d:a4:0a:8c:0d:18:ad:b2:bc:97: df:02:d3:56:31:e8:c7:db:9e:4b:5b:2a:73:5b:73:33:61:6d: 7c:29:2f:3a:81:b9:37:06:ac:4e:49:61:a5:3a:2b:aa:f9:51: e8:13:4c:f6:da:ea:6e:b2:f5:f0:b0:45:c6:29:4a:a2:25:0e: dd:63:f9:2f:b7:2f:14:9c:d9:b9:bd:50:d5:18:24:70:8d:b0: b4:07:6d:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPttci+EdKgXNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjJhOTI5NTEtZWI4OS00OTJmLWIzNWQtMGJkYzI3NDQ3MDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRmxOmMFh7glwr9xECJvJ+JPMaYi/K38W8bX s3thbrBX4VqnO64GQM238ndAymwG/anscoXD5xCs89Tu3mH8IUWlE9yrLeHY8CNV A/WKA5ll7ZUlhsAfFpNIOQOzRglkehureBGaEI8+F1geBV23V0StB6fXNzxp5tyS hlzxRq26XwumMac1jgCP6osksAP6VHp3owD2UugDupJfEzVlfZ6X5wff9MC7QS28 uWUap2t11yqdCAqosxnpoAhywDd3wXlbWTJWvn+SgMmxHU5TLWe8w+eDv64u7LYv M/S46274p1Gk+9KxHSVd2WzvjKBff50nl9p8gFw9juCz1vc6hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCIidRmakHkgHwY7Q3mgr4rD/3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM2M2RlNTctYzQwZS0z NDlmLWIwMTktNzBhNTczZjdlMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+R1J+0XcDgB+XcXJEG7H2Nd5PgCW9Bvqcbmqh+dVgKP7xHy9N1EfBq 5A51L3evsF20mlwoSQE0+JGgtCND5BSuY0SBQmtg/hkRenW4TXQzB748KZrV0ZkM 8ZP05wUicwoSB1kVNbHdrv6iDibwfMiWVIFosOZRZbyZMMLf/UnnWcUfnWwqDk+I BFZb0Zj4NkTZtQgN6zZBjUWnnxjDOpk2/5VJ9NaPHFehXaQKjA0YrbK8l98C01Yx 6MfbnktbKnNbczNhbXwpLzqBuTcGrE5JYaU6K6r5UegTTPba6m6y9fCwRcYpSqIl Dt1j+S+3LxSc2bm9UNUYJHCNsLQHbaM= -----END CERTIFICATE-----Generated at Fri Mar 14 08:34:05 2025 by rpki-client