$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa File: f409e796-564a-3237-9a12-bc37b08591dc.roa (raw, json) Hash identifier: tEE7kRSZyCpGHcWWpymmzWqctKT8cMoaGK27FLGFcoM= Subject key identifier: 35:F5:5B:CA:EE:0E:B3:77:D8:DB:35:F2:43:A1:55:C1:DF:20:04:73 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211227EA69F33364BD79980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.186.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:22:7e:a6:9f:33:36:4b:d7:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=2edd904d-ed83-42e1-a7d4-21a140654ae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:61:fd:24:3a:10:9f:a9:34:41:bd:97:20:2d: 37:82:30:dd:18:db:5b:28:dc:bf:ba:29:5d:db:07: 85:8e:db:d1:af:f7:32:25:81:a9:9b:4a:57:d3:44: 5f:40:83:5b:ce:6c:d9:91:fa:b5:51:3b:e2:69:2c: 75:b8:39:8f:3b:8c:75:c1:c4:98:31:d5:72:13:ff: 3d:f9:1e:2d:12:21:bb:9e:5a:eb:dc:aa:73:6e:8b: 8c:d8:45:e0:ae:9b:a6:2b:a0:d3:41:36:95:8c:14: 22:9a:b4:88:21:e5:f1:58:f7:fe:11:dc:0f:09:b6: fb:01:3b:e1:c9:97:c5:9d:88:2d:6f:b1:72:77:23: bb:ad:04:a8:ce:aa:c8:76:58:4a:59:f3:2a:d1:25: 3c:7f:0f:91:4d:e9:a1:15:cd:f3:b9:56:ca:a7:46: 30:5d:7c:93:60:5a:cf:d6:63:21:9d:3b:17:cf:40: 81:82:4c:9d:9f:2e:a7:7d:ca:ea:d6:82:54:94:9f: 93:65:ae:e5:7e:1f:83:01:b5:cb:6b:b8:b7:bb:39: 10:9b:bb:dd:a3:92:8c:bc:6a:9e:ae:7c:dd:64:9b: bd:74:67:d6:c8:60:e7:3f:c8:26:23:dd:8c:28:a5: e2:cf:85:8f:c7:c2:27:1f:3a:08:1a:46:e4:2c:a7: b4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:F5:5B:CA:EE:0E:B3:77:D8:DB:35:F2:43:A1:55:C1:DF:20:04:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f409e796-564a-3237-9a12-bc37b08591dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:04:f1:4e:2d:fa:bb:17:8b:9b:9c:ef:d8:eb:0e:a9:19:9f: 1f:cb:84:1f:ac:12:66:98:ce:c3:52:97:99:8d:f2:f1:32:50: 82:29:37:69:80:c1:e4:ac:0f:64:76:6d:61:ff:e3:3c:db:2f: 2c:a3:35:41:1e:84:c2:32:8c:85:ee:da:a5:8d:c0:06:9a:fd: 7e:94:a8:7f:45:57:05:71:9e:3e:a3:4b:bb:66:85:b3:c3:5a: d9:4a:64:2c:9d:4f:71:10:5c:95:35:7e:bf:3c:9c:5d:5b:52: af:87:ca:55:c1:dc:5f:45:61:5b:48:c9:5f:bd:f1:b9:f8:73: f6:d8:60:00:63:32:30:c6:da:af:65:8b:40:d2:90:3f:ef:23: 2a:c4:eb:5f:20:0e:1b:85:65:2a:6a:93:8d:0e:59:bf:03:d9: df:a3:4b:70:3b:46:60:66:d6:80:5b:87:e9:a3:94:db:7e:91: 8e:3b:5e:d2:48:14:af:0e:6b:39:67:8f:53:c4:fd:6a:d0:24: b0:53:1a:13:0d:2c:ba:76:b1:d9:74:68:13:43:52:52:28:69: 64:7d:e1:0e:51:11:7b:7d:bf:21:44:4c:4a:2b:6b:3d:1b:d2: b7:8d:65:e8:ce:4f:f5:27:8a:23:1e:78:d9:00:ed:d0:e9:11: d8:43:9d:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESJ+pp8zNkvXmYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MmVkZDkwNGQtZWQ4My00MmUxLWE3ZDQtMjFhMTQwNjU0YWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGH9JDoQn6k0Qb2XIC03gjDdGNtbKNy/uild 2weFjtvRr/cyJYGpm0pX00RfQINbzmzZkfq1UTviaSx1uDmPO4x1wcSYMdVyE/89 +R4tEiG7nlrr3KpzbouM2EXgrpumK6DTQTaVjBQimrSIIeXxWPf+EdwPCbb7ATvh yZfFnYgtb7FydyO7rQSozqrIdlhKWfMq0SU8fw+RTemhFc3zuVbKp0YwXXyTYFrP 1mMhnTsXz0CBgkydny6nfcrq1oJUlJ+TZa7lfh+DAbXLa7i3uzkQm7vdo5KMvGqe rnzdZJu9dGfWyGDnP8gmI92MKKXiz4WPx8InHzoIGkbkLKe0LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDX1W8ruDrN32Ns18kOhVcHfIARzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjQwOWU3OTYtNTY0YS0z MjM3LTlhMTItYmMzN2IwODU5MWRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIE8U4t+rsXi5uc79jrDqkZnx/LhB+sEmaYzsNSl5mN8vEyUIIpN2mA weSsD2R2bWH/4zzbLyyjNUEehMIyjIXu2qWNwAaa/X6UqH9FVwVxnj6jS7tmhbPD WtlKZCydT3EQXJU1fr88nF1bUq+HylXB3F9FYVtIyV+98bn4c/bYYABjMjDG2q9l i0DSkD/vIyrE618gDhuFZSpqk40OWb8D2d+jS3A7RmBm1oBbh+mjlNt+kY47XtJI FK8Oazlnj1PE/WrQJLBTGhMNLLp2sdl0aBNDUlIoaWR94Q5REXt9vyFETEoraz0b 0reNZejOT/UniiMeeNkA7dDpEdhDnSk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:01:02 2025 by rpki-client