$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa File: ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa (raw, json) Hash identifier: 50MHYbopqouryyOhGtuUdfg0St2mjPgKuXJQxRxGaNg= Subject key identifier: 26:8F:04:AA:BF:72:51:50:4A:E6:48:3D:7A:F5:47:D7:8E:F3:A4:F7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858483CB56CCF1770A935F9336580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa Signing time: Tue 17 Dec 2024 14:00:52 +0000 ROA not before: Tue 17 Dec 2024 14:00:52 +0000 ROA not after: Mon 17 Mar 2025 13:00:52 +0000 asID: 7029 IP address blocks: 71.30.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3c:b5:6c:cf:17:70:a9:35:f9:33:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Dec 17 14:00:52 2024 GMT Not After : Mar 17 13:00:52 2025 GMT Subject: CN=f4697687-08f4-49a6-81e8-1158b152c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:8d:9a:8a:fa:11:0c:ee:f5:72:ad:c6:36: 28:ac:8e:25:5b:7b:8b:88:a4:1d:1a:fd:f0:82:24: 1c:40:48:7c:e5:22:f9:72:e1:62:cb:ec:05:10:6b: 01:21:3f:71:89:62:6b:4b:36:9c:df:07:4e:7c:4f: 20:0b:9d:8c:9d:b3:48:fc:56:4a:00:a2:db:60:68: b2:b2:5c:36:aa:3c:44:d9:56:73:5d:9e:9b:8c:05: 7b:97:8e:93:b0:27:32:0d:fb:be:c8:76:9a:fc:88: b1:2d:44:b7:25:23:d2:17:57:91:1a:1e:04:3c:d3: 84:7d:ad:ca:70:60:40:80:2f:4a:02:e0:11:ed:1b: da:50:14:d5:cf:f9:98:da:b6:67:35:d9:c2:cf:92: 1c:e2:0c:15:47:b9:ce:f7:94:3f:d2:bc:50:bd:c2: 1a:44:f6:82:59:27:99:20:69:25:16:4f:e9:b6:38: a5:99:45:d1:d9:77:7a:47:95:b4:7c:28:9a:3d:62: e1:99:21:c0:76:56:58:5a:fe:ed:77:ce:b4:8f:36: 5f:d8:63:22:bb:45:66:c1:72:39:78:4a:a7:18:6c: 6b:a4:6c:b2:e3:cd:26:eb:70:60:ed:aa:57:31:71: 79:37:15:96:27:4e:1a:76:0e:f1:09:ff:14:c6:ec: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:8F:04:AA:BF:72:51:50:4A:E6:48:3D:7A:F5:47:D7:8E:F3:A4:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff2f9d09-0b7e-3f72-b84e-4148a49823f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e0:45:cc:72:ec:7a:eb:c8:8d:10:07:63:34:72:87:be:eb: 07:7a:29:ff:d6:fb:7f:44:76:5d:23:4a:c7:a6:8f:8a:61:7f: 09:f4:aa:fb:9b:85:d9:33:b9:37:96:4e:4f:29:67:37:10:e0: 1c:77:d1:89:71:2e:bc:d2:2a:8b:ba:01:aa:13:0f:81:97:6b: 9d:6f:71:af:71:71:86:83:a3:35:6f:7e:c9:5c:41:15:70:eb: 9c:18:52:2f:6a:d9:37:f3:01:88:68:38:e0:52:af:2a:b0:30: f3:91:30:41:b0:ae:ed:48:42:ca:6b:96:f5:34:4b:85:d4:98: 78:5c:0d:d2:61:86:5e:10:d0:4e:43:50:cf:4f:04:7c:e3:72: e2:ac:a6:f8:60:5e:38:cf:2c:a6:28:3e:0a:70:64:f0:18:6a: f3:67:5d:73:84:0e:93:8f:f8:b2:a8:f2:7c:95:51:f8:47:96: 49:2b:5b:bd:c1:42:0a:a7:8f:f7:9c:ad:1a:fa:e5:d1:6b:b3: 78:79:4f:9f:9e:24:9d:ae:28:5f:3a:67:78:49:c2:78:45:c1: b9:f9:0b:2e:4c:0b:02:65:7d:79:a2:96:8f:8e:40:28:18:bf: fc:41:d9:58:94:6b:66:a1:5b:0a:33:e4:b9:31:ae:79:28:8d: 55:d4:c7:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg8tWzPF3CpNfkzZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI0MTIxNzE0MDA1MloXDTI1MDMxNzEzMDA1MlowLzEtMCsGA1UEAxMk ZjQ2OTc2ODctMDhmNC00OWE2LTgxZTgtMTE1OGIxNTJjOTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppCNmor6EQzu9XKtxjYorI4lW3uLiKQdGv3w giQcQEh85SL5cuFiy+wFEGsBIT9xiWJrSzac3wdOfE8gC52MnbNI/FZKAKLbYGiy slw2qjxE2VZzXZ6bjAV7l46TsCcyDfu+yHaa/IixLUS3JSPSF1eRGh4EPNOEfa3K cGBAgC9KAuAR7RvaUBTVz/mY2rZnNdnCz5Ic4gwVR7nO95Q/0rxQvcIaRPaCWSeZ IGklFk/ptjilmUXR2Xd6R5W0fCiaPWLhmSHAdlZYWv7td860jzZf2GMiu0VmwXI5 eEqnGGxrpGyy480m63Bg7apXMXF5NxWWJ04adg7xCf8UxuwjqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaPBKq/clFQSuZIPXr1R9eO86T3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmYyZjlkMDktMGI3ZS0z ZjcyLWI4NGUtNDE0OGE0OTgyM2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRx7SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfgRcxy7HrryI0QB2M0coe+6wd6Kf/W+39Edl0jSsemj4phfwn0qvub hdkzuTeWTk8pZzcQ4Bx30YlxLrzSKou6AaoTD4GXa51vca9xcYaDozVvfslcQRVw 65wYUi9q2TfzAYhoOOBSryqwMPORMEGwru1IQsprlvU0S4XUmHhcDdJhhl4Q0E5D UM9PBHzjcuKspvhgXjjPLKYoPgpwZPAYavNnXXOEDpOP+LKo8nyVUfhHlkkrW73B Qgqnj/ecrRr65dFrs3h5T5+eJJ2uKF86Z3hJwnhFwbn5Cy5MCwJlfXmilo+OQCgY v/xB2ViUa2ahWwoz5LkxrnkojVXUxzo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:23 2025 by rpki-client