$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa File: 0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa (raw, json) Hash identifier: f0DQPN+NtzuYi4BVFJql9VoobJKKMiZheTMyVoojm9Y= Subject key identifier: A8:6F:0B:E9:EE:67:DE:49:5B:10:79:B4:77:CA:3D:39:40:3B:5E:8A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848DA71041CB58C1625DF669DA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 173.185.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:71:04:1c:b5:8c:16:25:df:66:9d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=b4222744-1774-4093-99b7-2853e8fb051c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:11:86:42:37:5b:37:b4:a4:32:af:c4:92: 49:45:db:30:1f:22:81:63:4e:e0:cd:ab:19:9b:de: 3e:c7:57:20:47:0f:25:15:af:14:a3:0d:77:2b:88: b9:a4:b7:54:30:26:fd:d1:c6:30:ab:1c:7e:34:d1: 1c:e0:21:f2:68:ef:a3:c6:2c:ef:c7:9b:26:1c:6b: 9d:c3:4a:bf:1e:c5:56:f3:9e:8d:96:9b:0e:c6:98: e1:02:3e:66:20:19:09:8d:77:52:24:8f:d1:ac:0a: b8:8f:72:96:da:f0:81:d0:58:53:35:45:be:1e:93: 21:d8:d1:c6:f5:6e:42:c9:2d:b6:5a:18:3a:8f:b1: 22:b2:51:b0:94:7b:b9:79:1b:2a:6d:03:9d:d5:e2: 97:f7:ad:cc:06:63:5d:f9:db:19:3a:73:9e:97:63: df:33:ef:92:f7:d1:09:84:b7:84:31:7b:fd:1e:46: 57:8c:13:05:4e:73:57:13:37:77:63:ac:0b:b7:f0: db:eb:d4:a1:68:83:87:4d:2d:5c:41:7e:c9:55:55: 7e:f3:2d:fd:68:9b:4e:aa:14:83:88:3d:e9:5f:81: a5:18:21:f2:e9:a4:31:6a:3d:90:3f:7d:fe:66:7e: de:37:c9:14:a0:66:06:da:86:96:a1:d9:84:ed:9c: 0c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6F:0B:E9:EE:67:DE:49:5B:10:79:B4:77:CA:3D:39:40:3B:5E:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0be14ee2-27ca-3fdf-9d5b-1e767db4edb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:fd:04:1c:47:2d:b4:21:fe:84:50:5a:f1:12:2e:e8:23:2a: d1:b2:08:38:4c:1f:93:44:b5:fa:7d:66:9a:23:4c:83:cf:d8: f5:3d:09:18:62:e6:3d:c7:81:7f:0b:d1:a7:a7:6e:c5:a3:39: b7:47:4f:de:d7:84:75:e4:9c:a7:65:3e:91:cb:b2:96:28:79: 86:80:db:90:70:c6:1a:df:47:62:b9:a3:1b:91:f4:8e:73:8f: 15:b9:6f:31:4b:d9:2a:e9:5e:3a:97:78:cf:97:f4:3c:cd:dc: 70:c1:c5:80:0f:53:47:9e:f9:00:88:fe:e3:53:c3:3b:5d:05: 9d:6e:55:00:ec:67:bd:89:24:3a:85:b4:2e:dd:e2:7e:20:91: 46:ed:c2:3d:b6:cf:03:a0:ee:b7:01:a3:a2:31:38:9e:f4:7a: f6:3e:ce:8c:54:b6:9f:0a:92:d2:d9:35:6c:24:96:3b:ca:5f: 1b:f2:f8:0e:83:fa:af:03:3e:4d:d6:e8:a6:1a:63:da:40:10: 73:0c:eb:7a:fc:c4:4a:03:6d:f3:3f:29:a6:83:85:85:c6:dc: 2a:f1:41:59:64:d2:27:1c:35:fd:58:69:9e:97:09:36:59:68: 05:a2:22:3b:5a:58:ba:4c:93:94:85:2e:b2:42:bb:5b:76:01: 6f:fa:f0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacQQctYwWJd9mnaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk YjQyMjI3NDQtMTc3NC00MDkzLTk5YjctMjg1M2U4ZmIwNTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi20RhkI3Wze0pDKvxJJJRdswHyKBY07gzasZ m94+x1cgRw8lFa8Uow13K4i5pLdUMCb90cYwqxx+NNEc4CHyaO+jxizvx5smHGud w0q/HsVW856NlpsOxpjhAj5mIBkJjXdSJI/RrAq4j3KW2vCB0FhTNUW+HpMh2NHG 9W5CyS22Whg6j7EislGwlHu5eRsqbQOd1eKX963MBmNd+dsZOnOel2PfM++S99EJ hLeEMXv9HkZXjBMFTnNXEzd3Y6wLt/Db69ShaIOHTS1cQX7JVVV+8y39aJtOqhSD iD3pX4GlGCHy6aQxaj2QP33+Zn7eN8kUoGYG2oaWodmE7ZwMbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhvC+nuZ95JWxB5tHfKPTlAO16KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJlMTRlZTItMjdjYS0z ZmRmLTlkNWItMWU3NjdkYjRlZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbl4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF39BBxHLbQh/oRQWvESLugjKtGyCDhMH5NEtfp9ZpojTIPP2PU9CRhi 5j3HgX8L0aenbsWjObdHT97XhHXknKdlPpHLspYoeYaA25BwxhrfR2K5oxuR9I5z jxW5bzFL2SrpXjqXeM+X9DzN3HDBxYAPU0ee+QCI/uNTwztdBZ1uVQDsZ72JJDqF tC7d4n4gkUbtwj22zwOg7rcBo6IxOJ70evY+zoxUtp8KktLZNWwkljvKXxvy+A6D +q8DPk3W6KYaY9pAEHMM63r8xEoDbfM/KaaDhYXG3CrxQVlk0iccNf1YaZ6XCTZZ aAWiIjtaWLpMk5SFLrJCu1t2AW/68CE= -----END CERTIFICATE-----Generated at Sun Apr 27 20:31:15 2025 by rpki-client