$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa File: 4ee3a52f-4216-30e6-9301-7439d905414e.roa (raw, json) Hash identifier: DhauAZnsBvJAvvEGFuKhei/tDOaAyZL8dZHzV/KyVho= Subject key identifier: 63:30:46:C1:67:30:E7:6B:23:49:17:6D:2A:DB:6D:EB:DA:A8:0B:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D211240FCF3C5A3DB6374780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 174.131.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:24:0f:cf:3c:5a:3d:b6:37:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=258b2992-1709-4ab5-9226-1b7e0cc57125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a1:f0:2b:f6:ba:6e:57:38:37:59:ff:ca:4c: 6b:6b:5f:34:f1:d1:27:5d:dd:83:24:7f:3a:92:c2: fb:3d:6b:e1:46:35:ae:31:be:24:3d:72:db:75:8a: 71:db:fe:8b:b7:a9:3d:c7:f1:d0:da:45:fd:7e:e0: 7b:ea:ca:f6:ce:e3:47:da:a8:d7:16:ee:2e:10:e1: 2c:0c:d0:32:e4:56:a0:20:b2:05:50:58:9b:64:99: eb:81:48:10:58:57:f1:09:9c:29:f2:ad:70:66:73: 0d:f5:d5:c5:a9:a2:0b:64:c6:ca:dc:c8:40:77:64: aa:a3:93:09:58:48:46:db:36:2e:9f:3e:50:54:75: 1c:5a:93:51:02:b0:ca:1c:18:f5:0f:de:af:b4:f3: e1:64:7e:62:e0:38:9d:34:0e:f2:16:b7:0e:1f:dd: 59:42:15:71:c8:e5:9a:9f:a3:3e:09:03:b0:e3:bb: 0b:62:74:eb:71:d6:c5:cb:8e:6d:ec:5d:75:a7:0d: 33:3f:62:53:b1:2a:5a:02:34:0a:aa:21:0c:b8:5d: e9:ad:5c:49:fa:a7:34:1d:09:a4:d3:79:b0:9e:56: a2:d0:b8:12:63:8f:7a:59:34:61:dc:f8:44:66:0f: 00:e4:cf:29:c7:f8:f1:40:66:94:15:4b:71:92:bf: 60:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:30:46:C1:67:30:E7:6B:23:49:17:6D:2A:DB:6D:EB:DA:A8:0B:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4ee3a52f-4216-30e6-9301-7439d905414e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:22:28:3c:55:b9:2f:8b:9f:91:5e:25:81:28:b1:02:e7:30: d0:2a:80:31:ab:98:ab:6f:41:91:30:60:8a:cd:53:4b:52:3a: a3:6a:dc:4c:dc:2e:79:6b:ee:9a:d7:92:a7:b9:22:21:cd:5a: 62:95:b7:c8:b3:85:e1:99:cd:cd:03:a6:d7:f1:ee:30:b9:ab: 7e:76:b6:9f:29:3d:e0:eb:04:08:8a:a5:9f:5c:3c:11:2f:85: f7:a5:14:91:05:82:78:3c:10:e8:38:19:b4:02:b8:1d:6d:f8: 2c:9b:77:6e:e1:04:92:8a:32:bd:41:85:d0:41:b7:d3:6e:92: 7d:23:3c:ef:8f:a1:24:fc:d6:14:6a:c1:c4:fc:26:da:9f:0a: 0a:b7:b0:27:88:b2:3c:19:ed:74:28:d5:51:9b:b2:49:59:db: 47:66:d4:b4:21:93:bf:0b:d8:76:7b:64:92:7e:d0:65:7c:fd: 57:06:57:69:29:93:a6:4d:94:7a:54:76:e4:c4:ef:a6:d2:28: ee:10:fb:cb:d4:f9:5e:03:9c:01:7f:5b:49:0f:72:ef:c6:9a: 57:13:ea:3b:e0:6c:32:81:92:6d:bf:58:7e:66:4c:3b:cc:52: 85:5f:b8:54:0d:b9:67:b1:d6:a5:21:6b:78:d8:5a:6c:06:5b: 80:c2:70:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSESQPzzxaPbY3R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjU4YjI5OTItMTcwOS00YWI1LTkyMjYtMWI3ZTBjYzU3MTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6HwK/a6blc4N1n/ykxra1808dEnXd2DJH86 ksL7PWvhRjWuMb4kPXLbdYpx2/6Lt6k9x/HQ2kX9fuB76sr2zuNH2qjXFu4uEOEs DNAy5FagILIFUFibZJnrgUgQWFfxCZwp8q1wZnMN9dXFqaILZMbK3MhAd2Sqo5MJ WEhG2zYunz5QVHUcWpNRArDKHBj1D96vtPPhZH5i4DidNA7yFrcOH91ZQhVxyOWa n6M+CQOw47sLYnTrcdbFy45t7F11pw0zP2JTsSpaAjQKqiEMuF3prVxJ+qc0HQmk 03mwnlai0LgSY496WTRh3PhEZg8A5M8px/jxQGaUFUtxkr9gVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMwRsFnMOdrI0kXbSrbbevaqAvyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGVlM2E1MmYtNDIxNi0z MGU2LTkzMDEtNzQzOWQ5MDU0MTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroPYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8iKDxVuS+Ln5FeJYEosQLnMNAqgDGrmKtvQZEwYIrNU0tSOqNq3Ezc Lnlr7prXkqe5IiHNWmKVt8izheGZzc0Dptfx7jC5q352tp8pPeDrBAiKpZ9cPBEv hfelFJEFgng8EOg4GbQCuB1t+Cybd27hBJKKMr1BhdBBt9Nukn0jPO+PoST81hRq wcT8JtqfCgq3sCeIsjwZ7XQo1VGbsklZ20dm1LQhk78L2HZ7ZJJ+0GV8/VcGV2kp k6ZNlHpUduTE76bSKO4Q+8vU+V4DnAF/W0kPcu/GmlcT6jvgbDKBkm2/WH5mTDvM UoVfuFQNuWex1qUha3jYWmwGW4DCcLg= -----END CERTIFICATE-----Generated at Sun Apr 27 04:04:46 2025 by rpki-client