$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/878d5f19-4462-3a7d-b6d8-8204485f2a99.roa File: 878d5f19-4462-3a7d-b6d8-8204485f2a99.roa (raw, json) Hash identifier: owXQfkiZzrS6Pp2JOo7BPTLYBai7ri7szxdMjsbQ0Og= Subject key identifier: C4:39:E0:F5:23:C4:B1:CC:0E:72:56:C1:88:D0:DD:54:00:9A:80:45 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848EE8E2A7AC2C44212ED60CFE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/878d5f19-4462-3a7d-b6d8-8204485f2a99.roa Signing time: Wed 19 Feb 2025 06:55:43 +0000 ROA not before: Wed 19 Feb 2025 06:55:43 +0000 ROA not after: Tue 20 May 2025 05:55:43 +0000 asID: 7029 IP address blocks: 139.55.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ee:8e:2a:7a:c2:c4:42:12:ed:60:cf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 19 06:55:43 2025 GMT Not After : May 20 05:55:43 2025 GMT Subject: CN=6f8ead37-5249-4ee0-8e45-53e7f096d9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:4a:29:c6:f8:ae:f5:4e:59:48:b4:ae:3d: f4:75:f4:4d:9b:0b:2d:82:bf:eb:c3:69:ab:1b:ef: c7:f6:79:8a:59:c9:d7:10:26:7a:bf:4b:26:aa:20: 48:e7:70:8f:d9:f3:50:8a:f8:a6:9f:10:2b:e6:7e: 56:e8:12:9a:8e:27:c8:f1:d7:1b:73:b6:2c:60:20: 48:2a:61:f9:5e:f6:0d:2d:c7:e3:64:c6:da:5b:45: 0b:a6:d3:99:1b:91:9a:ad:31:9a:fb:86:a9:5a:0d: 92:32:5c:72:6c:07:e7:92:00:c3:f1:b0:e3:9a:e5: 58:d2:78:d2:bb:a6:ce:07:90:c7:b4:e8:22:36:a6: 83:76:ee:cb:23:e7:98:3f:c9:9f:91:d7:bf:c1:f6: 73:b6:78:59:cd:01:fd:1f:cc:40:78:63:60:6d:70: 64:64:1e:d7:56:0b:ce:0e:46:8b:96:82:a1:08:9d: 79:78:7e:58:54:01:0f:c5:82:06:17:7d:34:9a:b2: 28:6c:20:07:57:be:4c:51:81:24:12:b4:a7:2c:5a: 24:aa:01:b1:50:b4:a9:db:a3:b8:2a:0e:85:f7:27: 47:dc:62:b4:8e:d2:f4:42:da:79:b4:21:70:cf:c9: 75:86:c1:e1:20:bd:c2:ab:e6:eb:b3:c3:e8:76:56: 9d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:39:E0:F5:23:C4:B1:CC:0E:72:56:C1:88:D0:DD:54:00:9A:80:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/878d5f19-4462-3a7d-b6d8-8204485f2a99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:b2:ca:8b:7c:44:5a:3d:a0:0d:ff:a5:65:69:b3:d6:f5:2e: dc:61:af:cf:f9:6c:3e:2c:0e:60:03:45:18:6f:ae:e2:63:35: 47:f3:d7:87:7b:85:b4:8e:29:b9:65:f9:8e:89:e2:c7:95:12: a4:90:35:43:11:42:e0:d5:38:50:0f:1b:f4:96:58:77:9f:45: 25:14:91:45:e1:01:e5:ca:1c:28:94:07:ae:10:f4:98:f8:69: 60:35:17:c1:3f:d4:8c:d1:23:b6:dd:fa:f5:39:fc:2c:8a:fc: bd:ab:85:0c:e1:99:ba:24:d9:3e:99:11:92:52:5a:1e:dd:67: 12:96:ae:26:fd:1e:6b:30:62:5d:30:5e:f0:61:57:85:5f:49: 6d:66:6a:76:b8:61:65:29:7b:7d:e6:b3:81:82:a0:ba:bd:c2: 1f:a0:64:4f:27:cf:5a:ba:1c:2e:79:6d:a6:96:49:7c:b3:4d: c1:66:00:63:0a:fe:f2:ab:ce:3e:8f:60:82:6b:f2:92:f0:26: 0d:41:97:4d:5c:e6:a6:be:ab:0a:89:01:3a:92:ba:0f:b3:36: 5b:a6:4d:d7:7a:ea:4d:48:1e:da:01:56:6c:9b:89:be:cc:d8: 08:3e:55:53:75:5b:bf:ac:e4:ad:8f:82:0e:44:dd:fc:80:5d: e9:56:81:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjujip6wsRCEu1gz+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIxOTA2NTU0M1oXDTI1MDUyMDA1NTU0M1owLzEtMCsGA1UEAxMk NmY4ZWFkMzctNTI0OS00ZWUwLThlNDUtNTNlN2YwOTZkOWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL1KKcb4rvVOWUi0rj30dfRNmwstgr/rw2mr G+/H9nmKWcnXECZ6v0smqiBI53CP2fNQivimnxAr5n5W6BKajifI8dcbc7YsYCBI KmH5XvYNLcfjZMbaW0ULptOZG5GarTGa+4apWg2SMlxybAfnkgDD8bDjmuVY0njS u6bOB5DHtOgiNqaDdu7LI+eYP8mfkde/wfZztnhZzQH9H8xAeGNgbXBkZB7XVgvO DkaLloKhCJ15eH5YVAEPxYIGF300mrIobCAHV75MUYEkErSnLFokqgGxULSp26O4 Kg6F9ydH3GK0jtL0Qtp5tCFwz8l1hsHhIL3Cq+brs8PodladdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQ54PUjxLHMDnJWwYjQ3VQAmoBFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODc4ZDVmMTktNDQ2Mi0z YTdkLWI2ZDgtODIwNDQ4NWYyYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizfmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeyyot8RFo9oA3/pWVps9b1Ltxhr8/5bD4sDmADRRhvruJjNUfz14d7 hbSOKbll+Y6J4seVEqSQNUMRQuDVOFAPG/SWWHefRSUUkUXhAeXKHCiUB64Q9Jj4 aWA1F8E/1IzRI7bd+vU5/CyK/L2rhQzhmbok2T6ZEZJSWh7dZxKWrib9HmswYl0w XvBhV4VfSW1mana4YWUpe33ms4GCoLq9wh+gZE8nz1q6HC55baaWSXyzTcFmAGMK /vKrzj6PYIJr8pLwJg1Bl01c5qa+qwqJATqSug+zNlumTdd66k1IHtoBVmybib7M 2Ag+VVN1W7+s5K2Pgg5E3fyAXelWgRc= -----END CERTIFICATE-----Generated at Mon Apr 28 16:03:31 2025 by rpki-client