$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa File: 87c35efc-c5c9-3946-95cf-99b65db08936.roa (raw, json) Hash identifier: //PezCBLVxefAHpvxAmX92EIv2PKMIlmoBLanTqqphs= Subject key identifier: E9:30:83:66:95:F1:67:F8:7C:A9:49:0C:37:C7:48:B1:2B:71:AF:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D210F6796EBEF35F235C7C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 7029 IP address blocks: 198.211.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:10:f6:79:6e:be:f3:5f:23:5c:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=3f65f25e-8b2c-45f9-9e41-5f1ccfd3bc47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d5:16:a8:1c:07:0b:52:18:b6:99:84:ff:ee: 35:08:1b:40:df:36:51:8b:c6:72:29:2f:53:a1:69: 7c:d4:e2:10:c2:cc:a1:0f:f5:f2:d3:93:52:a9:18: d1:9f:4e:04:ca:e6:2c:ad:cd:87:65:8e:43:35:93: b7:81:30:4c:4d:1c:fe:79:a0:c3:09:69:18:01:0b: aa:52:0d:4f:41:75:c8:3a:8e:11:d2:11:1d:b7:fc: 5a:e3:a5:53:e5:88:69:0e:66:13:cf:90:18:5b:21: d9:83:09:e9:97:52:95:e0:e2:06:dd:48:94:4a:c5: cf:08:b7:a7:74:70:c3:9c:5c:37:31:98:6a:75:49: c0:01:96:01:98:65:bd:a4:0d:56:b7:9c:e2:d6:9b: 95:d1:33:6f:ff:06:45:77:c7:dc:dc:22:e8:33:e2: 68:1b:2a:03:b0:b5:58:c4:9e:6c:b2:8d:27:b2:04: 85:e5:2a:3e:97:5f:8c:0c:a2:5d:65:64:a7:99:f6: 00:cb:74:42:96:70:7d:2a:bf:d1:59:2f:46:e4:39: 96:a8:9c:2f:4b:9f:37:68:49:7d:32:4f:2d:e9:40: 7e:7c:f6:b3:e3:ee:5f:c3:04:2f:0f:ce:b3:c5:b1: a2:e3:c9:36:3d:b2:19:66:77:47:07:8a:1a:62:ed: d8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:30:83:66:95:F1:67:F8:7C:A9:49:0C:37:C7:48:B1:2B:71:AF:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/87c35efc-c5c9-3946-95cf-99b65db08936.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 198.211.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:81:05:00:af:5d:80:dd:37:b8:e2:32:57:cb:7a:39:44:67: 1d:9a:3a:11:dd:8a:85:b2:61:bb:a8:41:fb:d9:c0:36:4e:20: e9:0f:b8:34:82:7e:1d:db:6f:ec:3c:b2:92:26:70:a4:e5:67: 49:e5:cf:65:d3:84:bd:4b:4a:47:cf:00:38:a4:0d:4e:d5:51: 30:ce:89:5f:68:39:8f:b8:fa:6c:94:18:f0:c9:14:f5:6a:8e: b5:17:23:05:3c:ca:54:de:35:ca:a4:75:d0:9d:71:8d:78:04: 79:66:d5:8e:c9:33:d0:90:34:37:4b:c3:ef:91:39:af:0a:46: f5:a4:c8:81:6d:10:27:ec:71:e6:09:e6:a9:f0:5b:84:16:25: 84:b9:a0:3e:19:6f:a0:ed:95:7a:82:48:b0:bd:25:1d:2b:c9: 4d:c8:a4:f3:9f:73:18:97:0e:cc:9e:ff:20:9b:23:e6:cf:d8: f6:12:05:f7:e2:ec:57:a5:b3:02:78:ce:ad:db:1f:9f:69:8c: 1e:cd:8b:0f:64:46:8b:05:f9:e1:69:fe:96:33:13:65:d5:17: f5:6a:14:da:5c:38:55:3e:8c:26:5a:c9:31:67:54:dc:cb:46: 30:d5:c0:2f:ce:6a:b0:42:1c:5d:ca:7f:27:2c:81:6c:94:02: 70:cc:9d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEPZ5br7zXyNcfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk M2Y2NWYyNWUtOGIyYy00NWY5LTllNDEtNWYxY2NmZDNiYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNUWqBwHC1IYtpmE/+41CBtA3zZRi8ZyKS9T oWl81OIQwsyhD/Xy05NSqRjRn04EyuYsrc2HZY5DNZO3gTBMTRz+eaDDCWkYAQuq Ug1PQXXIOo4R0hEdt/xa46VT5YhpDmYTz5AYWyHZgwnpl1KV4OIG3UiUSsXPCLen dHDDnFw3MZhqdUnAAZYBmGW9pA1Wt5zi1puV0TNv/wZFd8fc3CLoM+JoGyoDsLVY xJ5sso0nsgSF5So+l1+MDKJdZWSnmfYAy3RClnB9Kr/RWS9G5DmWqJwvS583aEl9 Mk8t6UB+fPaz4+5fwwQvD86zxbGi48k2PbIZZndHB4oaYu3YNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkwg2aV8Wf4fKlJDDfHSLErca8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODdjMzVlZmMtYzVjOS0z OTQ2LTk1Y2YtOTliNjVkYjA4OTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExtOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiBBQCvXYDdN7jiMlfLejlEZx2aOhHdioWyYbuoQfvZwDZOIOkPuDSC fh3bb+w8spImcKTlZ0nlz2XThL1LSkfPADikDU7VUTDOiV9oOY+4+myUGPDJFPVq jrUXIwU8ylTeNcqkddCdcY14BHlm1Y7JM9CQNDdLw++ROa8KRvWkyIFtECfsceYJ 5qnwW4QWJYS5oD4Zb6DtlXqCSLC9JR0ryU3IpPOfcxiXDsye/yCbI+bP2PYSBffi 7FelswJ4zq3bH59pjB7Niw9kRosF+eFp/pYzE2XVF/VqFNpcOFU+jCZayTFnVNzL RjDVwC/OarBCHF3KfycsgWyUAnDMnT8= -----END CERTIFICATE-----Generated at Sun Apr 27 02:17:21 2025 by rpki-client