$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa File: ca0fc261-9584-34a4-974c-31bffd768a15.roa (raw, json) Hash identifier: 3S6vQs/9rX5draECfv8J6i6QKIIQ7nPTov53iRWl86Y= Subject key identifier: 4F:8C:03:F7:27:A1:6E:8B:83:9C:A8:F0:29:F4:D4:ED:9C:54:5B:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584973DEDC353A97349EE5DD2E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa Signing time: Tue 08 Apr 2025 01:00:47 +0000 ROA not before: Tue 08 Apr 2025 01:00:47 +0000 ROA not after: Mon 07 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 173.187.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:73:de:dc:35:3a:97:34:9e:e5:dd:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 8 01:00:47 2025 GMT Not After : Jul 7 01:00:47 2025 GMT Subject: CN=3df1ab60-361e-48ec-a1b8-7e9ec998e40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:c0:e8:a5:c7:c8:1a:ea:cd:22:e9:bd:9d: 74:15:c6:a1:29:39:40:2a:72:df:34:20:2e:06:62: 01:e8:87:10:5b:b4:bb:b0:92:42:9e:a7:bb:04:db: ee:a7:18:1e:ae:87:a4:53:f5:86:72:48:5d:0b:ea: 2b:d6:63:06:32:da:c1:00:6b:75:32:1d:80:6c:cd: 82:9d:f8:f7:99:6b:75:71:5d:71:39:7c:11:04:5b: 1b:fc:18:51:f3:49:01:d9:2a:78:ce:43:8b:3d:13: 22:06:78:26:fb:1b:78:dd:59:f1:c9:9b:48:be:53: d2:92:7a:93:b6:71:8a:61:fb:56:f5:47:f7:31:cc: 26:b6:cc:1b:7b:79:26:97:b2:7a:98:96:0e:e9:32: be:d8:94:48:cf:10:de:c5:cb:d6:18:86:e9:ca:11: 1e:5d:f1:9a:4b:9e:d5:34:a2:70:c2:14:76:db:8e: 6d:9a:44:0b:48:78:a5:64:3f:09:27:b4:6d:4a:b4: 9c:9e:22:df:54:65:39:b2:0f:a3:ba:6e:d9:54:c1: ad:a0:8f:11:3c:53:e0:4d:4d:df:01:97:ca:00:0b: a8:e7:d6:e4:50:7a:4f:16:c4:90:7f:23:57:03:e7: 89:bb:58:cc:19:cd:48:2c:1d:6d:a6:87:25:67:20: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:8C:03:F7:27:A1:6E:8B:83:9C:A8:F0:29:F4:D4:ED:9C:54:5B:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca0fc261-9584-34a4-974c-31bffd768a15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:12:f9:24:67:3f:c2:d8:6c:83:96:b9:2a:f8:5e:0f:13:e0: 42:e0:21:11:88:41:74:61:60:f2:19:cc:42:0a:4e:69:78:4f: 02:39:db:dc:9c:b3:b7:2b:44:68:29:74:ce:4c:4c:0e:52:2f: 60:2c:2f:43:3c:ba:25:5e:ea:75:d9:c3:fe:3c:6d:fa:39:cd: 06:ac:dd:0b:95:76:87:28:54:3d:60:b7:3b:f4:90:8d:80:aa: 6b:56:86:3a:9d:7a:7a:f4:ed:3b:ac:d3:c8:7a:6d:b0:9b:60: 37:15:fd:0f:26:5b:6e:a3:e3:5c:ca:97:e1:4d:0c:3e:44:71: c7:aa:52:e6:ae:60:29:eb:44:ad:2b:c5:0e:cc:ba:fe:a2:37: 2a:3f:16:7a:db:d1:a5:66:d8:42:7d:fc:a1:f2:d3:8a:17:f5: da:7a:a7:42:77:f1:b0:16:b0:9d:86:ad:62:33:75:5f:c8:13: 07:c6:fb:0d:cb:51:6d:fc:69:87:f6:fd:de:d9:97:9a:80:e8: d5:12:32:35:2e:0f:53:4c:f9:fd:23:ec:79:0c:bb:34:ca:9c: 37:63:3b:a7:4a:09:f7:f9:2c:f3:92:9c:8f:f4:24:29:eb:2e: 4a:c7:b4:7d:03:ec:c8:40:3c:5a:02:64:73:1a:f1:8e:05:b6: f7:2e:92:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElz3tw1Opc0nuXdLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwODAxMDA0N1oXDTI1MDcwNzAxMDA0N1owLzEtMCsGA1UEAxMk M2RmMWFiNjAtMzYxZS00OGVjLWExYjgtN2U5ZWM5OThlNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvA6KXHyBrqzSLpvZ10FcahKTlAKnLfNCAu BmIB6IcQW7S7sJJCnqe7BNvupxgeroekU/WGckhdC+or1mMGMtrBAGt1Mh2AbM2C nfj3mWt1cV1xOXwRBFsb/BhR80kB2Sp4zkOLPRMiBngm+xt43VnxyZtIvlPSknqT tnGKYftW9Uf3Mcwmtswbe3kml7J6mJYO6TK+2JRIzxDexcvWGIbpyhEeXfGaS57V NKJwwhR2245tmkQLSHilZD8JJ7RtSrScniLfVGU5sg+jum7ZVMGtoI8RPFPgTU3f AZfKAAuo59bkUHpPFsSQfyNXA+eJu1jMGc1ILB1tpoclZyDkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+MA/cnoW6Lg5yo8Cn01O2cVFvjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2EwZmMyNjEtOTU4NC0z NGE0LTk3NGMtMzFiZmZkNzY4YTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcS+SRnP8LYbIOWuSr4Xg8T4ELgIRGIQXRhYPIZzEIKTml4TwI529yc s7crRGgpdM5MTA5SL2AsL0M8uiVe6nXZw/48bfo5zQas3QuVdocoVD1gtzv0kI2A qmtWhjqdenr07Tus08h6bbCbYDcV/Q8mW26j41zKl+FNDD5EcceqUuauYCnrRK0r xQ7Muv6iNyo/Fnrb0aVm2EJ9/KHy04oX9dp6p0J38bAWsJ2GrWIzdV/IEwfG+w3L UW38aYf2/d7Zl5qA6NUSMjUuD1NM+f0j7HkMuzTKnDdjO6dKCff5LPOSnI/0JCnr LkrHtH0D7MhAPFoCZHMa8Y4FtvcukqM= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:15 2025 by rpki-client