$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0340bcb3-2830-3965-8810-fe5e1d7114bf.roa File: 0340bcb3-2830-3965-8810-fe5e1d7114bf.roa (raw, json) Hash identifier: vIXgwO2jtQN/OwEu2kJjlOal081U5uOp1mI/6arvT+Y= Subject key identifier: 41:78:4C:7B:21:14:52:7C:63:D3:43:6C:7F:B2:43:E6:9F:86:FF:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A21205BD73BE52A89CB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0340bcb3-2830-3965-8810-fe5e1d7114bf.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 11681 IP address blocks: 209.218.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:21:20:5b:d7:3b:e5:2a:89:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=eb93ff37-88ba-48b0-918d-efde29f161ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:d2:83:5e:02:76:f1:75:4e:74:5c:8d:fa: 45:b2:91:bf:1a:45:cd:35:e2:37:29:6f:0f:c3:2b: bf:24:6d:c4:ba:d3:76:54:1a:5f:b6:a2:3c:8d:a5: 0f:5a:75:99:30:9b:39:03:b4:62:01:1f:84:6b:3c: 4e:29:ff:75:ba:40:2e:b6:4e:f7:e0:39:84:a0:92: 5f:1e:7e:23:7a:59:f7:d5:f4:ae:9c:35:ff:51:fb: 2b:70:53:c9:40:1e:7f:16:ba:05:c2:46:5a:05:58: fa:9e:d3:15:8a:55:85:09:c4:b1:ef:5d:b4:a5:71: 9f:e7:5f:52:46:2f:ec:d6:f5:16:92:81:0d:15:c2: b6:d0:87:e5:e3:68:e3:e3:39:89:a6:30:7a:ea:bf: 91:20:41:e1:e3:8b:19:e9:51:c6:d4:ef:be:ed:6b: 5b:e3:b0:da:eb:20:8a:47:da:95:49:39:57:f7:93: f4:6f:94:d1:10:67:63:9a:76:09:8d:15:fc:df:8b: 0e:99:64:56:e3:1e:bd:a0:92:5a:a7:b1:35:68:31: 70:28:10:c9:75:d6:f1:f2:06:c1:50:28:dd:14:0c: 1d:47:16:f1:a0:17:84:91:41:4e:7b:9a:e6:b2:11: f4:fd:ee:2a:e7:47:93:8b:17:ab:19:d1:34:46:18: 97:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:78:4C:7B:21:14:52:7C:63:D3:43:6C:7F:B2:43:E6:9F:86:FF:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0340bcb3-2830-3965-8810-fe5e1d7114bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.218.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:26:62:ae:c3:0b:ea:64:e0:2f:dd:61:cf:04:f1:05:f7:f4: c7:5d:2b:a4:ad:aa:83:65:a7:21:97:1b:80:be:48:ab:e4:bc: 34:cb:d2:86:78:0b:11:16:db:57:fc:1a:46:aa:36:35:9c:6c: 45:3d:47:f2:10:7b:25:3b:ac:ae:2a:c8:9c:37:93:99:b8:1d: e3:c3:f9:59:bd:94:52:56:a1:a1:eb:28:e2:8f:62:74:5f:54: d8:b3:b7:02:86:9b:c2:fd:cc:57:e4:23:e7:1b:02:a5:1d:c7: 53:4c:ee:9a:e0:83:9d:47:23:18:4b:3c:99:2d:ba:cc:1c:0b: 36:f5:2e:82:fd:cd:87:69:ce:66:f3:d7:37:63:cc:83:6d:51: d1:19:3b:b7:25:51:e9:81:af:34:b0:75:7c:60:43:4b:08:2f: 5a:6d:8d:27:21:1c:68:69:50:a5:7b:8e:e2:2b:b3:81:08:8d: a9:70:04:68:eb:57:a7:25:f9:7b:74:7b:35:66:5a:ab:6e:09: 4c:c1:2e:8b:c2:9a:46:0d:b3:c5:5b:78:02:0c:4d:45:50:b8: b0:d5:84:b1:82:91:08:88:d0:00:a8:78:4b:b0:a1:ac:21:26: 6d:e9:ea:b6:28:d9:38:3c:23:91:3c:ec:aa:35:39:54:52:e7: 2a:7c:a2:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiEgW9c75SqJy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZWI5M2ZmMzctODhiYS00OGIwLTkxOGQtZWZkZTI5ZjE2MWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdjSg14CdvF1TnRcjfpFspG/GkXNNeI3KW8P wyu/JG3EutN2VBpftqI8jaUPWnWZMJs5A7RiAR+EazxOKf91ukAutk734DmEoJJf Hn4jeln31fSunDX/UfsrcFPJQB5/FroFwkZaBVj6ntMVilWFCcSx7120pXGf519S Ri/s1vUWkoENFcK20Ifl42jj4zmJpjB66r+RIEHh44sZ6VHG1O++7Wtb47Da6yCK R9qVSTlX95P0b5TREGdjmnYJjRX834sOmWRW4x69oJJap7E1aDFwKBDJddbx8gbB UCjdFAwdRxbxoBeEkUFOe5rmshH0/e4q50eTixerGdE0RhiX6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEF4THshFFJ8Y9NDbH+yQ+afhv8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDM0MGJjYjMtMjgzMC0z OTY1LTg4MTAtZmU1ZTFkNzExNGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0dqCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEmYq7DC+pk4C/dYc8E8QX39MddK6StqoNlpyGXG4C+SKvkvDTL0oZ4 CxEW21f8GkaqNjWcbEU9R/IQeyU7rK4qyJw3k5m4HePD+Vm9lFJWoaHrKOKPYnRf VNiztwKGm8L9zFfkI+cbAqUdx1NM7prgg51HIxhLPJktuswcCzb1LoL9zYdpzmbz 1zdjzINtUdEZO7clUemBrzSwdXxgQ0sIL1ptjSchHGhpUKV7juIrs4EIjalwBGjr V6cl+Xt0ezVmWqtuCUzBLovCmkYNs8VbeAIMTUVQuLDVhLGCkQiI0ACoeEuwoawh Jm3p6rYo2Tg8I5E87Ko1OVRS5yp8ouY= -----END CERTIFICATE-----Generated at Sun May 11 16:00:12 2025 by rpki-client