$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa File: 0bb8f54c-a9db-3f18-b509-943041573b1a.roa (raw, json) Hash identifier: pwzy3e3z452LypMQYaJVhMX5A8Jk81gLy3iYHFm7OTs= Subject key identifier: AC:BB:3F:D0:95:4F:96:0F:38:23:04:67:37:61:6A:D6:93:F9:9E:31 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1480D2D587622218DA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 69.40.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:14:80:d2:d5:87:62:22:18:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=42f5a28c-7c66-4302-8bef-c4b5a6c8e1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:bf:ed:ed:65:de:9b:33:4a:4e:8e:05:1c: 35:a5:91:51:55:58:32:1d:22:09:08:1d:d5:53:e8: f4:bf:66:f3:7f:af:8a:0f:73:09:37:22:81:6f:3f: ff:02:72:26:97:0d:01:32:23:12:83:0b:44:7b:2e: 9d:27:88:5e:ce:23:84:e1:f2:8a:7f:bd:7d:65:41: 5a:60:ec:d5:9d:9a:45:27:40:f3:f6:db:39:dd:4e: 5e:23:3d:bd:98:69:f9:76:b4:95:78:1c:78:9a:0c: ea:50:ad:b5:09:28:05:1f:e4:33:64:8a:4b:30:38: 55:c6:42:44:cd:83:99:ac:45:0e:ab:44:e7:20:09: 33:65:d6:5a:bd:cd:75:dc:ca:33:bf:39:c4:d5:a9: 8c:cf:35:be:d3:34:f9:10:dd:5a:49:6b:c8:42:52: 11:94:d8:24:78:99:11:56:5f:54:f3:60:2a:a0:69: ac:8b:0a:d1:f5:e6:da:c8:b3:eb:61:ac:54:85:33: 26:98:ec:78:1f:59:e1:23:cd:7d:c6:94:d5:08:4c: 36:34:a5:00:fa:b0:cd:4e:46:5c:7e:97:4d:c9:ff: 0f:e4:bc:1e:ac:eb:fc:ad:01:5b:75:da:e0:6e:66: 52:e4:10:96:fa:97:b0:cf:de:d9:cb:07:9a:97:95: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:BB:3F:D0:95:4F:96:0F:38:23:04:67:37:61:6A:D6:93:F9:9E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0bb8f54c-a9db-3f18-b509-943041573b1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b5:a7:5b:de:b0:c7:2c:c6:d1:76:d5:2f:e4:c1:bd:b5:88: e7:52:83:e1:3f:0d:41:38:67:30:88:13:20:0b:e7:7c:80:10: c2:85:d2:46:1f:34:91:fc:5d:1f:a8:6f:b3:a9:2f:a6:2a:87: 65:a3:d5:33:eb:84:c4:a4:c8:1c:e5:0e:56:29:de:6d:9c:17: 23:11:0e:6a:a4:9b:62:a0:e8:a0:52:aa:c7:52:f5:aa:73:e5: 4a:0d:79:48:cc:6b:97:66:02:c2:c7:ea:91:a4:c6:82:00:02: 49:00:9d:a9:7f:d0:99:da:b1:ce:8d:78:8a:fa:59:3b:cd:e0: 87:f2:b9:ad:1b:eb:3d:d3:c3:da:2e:bd:4a:ae:2f:fe:1c:bd: 95:42:b7:53:f3:cf:ca:fe:84:0d:c2:90:f1:f7:e2:b9:aa:1d: d3:67:6f:6b:ee:bc:1d:78:9a:64:99:04:f2:08:e2:41:1d:37: 16:7d:76:b1:26:a2:67:bb:91:53:0c:81:26:f2:06:f2:b2:c3: 69:23:dc:11:f3:a7:25:27:28:18:85:b6:46:82:49:4b:7b:7f: 35:51:74:da:56:23:99:fd:83:f3:2c:82:68:9e:7d:da:12:22: 0a:cc:3c:17:a1:72:21:05:82:36:0a:83:39:ef:b8:df:02:71: 78:d9:17:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhSA0tWHYiIY2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NDJmNWEyOGMtN2M2Ni00MzAyLThiZWYtYzRiNWE2YzhlMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGG/7e1l3pszSk6OBRw1pZFRVVgyHSIJCB3V U+j0v2bzf6+KD3MJNyKBbz//AnImlw0BMiMSgwtEey6dJ4heziOE4fKKf719ZUFa YOzVnZpFJ0Dz9ts53U5eIz29mGn5drSVeBx4mgzqUK21CSgFH+QzZIpLMDhVxkJE zYOZrEUOq0TnIAkzZdZavc113MozvznE1amMzzW+0zT5EN1aSWvIQlIRlNgkeJkR Vl9U82AqoGmsiwrR9ebayLPrYaxUhTMmmOx4H1nhI819xpTVCEw2NKUA+rDNTkZc fpdNyf8P5LwerOv8rQFbddrgbmZS5BCW+pewz97Zyweal5XF8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKy7P9CVT5YPOCMEZzdhataT+Z4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGJiOGY1NGMtYTlkYi0z ZjE4LWI1MDktOTQzMDQxNTczYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi1p1vesMcsxtF21S/kwb21iOdSg+E/DUE4ZzCIEyAL53yAEMKF0kYf NJH8XR+ob7OpL6Yqh2Wj1TPrhMSkyBzlDlYp3m2cFyMRDmqkm2Kg6KBSqsdS9apz 5UoNeUjMa5dmAsLH6pGkxoIAAkkAnal/0Jnasc6NeIr6WTvN4Ifyua0b6z3Tw9ou vUquL/4cvZVCt1Pzz8r+hA3CkPH34rmqHdNnb2vuvB14mmSZBPII4kEdNxZ9drEm ome7kVMMgSbyBvKyw2kj3BHzpyUnKBiFtkaCSUt7fzVRdNpWI5n9g/MsgmiefdoS IgrMPBehciEFgjYKgznvuN8CcXjZFzc= -----END CERTIFICATE-----Generated at Wed May 7 15:30:47 2025 by rpki-client