$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa File: 0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa (raw, json) Hash identifier: 3GA3V0/9V0sBU4hTFH1wuT4NrZhhIkv3n5FnBrGM7WQ= Subject key identifier: EC:2F:AE:EF:04:36:7D:94:0D:D3:18:B8:06:AB:61:0B:6A:3D:BC:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1BB2DDF98F48B61AC600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 173.184.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1b:b2:dd:f9:8f:48:b6:1a:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=59215f75-0acb-405d-b609-0928ec0c0173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:df:86:71:77:d1:e5:c8:73:06:3c:b3:da:9b: 8b:56:15:67:93:85:ac:23:ed:30:eb:77:1d:3f:1d: b4:57:a0:6e:8e:67:0f:77:18:ff:74:f8:7e:ea:79: cc:52:61:70:09:a8:ff:7a:1b:31:10:eb:c8:9b:75: d5:28:91:d6:b1:c1:f0:91:a1:51:11:9b:6c:8d:64: 5b:03:05:ad:77:f9:2a:71:49:6c:55:b6:23:3c:39: 83:a0:6f:c0:b3:9c:ff:be:7b:dd:a1:ac:49:b9:b1: 94:a4:7e:2b:07:49:5e:e2:5a:32:71:be:53:67:a1: 96:11:4e:22:b3:d6:48:72:72:47:85:a8:01:e8:f3: 8a:67:8d:80:b2:5e:09:65:ba:25:ff:9f:8c:0a:4d: 1c:c9:95:0c:90:bd:3c:d6:93:1b:86:d1:b3:df:ba: 16:78:27:9b:3d:9c:86:f6:a3:1a:dd:40:fb:f3:46: bf:4e:ee:77:3d:c5:c2:e5:fe:ab:77:b7:7b:5a:c8: e0:d9:9e:8d:f9:85:34:00:20:38:8a:02:a8:af:02: 02:bf:9a:d7:9f:ab:cc:a9:18:e2:db:ae:5f:a6:4d: 75:69:e8:4c:54:ed:d3:22:f9:dc:6a:3a:0a:96:6b: 22:03:1c:62:29:f4:18:4f:71:0e:ad:ee:3a:48:67: 08:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:2F:AE:EF:04:36:7D:94:0D:D3:18:B8:06:AB:61:0B:6A:3D:BC:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0d9d5a65-c078-3d1c-9f74-0b42aadacc55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:3f:1c:d5:30:62:3e:ee:ac:d5:11:a0:9d:70:04:86:ed:05: de:b6:90:e3:10:7d:b4:ee:0e:47:b4:ba:43:61:78:fb:dc:2f: 6a:1e:17:db:33:07:53:d6:76:a6:1f:eb:fb:7c:a5:2c:55:08: fb:48:85:32:a8:2f:f9:a7:04:e1:ab:5b:35:8f:82:e7:f5:b1: c7:a4:74:3f:2a:9f:e0:56:87:2f:b1:3d:12:e4:14:5c:ea:12: 55:62:06:ad:93:05:19:87:02:d4:28:12:0b:ec:02:65:0f:c7: 69:c0:5b:35:63:45:57:43:c1:75:52:8b:b5:41:5a:d9:9e:9b: b7:e0:e0:f1:7a:d1:86:6e:88:76:1d:ae:74:d7:25:ae:fd:ed: 40:77:54:b7:0b:4b:8a:92:fd:7f:b5:ba:97:2e:cb:71:d3:f5: ba:0a:ed:4f:a5:ee:76:24:30:47:72:2e:e1:9a:20:a0:2f:44: 14:2b:da:55:a2:2d:ba:da:dd:fa:b9:83:ba:37:03:3f:9c:f6: 07:12:40:e9:d2:6a:bd:6c:49:dd:c8:8d:7e:c4:40:4b:ca:12: e7:95:c4:49:42:9d:0f:44:f8:e0:cd:29:71:80:4f:61:9c:c1: d7:6e:0b:b3:72:fa:70:b4:1f:23:e9:ee:0b:6c:b2:73:a9:8b: 68:8d:d0:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhuy3fmPSLYaxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NTkyMTVmNzUtMGFjYi00MDVkLWI2MDktMDkyOGVjMGMwMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9+GcXfR5chzBjyz2puLVhVnk4WsI+0w63cd Px20V6BujmcPdxj/dPh+6nnMUmFwCaj/ehsxEOvIm3XVKJHWscHwkaFREZtsjWRb AwWtd/kqcUlsVbYjPDmDoG/As5z/vnvdoaxJubGUpH4rB0le4loycb5TZ6GWEU4i s9ZIcnJHhagB6POKZ42Asl4JZbol/5+MCk0cyZUMkL081pMbhtGz37oWeCebPZyG 9qMa3UD780a/Tu53PcXC5f6rd7d7Wsjg2Z6N+YU0ACA4igKorwICv5rXn6vMqRji 265fpk11aehMVO3TIvncajoKlmsiAxxiKfQYT3EOre46SGcIjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwvru8ENn2UDdMYuAarYQtqPbyoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGQ5ZDVhNjUtYzA3OC0z ZDFjLTlmNzQtMGI0MmFhZGFjYzU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACE/HNUwYj7urNURoJ1wBIbtBd62kOMQfbTuDke0ukNhePvcL2oeF9sz B1PWdqYf6/t8pSxVCPtIhTKoL/mnBOGrWzWPguf1scekdD8qn+BWhy+xPRLkFFzq ElViBq2TBRmHAtQoEgvsAmUPx2nAWzVjRVdDwXVSi7VBWtmem7fg4PF60YZuiHYd rnTXJa797UB3VLcLS4qS/X+1upcuy3HT9boK7U+l7nYkMEdyLuGaIKAvRBQr2lWi Lbra3fq5g7o3Az+c9gcSQOnSar1sSd3IjX7EQEvKEueVxElCnQ9E+ODNKXGAT2Gc wdduC7Ny+nC0HyPp7gtssnOpi2iN0Lg= -----END CERTIFICATE-----Generated at Wed May 7 16:55:51 2025 by rpki-client