$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa File: 0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa (raw, json) Hash identifier: Dz1XEDxDCQ4eCo5A3Ubjb6p2eL2kfRIiHzQnCssYrpc= Subject key identifier: 33:FB:E3:65:BB:86:F6:A7:34:F8:02:51:2C:24:96:50:2C:6C:EB:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A44D42606323F404E13E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.204.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:44:d4:26:06:32:3f:40:4e:13:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d26bd7d1-a734-4dbc-ab94-92f1cb2917dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:20:6d:73:0e:4d:60:86:d1:ee:8a:94:11:ef: 4c:9e:00:78:2c:21:2e:5e:39:d9:bf:e8:f1:29:d9: 5c:bd:27:7b:4d:70:af:3d:b1:cb:1c:81:d3:6c:9f: db:bf:63:0b:99:7f:1f:ff:cd:ac:00:68:43:4b:91: fd:f9:73:d4:90:99:ac:84:2c:b8:f7:55:d7:30:35: 02:d7:c8:0a:2c:30:f2:9a:83:13:7c:82:33:30:54: 97:33:93:a5:56:68:75:ef:e9:2a:e3:92:8b:1b:7f: 92:bf:ec:2c:5d:da:28:8f:c5:3b:99:9a:93:6b:ab: 0a:dc:af:6e:5a:76:6c:8d:60:93:41:c7:eb:b7:bc: 6f:95:10:d3:87:5c:f4:90:86:57:1e:d4:48:05:f2: 33:c8:94:fc:b9:df:b0:94:db:f6:ee:1f:87:97:4b: b8:1d:ed:89:3e:0e:6b:72:05:70:b5:1a:43:90:60: e6:d4:05:66:b9:96:a5:83:51:b3:d3:0f:a9:e7:24: 34:85:7f:f7:ab:29:13:2d:00:c4:44:81:c8:7a:25: 11:58:94:85:45:2a:20:f0:24:ec:c6:bb:c7:18:e9: b4:ba:dd:55:11:c4:dd:19:e7:27:f2:52:05:17:8b: 69:c9:a4:2e:94:17:80:35:6a:31:2e:bb:91:dc:21: fd:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FB:E3:65:BB:86:F6:A7:34:F8:02:51:2C:24:96:50:2C:6C:EB:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f9d1346-ce62-36ba-a3e0-95ca2c3819f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:5e:8a:d6:6e:e0:d8:48:b6:8d:be:9f:53:b6:f5:6a:45:fa: 01:58:67:4a:91:9e:4b:88:fd:4e:40:91:1b:ea:b5:0d:38:be: 29:bd:ea:b5:ba:1f:1f:e2:31:45:ba:cf:a5:9c:46:96:6a:b1: 89:99:56:90:dc:04:e4:e0:46:ae:e8:e5:64:82:fa:6b:e5:7d: 88:47:73:aa:09:64:77:86:92:70:0a:a5:11:d2:12:d4:87:6b: e2:3e:30:86:8c:fa:72:6d:dc:a6:98:2f:52:f2:50:3a:5a:3d: 2a:4f:4a:3a:f0:32:ab:88:5f:1b:53:52:af:c5:b7:24:dd:e6: 63:fe:c5:3d:a2:98:81:a4:ad:dd:f1:bc:46:af:18:0b:e5:2b: eb:b5:b1:89:5b:53:7c:45:92:71:1c:56:a4:71:1b:6a:31:8e: 71:4c:a6:f5:a0:d9:99:90:2f:4d:6d:43:b6:23:cd:01:0d:c7: 13:e6:70:03:08:32:b3:66:96:36:3c:00:47:a3:36:69:10:e1: 7d:e0:67:b6:68:36:4e:ba:39:c9:ce:37:f0:bc:98:33:fc:05: d3:de:ff:c9:81:74:5b:e5:f8:8f:b4:71:d6:1d:16:f3:90:8b: a5:33:c4:36:39:e3:ab:67:6a:6c:fe:70:06:cd:92:fc:8a:ac: 07:8f:c4:34 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSkTUJgYyP0BOE+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDI2YmQ3ZDEtYTczNC00ZGJjLWFiOTQtOTJmMWNiMjkxN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyBtcw5NYIbR7oqUEe9MngB4LCEuXjnZv+jx KdlcvSd7TXCvPbHLHIHTbJ/bv2MLmX8f/82sAGhDS5H9+XPUkJmshCy491XXMDUC 18gKLDDymoMTfIIzMFSXM5OlVmh17+kq45KLG3+Sv+wsXdooj8U7mZqTa6sK3K9u WnZsjWCTQcfrt7xvlRDTh1z0kIZXHtRIBfIzyJT8ud+wlNv27h+Hl0u4He2JPg5r cgVwtRpDkGDm1AVmuZalg1Gz0w+p5yQ0hX/3qykTLQDERIHIeiURWJSFRSog8CTs xrvHGOm0ut1VEcTdGecn8lIFF4tpyaQulBeANWoxLruR3CH9FwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDP742W7hvanNPgCUSwkllAsbOsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY5ZDEzNDYtY2U2Mi0z NmJhLWEzZTAtOTVjYTJjMzgxOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2MwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAOV6K1m7g2Ei2jb6fU7b1akX6AVhnSpGeS4j9TkCRG+q1DTi+Kb3qtbof H+IxRbrPpZxGlmqxiZlWkNwE5OBGrujlZIL6a+V9iEdzqglkd4aScAqlEdIS1Idr 4j4whoz6cm3cppgvUvJQOlo9Kk9KOvAyq4hfG1NSr8W3JN3mY/7FPaKYgaSt3fG8 Rq8YC+Ur67WxiVtTfEWScRxWpHEbajGOcUym9aDZmZAvTW1DtiPNAQ3HE+ZwAwgy s2aWNjwAR6M2aRDhfeBntmg2Tro5yc438LyYM/wF097/yYF0W+X4j7Rx1h0W85CL pTPENjnjq2dqbP5wBs2S/IqsB4/ENA== -----END CERTIFICATE-----Generated at Tue Jul 1 01:00:47 2025 by rpki-client