$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/113871bf-f831-37d7-a035-771101a9a20c.roa File: 113871bf-f831-37d7-a035-771101a9a20c.roa (raw, json) Hash identifier: uRPKhkDOBkbOMGGWDS0Jl3LU6jFAj5xVLO/S937IkfY= Subject key identifier: 23:DC:25:33:F8:BD:E9:B4:84:E4:87:1A:DE:93:15:3E:9B:49:3F:99 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3AE2FB830663035F2788 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/113871bf-f831-37d7-a035-771101a9a20c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.199.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:e2:fb:83:06:63:03:5f:27:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b4a75bfd-821e-4875-8c32-c42bef7b59ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:fa:53:7c:31:e4:4b:d2:14:7b:aa:1b:ec:83: 7e:e6:a1:12:bc:1b:8f:d5:92:21:02:86:bc:1f:39: 64:1f:34:91:d3:8f:c0:56:c9:7e:14:46:75:14:64: 04:8e:32:df:51:ba:28:ab:8d:b2:f3:1b:ca:76:1c: 45:9f:29:b5:7e:1a:ad:17:0e:a3:da:f0:03:9d:83: 0c:cf:c7:d9:b4:32:42:dc:b6:ef:ff:1f:05:40:74: 08:3b:79:91:d6:a6:bf:4e:cd:c8:20:30:a2:d9:70: b9:db:01:a6:42:d8:b9:61:dd:ed:e7:86:d5:ff:6c: cb:d6:70:18:97:3b:ae:07:76:08:b4:14:63:8f:20: e5:99:8b:82:25:d6:e3:72:99:5f:91:73:87:97:4d: bd:f5:74:48:d2:63:a7:f1:c9:8a:ee:ca:79:62:78: 45:62:d1:fd:f7:87:5e:39:ab:78:07:96:5c:a8:dc: 63:c1:65:af:30:8c:3c:06:56:19:40:5f:e0:d8:42: 5a:a6:f3:9f:9a:0d:ba:21:1f:14:d4:40:de:a5:5b: c8:52:ac:82:b6:67:f4:4b:fe:b8:af:54:81:79:cd: d0:43:ef:73:f6:92:d4:bb:85:d1:5f:a6:23:1a:2a: 71:46:3f:bd:bb:6a:f6:fc:66:58:75:b8:c5:03:0d: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DC:25:33:F8:BD:E9:B4:84:E4:87:1A:DE:93:15:3E:9B:49:3F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/113871bf-f831-37d7-a035-771101a9a20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:64:4d:b1:57:04:e6:23:0a:84:08:f7:cc:cb:6b:c9:ea:4a: fc:95:4b:e3:dd:a3:94:4b:8f:00:5e:7e:5d:39:83:19:72:45: 2f:91:12:9e:42:34:64:c9:51:b8:64:f5:e0:30:78:0a:cf:33: 2a:81:2c:9d:43:c5:39:ff:0f:98:a8:51:ec:e7:0d:4c:f5:1e: 9e:51:61:03:27:1d:e7:1e:43:ad:47:a7:2d:58:52:dd:8b:af: 56:64:48:cd:f2:8b:b1:da:8b:66:27:d5:45:f8:fc:d8:9a:f9: ab:cb:05:e7:61:60:9e:a9:9f:55:14:6c:49:3f:88:fc:4c:4f: 08:4b:54:58:06:61:6a:47:9e:c4:88:60:0e:54:e8:05:82:12: a0:ba:84:78:f2:f4:f3:8b:28:b0:50:9d:1f:8c:3d:01:82:71: 1d:fe:48:21:f6:5f:e5:ae:6f:8e:b0:d6:8a:88:88:ed:a7:09: 1e:77:5b:ae:13:9b:67:1a:96:91:56:37:a1:90:82:4c:d4:db: 01:4c:f1:10:8f:f7:b9:4b:e2:fc:47:e3:52:e1:0e:1e:66:83: 8b:c9:2e:4b:6e:d6:05:94:39:7a:45:7e:29:b4:fa:68:db:de: 9e:8f:b1:3d:35:53:05:52:e9:df:fa:35:dd:59:eb:2d:0e:30: cf:40:bd:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjri+4MGYwNfJ4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjRhNzViZmQtODIxZS00ODc1LThjMzItYzQyYmVmN2I1OWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifpTfDHkS9IUe6ob7IN+5qESvBuP1ZIhAoa8 HzlkHzSR04/AVsl+FEZ1FGQEjjLfUbooq42y8xvKdhxFnym1fhqtFw6j2vADnYMM z8fZtDJC3Lbv/x8FQHQIO3mR1qa/Ts3IIDCi2XC52wGmQti5Yd3t54bV/2zL1nAY lzuuB3YItBRjjyDlmYuCJdbjcplfkXOHl0299XRI0mOn8cmK7sp5YnhFYtH994de Oat4B5ZcqNxjwWWvMIw8BlYZQF/g2EJapvOfmg26IR8U1EDepVvIUqyCtmf0S/64 r1SBec3QQ+9z9pLUu4XRX6YjGipxRj+9u2r2/GZYdbjFAw0pIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPcJTP4vem0hOSHGt6TFT6bST+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTEzODcxYmYtZjgzMS0z N2Q3LWEwMzUtNzcxMTAxYTlhMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMcaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZkTbFXBOYjCoQI98zLa8nqSvyVS+Pdo5RLjwBefl05gxlyRS+REp5C NGTJUbhk9eAweArPMyqBLJ1DxTn/D5ioUeznDUz1Hp5RYQMnHeceQ61Hpy1YUt2L r1ZkSM3yi7Hai2Yn1UX4/Nia+avLBedhYJ6pn1UUbEk/iPxMTwhLVFgGYWpHnsSI YA5U6AWCEqC6hHjy9POLKLBQnR+MPQGCcR3+SCH2X+Wub46w1oqIiO2nCR53W64T m2calpFWN6GQgkzU2wFM8RCP97lL4vxH41LhDh5mg4vJLktu1gWUOXpFfim0+mjb 3p6PsT01UwVS6d/6Nd1Z6y0OMM9AvXw= -----END CERTIFICATE-----Generated at Sun May 11 09:37:02 2025 by rpki-client