$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15aedf6a-f951-3658-8cd4-df82a2e8eb5e.roa File: 15aedf6a-f951-3658-8cd4-df82a2e8eb5e.roa (raw, json) Hash identifier: xPcRnkEX8uAsLWahVzP9v09sUSypzFHVaSgHPDBnnXI= Subject key identifier: 1C:F5:4B:5A:BE:E9:AD:29:CE:AB:C8:BC:4D:F7:97:EF:7D:3D:EC:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3F0D5167DCEBAEAE8300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15aedf6a-f951-3658-8cd4-df82a2e8eb5e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 139.55.176.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3f:0d:51:67:dc:eb:ae:ae:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b46da87c-f779-421a-88ed-92a3f2eb9b01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:7c:04:c8:2b:1a:02:7d:69:43:a1:a6:10: 67:25:9e:80:b2:f5:1c:69:2b:d9:8e:82:0d:b8:16: 58:ab:11:74:e5:2b:c6:e2:f5:3c:eb:47:3e:1e:d3: 75:26:d3:40:35:9b:ae:44:ca:ca:23:1d:ae:6e:ea: 53:16:78:61:13:88:93:67:24:54:0e:41:e8:8c:7b: 57:c0:2b:35:3f:85:20:5e:17:7a:71:e1:99:cc:1f: 6d:fd:cf:54:13:b1:c7:05:a1:25:66:c8:ab:4a:47: bc:2a:05:04:02:a8:d5:97:ea:d1:e0:d7:b2:9f:40: 6f:b0:f1:e6:d9:40:f6:63:17:73:88:9e:82:e9:d1: 34:4c:0c:4d:14:a1:db:e8:57:ad:72:94:a6:e6:68: 2b:90:97:ff:3f:71:c1:28:6c:0e:3d:17:b3:51:74: 51:3b:d5:ac:c8:9f:43:f4:a1:b4:52:29:81:ab:b4: 80:7a:19:82:c9:7a:68:d7:c2:68:d7:56:0d:61:6e: 58:05:36:10:c6:a8:1b:1d:5f:ff:fe:fc:62:4e:da: c0:0e:f9:06:7f:35:9f:ff:96:2b:a2:1c:3b:6e:95: cc:c1:e0:88:39:aa:c6:ba:47:b9:17:59:d1:9d:db: 53:07:66:fb:34:5c:d8:58:02:eb:44:ca:b8:41:a2: 82:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F5:4B:5A:BE:E9:AD:29:CE:AB:C8:BC:4D:F7:97:EF:7D:3D:EC:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/15aedf6a-f951-3658-8cd4-df82a2e8eb5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ab:71:8b:80:71:93:28:30:0f:fb:3e:8a:c0:49:16:ef:06: 44:e0:19:2e:1f:8f:52:31:aa:1a:17:25:fb:80:9d:f1:3e:7a: 92:0a:19:c6:23:c4:1f:e3:bb:1b:88:da:31:d5:b0:9d:36:32: f5:f6:f4:fa:b9:4f:05:4b:72:91:74:c2:e9:40:d8:a4:91:c8: 33:6a:27:a0:b8:8b:7a:c9:95:44:f1:5e:26:4f:2f:46:3d:65: dc:1a:16:8b:05:ce:ba:ae:0a:cf:62:c8:3b:4d:b3:75:96:05: f5:f3:7e:c4:58:14:6e:f0:3a:b9:0a:d1:64:95:76:07:77:05: 61:f5:d5:bb:47:32:40:16:e5:8b:d5:33:91:d1:b9:b1:16:5f: 1e:f9:c2:93:e0:ef:51:ab:0d:14:f4:34:97:e3:4f:61:4d:69: a0:26:2e:f9:51:b5:4b:f6:3c:2e:b0:10:f8:97:be:cf:4d:15: f1:4b:5d:d6:7d:6e:97:a4:61:34:bc:65:44:37:e0:c4:57:37: ab:a7:8f:03:c1:90:db:b5:1e:d8:79:6f:c8:cb:1f:79:66:8d: 2d:6a:b7:38:6c:2c:5a:1f:e5:fc:0f:ab:7a:c7:79:31:38:d4: 91:51:92:3f:d7:be:91:2a:20:db:e4:0f:f7:7c:33:2a:9e:56: c5:41:53:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj8NUWfc666ugwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjQ2ZGE4N2MtZjc3OS00MjFhLTg4ZWQtOTJhM2YyZWI5YjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJR8BMgrGgJ9aUOhphBnJZ6AsvUcaSvZjoIN uBZYqxF05SvG4vU860c+HtN1JtNANZuuRMrKIx2ubupTFnhhE4iTZyRUDkHojHtX wCs1P4UgXhd6ceGZzB9t/c9UE7HHBaElZsirSke8KgUEAqjVl+rR4Neyn0BvsPHm 2UD2YxdziJ6C6dE0TAxNFKHb6FetcpSm5mgrkJf/P3HBKGwOPRezUXRRO9WsyJ9D 9KG0UimBq7SAehmCyXpo18Jo11YNYW5YBTYQxqgbHV///vxiTtrADvkGfzWf/5Yr ohw7bpXMweCIOarGuke5F1nRndtTB2b7NFzYWALrRMq4QaKCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBz1S1q+6a0pzqvIvE33l+99PezQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTVhZWRmNmEtZjk1MS0z NjU4LThjZDQtZGY4MmEyZThlYjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBizewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+rcYuAcZMoMA/7PorASRbvBkTgGS4fj1IxqhoXJfuAnfE+epIKGcYj xB/juxuI2jHVsJ02MvX29Pq5TwVLcpF0wulA2KSRyDNqJ6C4i3rJlUTxXiZPL0Y9 ZdwaFosFzrquCs9iyDtNs3WWBfXzfsRYFG7wOrkK0WSVdgd3BWH11btHMkAW5YvV M5HRubEWXx75wpPg71GrDRT0NJfjT2FNaaAmLvlRtUv2PC6wEPiXvs9NFfFLXdZ9 bpekYTS8ZUQ34MRXN6unjwPBkNu1Hth5b8jLH3lmjS1qtzhsLFof5fwPq3rHeTE4 1JFRkj/XvpEqINvkD/d8MyqeVsVBU/M= -----END CERTIFICATE-----Generated at Sat May 10 07:01:57 2025 by rpki-client