$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa File: 21ef65b0-89b3-3b33-8192-e464535e916c.roa (raw, json) Hash identifier: Tc9+YCGjxAUpUdp0pRLRwo4wgAwGANOktzRlM/UXeHc= Subject key identifier: 27:24:59:D6:58:59:F3:63:47:20:3D:C5:6D:B4:D6:BA:73:CD:9F:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A18839C385F909C882000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 207.222.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:18:83:9c:38:5f:90:9c:88:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=713b9116-f8dd-42a9-b982-1dba2f2b2297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:e7:21:c4:d8:7f:ba:ac:14:f7:7d:f0:3b: 7c:46:13:e9:2b:8e:c2:56:59:5b:ab:ee:75:a9:57: 03:9a:5f:8c:52:d9:95:32:ef:38:10:bd:20:35:58: 85:20:f6:10:f7:d2:0f:d3:c3:be:1c:0f:b9:f1:db: 9f:61:8f:64:01:72:6f:39:44:29:8c:46:72:62:b8: 9d:8d:de:40:4c:78:45:ee:a9:fe:e4:e3:78:0b:4d: 77:5d:ee:0e:15:40:37:6a:b7:1b:89:ab:05:85:e8: 2d:30:b1:43:e5:dc:46:0e:01:fb:c9:c7:d7:ca:3c: 57:ac:cc:22:7c:64:f3:d2:ae:6c:9e:85:d9:1b:6a: f2:f6:47:90:da:fd:87:0b:98:6f:b5:8d:1c:5f:4d: 85:f5:55:86:fd:3d:a0:13:5a:6a:9e:0a:02:ce:31: fd:b5:5f:12:3f:9b:65:f2:dd:8e:66:4d:50:20:f4: 5d:4d:74:55:35:fe:1b:5e:01:15:81:b7:aa:16:31: 17:cf:24:01:77:98:01:85:88:b8:7d:d6:38:a1:db: 35:b7:cf:3a:db:11:95:6f:b8:43:2b:94:48:db:39: f1:fb:43:7b:f2:a6:27:ea:63:3b:21:2c:02:b6:75: 82:40:a6:95:d0:13:8b:fb:fd:85:cc:30:2c:03:57: 3c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:24:59:D6:58:59:F3:63:47:20:3D:C5:6D:B4:D6:BA:73:CD:9F:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21ef65b0-89b3-3b33-8192-e464535e916c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.222.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:13:2c:3f:87:28:27:4c:d7:60:51:c2:0a:6e:6f:e8:78:bc: 9f:37:ba:ec:f6:e2:f1:04:7a:e8:a0:78:9e:62:73:24:28:05: bf:f0:c5:34:f2:26:5a:1f:71:cf:b1:bf:43:4d:0e:26:3b:5f: a0:77:fb:01:92:64:79:cc:d8:b1:5d:43:9c:b3:b8:db:eb:2d: b1:61:5e:82:db:f5:12:a2:e3:63:b0:77:1b:f1:af:fd:b4:ec: c0:55:a2:b5:6f:9e:4d:86:e3:2a:54:35:69:ba:a6:dd:d2:38: fb:81:ea:39:88:d5:95:f1:8c:55:d3:9c:0b:ad:64:98:6a:85: 29:e7:d3:2d:ad:10:3a:30:d1:78:16:3f:6e:a6:2b:55:cb:8f: c5:30:f2:a4:44:7b:c2:ba:96:d1:72:84:47:5d:57:04:c9:9f: b9:13:02:5c:d4:7d:49:be:01:f5:3c:cf:11:63:26:3d:04:5e: 52:23:3e:4d:31:e4:11:a1:03:6d:25:68:93:b2:75:e0:96:84: 8a:cf:63:ef:cc:4b:eb:ad:a0:0f:35:50:78:80:e3:f9:f7:67: 60:87:a9:4d:25:e6:8b:f5:3c:a7:a4:84:4b:2c:f5:ce:da:71: 11:83:38:9c:22:7c:9a:6f:10:09:46:6e:44:b3:06:14:81:f1: 06:f2:bd:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShiDnDhfkJyIIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzEzYjkxMTYtZjhkZC00MmE5LWI5ODItMWRiYTJmMmIyMjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4jnIcTYf7qsFPd98Dt8RhPpK47CVllbq+51 qVcDml+MUtmVMu84EL0gNViFIPYQ99IP08O+HA+58dufYY9kAXJvOUQpjEZyYrid jd5ATHhF7qn+5ON4C013Xe4OFUA3arcbiasFhegtMLFD5dxGDgH7ycfXyjxXrMwi fGTz0q5snoXZG2ry9keQ2v2HC5hvtY0cX02F9VWG/T2gE1pqngoCzjH9tV8SP5tl 8t2OZk1QIPRdTXRVNf4bXgEVgbeqFjEXzyQBd5gBhYi4fdY4ods1t8862xGVb7hD K5RI2znx+0N78qYn6mM7ISwCtnWCQKaV0BOL+/2FzDAsA1c84wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCckWdZYWfNjRyA9xW201rpzzZ82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlZjY1YjAtODliMy0z YjMzLTgxOTItZTQ2NDUzNWU5MTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz94DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcTLD+HKCdM12BRwgpub+h4vJ83uuz24vEEeuigeJ5icyQoBb/wxTTy Jlofcc+xv0NNDiY7X6B3+wGSZHnM2LFdQ5yzuNvrLbFhXoLb9RKi42Owdxvxr/20 7MBVorVvnk2G4ypUNWm6pt3SOPuB6jmI1ZXxjFXTnAutZJhqhSnn0y2tEDow0XgW P26mK1XLj8Uw8qREe8K6ltFyhEddVwTJn7kTAlzUfUm+AfU8zxFjJj0EXlIjPk0x 5BGhA20laJOydeCWhIrPY+/MS+utoA81UHiA4/n3Z2CHqU0l5ov1PKekhEss9c7a cRGDOJwifJpvEAlGbkSzBhSB8Qbyvak= -----END CERTIFICATE-----Generated at Fri May 9 07:42:33 2025 by rpki-client