$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa File: 290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa (raw, json) Hash identifier: j/vCGwQOW036IipQ8iiSIpVwINX3ekmeFcAjmGU4xIo= Subject key identifier: CF:A0:5E:B6:0C:05:CE:62:4A:90:88:1D:D7:DF:D8:87:69:2E:D1:47 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA882C50C6F648262BF900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 67.141.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:88:2c:50:c6:f6:48:26:2b:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=5e7bb832-9dc2-412f-b395-b4244b468720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:45:d9:44:ae:6e:74:0b:63:5c:4a:e6:2f:b3: be:12:3f:58:b9:fe:c1:5d:8c:da:91:50:d7:40:4e: c2:88:5a:16:07:88:e1:a5:db:37:03:af:76:08:a0: e4:a0:76:a6:86:44:de:37:5d:56:4d:5c:bd:e0:04: 19:83:e9:1b:68:51:1a:dc:6b:99:c6:44:61:26:65: bc:30:fb:4b:0c:37:8b:f2:b8:ee:2c:f6:79:5a:66: f8:ca:06:41:cf:a7:63:73:80:5a:02:9d:dc:16:cb: d6:f7:d0:86:00:5d:1c:f5:a3:19:4a:7e:24:c7:24: 90:7d:fc:58:50:28:1e:c5:ec:9e:79:a2:f1:f4:e5: b6:aa:d2:8f:0f:70:6f:c1:a6:e2:e5:df:eb:a1:56: 4b:8d:01:65:e7:99:8c:11:1d:0d:45:d1:90:c6:46: c6:21:2b:0c:00:e1:5c:52:f3:ec:72:33:19:28:d1: 0d:ab:2b:50:26:4b:1b:f5:07:f2:fc:0c:56:a6:2c: 79:d3:22:46:89:f7:52:93:2f:8e:94:a2:88:89:b3: 26:72:3e:48:95:6a:3f:76:4a:79:f8:f8:21:72:47: 4c:e1:ab:11:1c:7e:58:54:12:34:8c:68:7f:29:03: 6d:f2:d5:4b:01:25:75:2b:9c:4d:73:f2:36:e7:cb: be:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A0:5E:B6:0C:05:CE:62:4A:90:88:1D:D7:DF:D8:87:69:2E:D1:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/290b17d3-46d1-383e-baa1-5a1dd19bbebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f1:07:30:c5:74:0d:73:5a:75:04:41:25:f6:e2:f1:80:3b: 3f:49:1c:0d:20:cd:4c:af:5c:c3:1b:9e:7f:48:c0:20:a3:d1: e7:1b:d6:cf:a0:94:6c:b2:fb:04:59:8f:f1:82:6d:3e:5d:00: 15:f5:d1:6d:71:6e:92:01:fb:45:7c:d4:41:4c:24:1c:c4:c0: 0f:d6:d1:9a:7e:71:7b:ec:c7:15:af:6f:8e:45:cf:49:3b:03: c4:ff:93:4d:c8:4b:0a:07:fd:0b:d2:ca:46:1b:d3:6e:0a:03: 46:2f:23:60:1b:89:ea:4c:9c:de:e3:70:91:dc:b5:bd:08:61: 56:ab:ea:81:04:87:42:b9:2b:78:de:5e:09:f9:e0:7c:2a:f5: 7c:fc:8d:5e:11:b3:94:96:9f:2a:48:78:f5:1a:0a:b2:03:94: 1c:54:66:db:69:88:fe:fa:2b:49:f1:4b:3a:0c:56:9d:42:bc: cd:21:51:29:63:12:96:d0:ec:9b:d6:8b:db:d6:b2:be:3f:b5: 6d:55:50:7b:39:60:a0:19:a4:11:79:b5:b1:fd:55:14:a6:ad: 33:4f:11:f7:5b:45:56:02:cb:60:e3:24:93:d3:51:3e:a7:a3: 8d:4e:f9:18:1b:fc:dc:9d:4b:a7:95:1e:ca:01:c6:07:1a:32: 65:e8:43:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qogsUMb2SCYr+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NWU3YmI4MzItOWRjMi00MTJmLWIzOTUtYjQyNDRiNDY4NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEXZRK5udAtjXErmL7O+Ej9Yuf7BXYzakVDX QE7CiFoWB4jhpds3A692CKDkoHamhkTeN11WTVy94AQZg+kbaFEa3GuZxkRhJmW8 MPtLDDeL8rjuLPZ5Wmb4ygZBz6djc4BaAp3cFsvW99CGAF0c9aMZSn4kxySQffxY UCgexeyeeaLx9OW2qtKPD3Bvwabi5d/roVZLjQFl55mMER0NRdGQxkbGISsMAOFc UvPscjMZKNENqytQJksb9Qfy/AxWpix50yJGifdSky+OlKKIibMmcj5IlWo/dkp5 +PghckdM4asRHH5YVBI0jGh/KQNt8tVLASV1K5xNc/I258u+NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+gXrYMBc5iSpCIHdff2IdpLtFHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjkwYjE3ZDMtNDZkMS0z ODNlLWJhYTEtNWExZGQxOWJiZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ41gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrxBzDFdA1zWnUEQSX24vGAOz9JHA0gzUyvXMMbnn9IwCCj0ecb1s+g lGyy+wRZj/GCbT5dABX10W1xbpIB+0V81EFMJBzEwA/W0Zp+cXvsxxWvb45Fz0k7 A8T/k03ISwoH/QvSykYb024KA0YvI2AbiepMnN7jcJHctb0IYVar6oEEh0K5K3je Xgn54Hwq9Xz8jV4Rs5SWnypIePUaCrIDlBxUZttpiP76K0nxSzoMVp1CvM0hUSlj EpbQ7JvWi9vWsr4/tW1VUHs5YKAZpBF5tbH9VRSmrTNPEfdbRVYCy2DjJJPTUT6n o41O+Rgb/NydS6eVHsoBxgcaMmXoQ+0= -----END CERTIFICATE-----Generated at Tue Jul 1 03:29:36 2025 by rpki-client