$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa File: 2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa (raw, json) Hash identifier: c5oHPpmAU+A1Lat2X7wZHWSfwTYxuldYp/b3+SWNi08= Subject key identifier: 23:A6:51:E5:F6:7D:F1:D6:E2:08:C0:F9:19:22:8E:A2:42:5F:38:86 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A399F58FAF81886FDC520 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 63.254.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:39:9f:58:fa:f8:18:86:fd:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bbcd27c3-c4cf-43e8-891c-ee75043a8a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:b0:fc:d5:0f:f7:69:27:3e:ca:5f:2e:21: 6d:af:33:01:d6:00:cb:4b:12:0c:39:e1:6c:56:af: cb:c4:7a:73:40:f3:c3:91:e7:78:dd:e1:25:df:7a: 21:f6:bd:94:b4:d4:8f:d0:44:4b:5b:4f:7f:15:23: 5a:4c:aa:ce:7a:86:92:09:13:24:a5:7b:d5:d5:31: 20:87:cf:f4:54:41:66:a4:45:7c:b2:64:09:8e:c5: 7e:58:80:3b:af:1b:62:08:03:35:23:90:2e:f0:1c: 26:d2:b1:9f:ab:1e:8f:4c:bc:79:82:78:88:42:66: d3:77:df:69:b5:87:dc:99:c5:eb:5c:f9:94:dc:61: 83:2c:d3:0d:5f:a7:10:2c:73:24:b5:60:0e:50:09: 15:cd:e7:5c:91:ce:e5:cf:57:91:a3:6c:68:5d:bc: 1a:09:ac:bb:b6:e8:f9:d5:63:29:bd:a7:06:7d:9b: 7f:d1:29:9d:3e:f8:ef:a6:b8:83:01:91:8c:a5:65: e6:91:9e:9b:6c:74:76:d3:1b:db:5d:7b:54:5a:07: 59:33:05:40:23:94:58:7c:ca:7a:4e:a7:4f:e9:02: a5:05:b6:36:92:b4:82:32:45:aa:9a:7a:94:e5:ae: da:dd:ad:e3:10:f8:a3:cc:d4:39:d8:53:3c:38:b8: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:51:E5:F6:7D:F1:D6:E2:08:C0:F9:19:22:8E:A2:42:5F:38:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2b2c945a-dd0d-3e09-a74a-728b86ae7d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:01:f7:aa:b6:3c:30:ac:6c:47:c1:71:90:25:74:ce:d3:39: c3:24:c4:0f:ea:9f:71:e0:67:ea:e3:74:df:af:91:7a:e1:e1: 00:e2:6f:a6:0d:58:40:33:bf:0e:23:f0:91:60:5d:69:a0:2e: 22:01:70:f0:45:40:b7:23:05:ff:3b:d4:db:aa:f1:ab:08:86: 0a:77:0d:df:cf:dc:3e:c7:cd:f4:d2:a2:75:b6:d1:7f:f7:55: e3:45:70:9f:1b:fc:e0:59:21:02:bd:48:6c:bc:26:c8:25:bf: ed:0c:89:42:3e:36:fa:7a:c3:18:2d:8f:33:c0:d2:8a:ff:0c: e7:c0:f6:5a:66:aa:cd:9a:53:f1:8c:77:87:b7:2a:d6:57:20: 0d:88:99:94:7a:5b:fc:9b:25:6c:83:bb:8b:ba:f5:ef:8c:10: c2:ec:0f:b2:9c:4a:3d:4c:b6:49:57:bf:33:83:11:56:98:5a: 1c:b1:dc:47:d8:0b:69:63:b6:92:42:27:bf:b2:14:60:7b:d1: 5f:86:27:e7:89:4c:2b:98:ca:1d:b6:ce:88:19:d7:49:44:5a: 0e:84:68:53:8f:95:3f:27:4e:94:7a:eb:7f:86:2d:c6:d3:8a: 31:d6:1e:20:dc:e9:c5:74:4c:8f:36:64:03:dc:e9:e0:2a:c2: 57:b2:80:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjmfWPr4GIb9xSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmJjZDI3YzMtYzRjZi00M2U4LTg5MWMtZWU3NTA0M2E4YTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztyw/NUP92knPspfLiFtrzMB1gDLSxIMOeFs Vq/LxHpzQPPDked43eEl33oh9r2UtNSP0ERLW09/FSNaTKrOeoaSCRMkpXvV1TEg h8/0VEFmpEV8smQJjsV+WIA7rxtiCAM1I5Au8Bwm0rGfqx6PTLx5gniIQmbTd99p tYfcmcXrXPmU3GGDLNMNX6cQLHMktWAOUAkVzedckc7lz1eRo2xoXbwaCay7tuj5 1WMpvacGfZt/0SmdPvjvpriDAZGMpWXmkZ6bbHR20xvbXXtUWgdZMwVAI5RYfMp6 TqdP6QKlBbY2krSCMkWqmnqU5a7a3a3jEPijzNQ52FM8OLi0MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOmUeX2ffHW4gjA+RkijqJCXziGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmIyYzk0NWEtZGQwZC0z ZTA5LWE3NGEtNzI4Yjg2YWU3ZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGP/7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQB96q2PDCsbEfBcZAldM7TOcMkxA/qn3HgZ+rjdN+vkXrh4QDib6YN WEAzvw4j8JFgXWmgLiIBcPBFQLcjBf871Nuq8asIhgp3Dd/P3D7HzfTSonW20X/3 VeNFcJ8b/OBZIQK9SGy8Jsglv+0MiUI+Nvp6wxgtjzPA0or/DOfA9lpmqs2aU/GM d4e3KtZXIA2ImZR6W/ybJWyDu4u69e+MEMLsD7KcSj1MtklXvzODEVaYWhyx3EfY C2ljtpJCJ7+yFGB70V+GJ+eJTCuYyh22zogZ10lEWg6EaFOPlT8nTpR663+GLcbT ijHWHiDc6cV0TI82ZAPc6eAqwleygCQ= -----END CERTIFICATE-----Generated at Wed May 7 01:58:21 2025 by rpki-client