$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa File: 2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa (raw, json) Hash identifier: oKLCWfJyS1wtGEER3rYJRFV7V480asP4TYU1RjwEPjI= Subject key identifier: D8:AC:DB:20:8C:45:D1:44:4B:E1:C2:0D:C7:62:8E:52:27:13:67:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A15EE44DC66FB296F0E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 151.213.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:15:ee:44:dc:66:fb:29:6f:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=34aad105-b465-4dd7-a143-f1203c05c227 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:83:72:5e:5c:b6:f7:7a:09:6f:4a:f3:18:ba: e9:9d:1a:9b:be:d8:3f:50:2e:a5:a4:0a:50:05:57: dc:d1:8e:38:fc:92:07:aa:0b:cb:1c:1b:51:8d:9c: 47:73:e3:68:cc:33:57:75:b6:41:d9:22:0f:f3:d4: 0e:ca:dd:a2:7a:5b:2d:b8:52:f0:71:7a:94:1d:21: 34:11:bb:9d:a0:41:64:86:7c:0f:8b:f4:b4:ee:e8: 7a:f2:95:02:62:58:63:a7:27:0b:3a:d4:39:83:b9: 39:cb:cb:4d:64:11:ba:73:03:2a:d4:32:31:e1:fc: 76:30:c8:d5:dd:53:c8:a7:ed:54:bb:54:42:42:ac: 82:fb:24:97:f8:23:ac:52:55:51:dd:ed:8a:df:00: dd:89:82:9b:5c:54:79:b5:1e:f8:be:bd:f9:88:c2: d2:ba:54:df:8e:a1:95:00:fc:3b:ad:9f:eb:14:86: 66:e7:4a:62:58:21:c2:f2:f2:76:71:d5:24:a9:c4: b7:d5:39:04:ae:f2:49:4e:4c:37:5e:e6:33:b1:62: b6:c4:9b:b3:77:dd:46:67:c6:0a:75:ef:c8:06:6c: 8b:68:1b:de:c1:28:3e:bf:be:7a:00:fa:b4:18:23: 00:b2:84:67:55:7b:65:d8:3e:c9:ce:0b:b7:5f:3b: 72:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AC:DB:20:8C:45:D1:44:4B:E1:C2:0D:C7:62:8E:52:27:13:67:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2d6c0068-0c67-3a4a-b32f-dbebcc237bef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.222.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:1c:fe:9b:82:4a:10:10:2a:2f:46:b8:b0:c3:db:d1:7d:6f: 8d:e9:4f:7e:d9:1c:86:58:72:b8:b8:1d:b8:8e:a5:9d:ec:82: 89:fe:f4:ef:62:5a:9f:cb:1a:da:6e:7c:7e:6d:d9:5c:7d:86: 16:9e:15:02:db:e4:0f:2e:a5:d4:cc:0c:92:75:6e:99:50:39: 95:45:6f:93:42:b3:b8:94:cc:a1:64:1f:2e:3a:c5:87:fa:bb: 3a:c9:5e:d0:86:a6:38:14:2c:46:9e:5e:52:78:c1:ec:58:71: fb:5a:92:ad:f5:85:26:65:6f:44:22:a6:11:ad:b6:17:be:86: 22:3d:ac:42:85:37:88:f3:d6:85:f6:48:41:7d:cb:27:09:7f: f1:48:5e:c7:06:d1:bc:ef:22:11:be:bf:27:81:21:d1:01:c0: 87:30:af:af:ce:19:11:a8:6e:72:ab:51:05:40:00:88:fb:86: 7e:ec:17:47:38:a7:18:5f:9f:1e:56:61:1a:d2:dd:59:d4:6a: c6:05:09:56:c8:e8:86:00:19:44:b3:98:9b:85:00:9a:8f:73: 4e:cf:a6:a1:74:75:78:4c:62:51:a9:98:ea:76:91:12:eb:b6: 61:54:52:7d:3b:53:22:8a:e4:e9:b9:30:3d:a8:3c:fb:35:ac: 58:c2:4d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShXuRNxm+ylvDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzRhYWQxMDUtYjQ2NS00ZGQ3LWExNDMtZjEyMDNjMDVjMjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYNyXly293oJb0rzGLrpnRqbvtg/UC6lpApQ BVfc0Y44/JIHqgvLHBtRjZxHc+NozDNXdbZB2SIP89QOyt2ielstuFLwcXqUHSE0 EbudoEFkhnwPi/S07uh68pUCYlhjpycLOtQ5g7k5y8tNZBG6cwMq1DIx4fx2MMjV 3VPIp+1Uu1RCQqyC+ySX+COsUlVR3e2K3wDdiYKbXFR5tR74vr35iMLSulTfjqGV APw7rZ/rFIZm50piWCHC8vJ2cdUkqcS31TkErvJJTkw3XuYzsWK2xJuzd91GZ8YK de/IBmyLaBvewSg+v756APq0GCMAsoRnVXtl2D7Jzgu3XztyTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNis2yCMRdFES+HCDcdijlInE2c6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmQ2YzAwNjgtMGM2Ny0z YTRhLWIzMmYtZGJlYmNjMjM3YmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl9XeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0c/puCShAQKi9GuLDD29F9b43pT37ZHIZYcri4HbiOpZ3sgon+9O9i Wp/LGtpufH5t2Vx9hhaeFQLb5A8updTMDJJ1bplQOZVFb5NCs7iUzKFkHy46xYf6 uzrJXtCGpjgULEaeXlJ4wexYcftakq31hSZlb0QiphGtthe+hiI9rEKFN4jz1oX2 SEF9yycJf/FIXscG0bzvIhG+vyeBIdEBwIcwr6/OGRGobnKrUQVAAIj7hn7sF0c4 pxhfnx5WYRrS3VnUasYFCVbI6IYAGUSzmJuFAJqPc07PpqF0dXhMYlGpmOp2kRLr tmFUUn07UyKK5Om5MD2oPPs1rFjCTYI= -----END CERTIFICATE-----Generated at Tue May 6 18:49:16 2025 by rpki-client