$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa File: 36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa (raw, json) Hash identifier: 7yd2tTCTEmOFVxLCSFhE4/QYUckfxWfjGvl6yKh4i1c= Subject key identifier: 96:68:2D:67:A3:E2:8E:A9:DC:FA:59:F6:10:3C:B7:B5:A4:B2:57:3D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3E6AAC8A2724CF971740 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 76.9.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3e:6a:ac:8a:27:24:cf:97:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=53b16e42-8cad-445f-8b97-46cad3f5377b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1c:57:ce:c3:f1:9a:51:31:8e:68:ce:24:f6: ca:93:a6:d5:e3:93:97:49:b6:d3:1c:29:da:0d:0b: 17:c8:4b:5c:be:11:58:82:ee:8f:d4:e5:90:4a:49: 58:a6:df:7e:6e:76:97:34:18:9d:d4:a0:45:31:7c: 5c:7a:fe:a2:e0:bd:39:9f:97:9e:fb:03:86:2d:64: 51:70:d5:61:7b:c9:f1:72:f2:72:85:e8:14:8c:b8: fc:3e:63:af:1d:7b:96:c4:6a:ae:56:63:e7:3d:c2: 47:f4:b4:13:a2:11:ae:30:9d:cf:51:ba:fe:91:3f: fb:38:a6:f5:c1:85:d6:0c:f6:2b:ff:f5:67:45:24: 14:5d:5b:c6:b8:17:c5:8e:0b:85:3e:aa:73:81:f8: 57:47:23:f5:9b:e6:54:5b:a7:84:99:03:a6:14:c6: c0:3b:3e:f2:cf:a8:c2:a7:49:d8:59:3b:a4:55:fd: 2c:06:74:62:62:1f:e6:63:07:7d:f9:65:70:cc:86: 4b:c5:d9:70:7c:58:5b:5e:d0:34:36:79:4f:97:9d: ff:9a:bc:e9:20:16:02:e0:db:85:55:32:08:ed:cc: ea:cc:2c:25:f0:60:b7:e0:95:01:27:6f:65:1b:57: 2c:22:8a:3c:01:45:81:bb:cc:90:2d:db:2c:79:67: f2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:68:2D:67:A3:E2:8E:A9:DC:FA:59:F6:10:3C:B7:B5:A4:B2:57:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36314bbe-6d97-33c2-bfcf-37f16d3714d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 76.9.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e5:0c:29:41:cb:dc:cb:a5:d3:f1:76:9d:b9:02:73:0a:35: be:fa:15:9d:55:51:28:38:9f:52:6c:37:30:a0:ab:15:df:1e: 7a:3d:66:89:d7:32:2a:7e:e3:6c:57:10:29:84:5d:a1:58:82: d9:ae:aa:39:ad:b8:31:13:8c:b5:df:cc:ed:98:94:f5:d4:ce: 84:01:8b:a9:e4:ce:6d:7a:53:15:31:60:18:53:08:09:e0:38: 62:c1:97:9b:38:83:5c:d9:6f:ff:8b:a5:e5:d8:1f:c5:ad:2f: 6a:21:94:5c:fe:b0:28:81:bd:34:fc:83:0b:a8:28:a7:99:96: 6f:66:d7:f0:39:09:90:c9:32:1d:e7:c8:cb:1b:fe:6a:45:d0: 8d:5d:f9:da:02:5d:bc:6c:fb:2d:d4:fa:24:7f:b6:8c:d5:b8: 7c:1a:f5:62:3d:b8:ca:cf:04:bb:c2:08:a2:7b:e5:ff:ad:87: a5:c2:e6:f6:d3:7c:1a:fe:97:0c:7e:56:2f:a7:90:05:2d:f1: 1c:d3:33:be:55:f2:60:51:3c:55:dc:2c:64:14:e2:ce:31:21: 75:bf:c9:4d:65:08:2f:92:09:85:93:52:01:1d:ee:b6:6d:60: 0a:b6:71:c1:f2:83:64:5c:ef:0c:59:d0:44:8a:14:39:38:ae: 97:d3:d1:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj5qrIonJM+XF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTNiMTZlNDItOGNhZC00NDVmLThiOTctNDZjYWQzZjUzNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixxXzsPxmlExjmjOJPbKk6bV45OXSbbTHCna DQsXyEtcvhFYgu6P1OWQSklYpt9+bnaXNBid1KBFMXxcev6i4L05n5ee+wOGLWRR cNVhe8nxcvJyhegUjLj8PmOvHXuWxGquVmPnPcJH9LQTohGuMJ3PUbr+kT/7OKb1 wYXWDPYr//VnRSQUXVvGuBfFjguFPqpzgfhXRyP1m+ZUW6eEmQOmFMbAOz7yz6jC p0nYWTukVf0sBnRiYh/mYwd9+WVwzIZLxdlwfFhbXtA0NnlPl53/mrzpIBYC4NuF VTII7czqzCwl8GC34JUBJ29lG1csIoo8AUWBu8yQLdsseWfyQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZoLWej4o6p3PpZ9hA8t7Wkslc9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzYzMTRiYmUtNmQ5Ny0z M2MyLWJmY2YtMzdmMTZkMzcxNGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETAlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHlDClBy9zLpdPxdp25AnMKNb76FZ1VUSg4n1JsNzCgqxXfHno9ZonX Mip+42xXECmEXaFYgtmuqjmtuDETjLXfzO2YlPXUzoQBi6nkzm16UxUxYBhTCAng OGLBl5s4g1zZb/+LpeXYH8WtL2ohlFz+sCiBvTT8gwuoKKeZlm9m1/A5CZDJMh3n yMsb/mpF0I1d+doCXbxs+y3U+iR/tozVuHwa9WI9uMrPBLvCCKJ75f+th6XC5vbT fBr+lwx+Vi+nkAUt8RzTM75V8mBRPFXcLGQU4s4xIXW/yU1lCC+SCYWTUgEd7rZt YAq2ccHyg2Rc7wxZ0ESKFDk4rpfT0R4= -----END CERTIFICATE-----Generated at Sat May 10 19:11:39 2025 by rpki-client