$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493a16ab-9932-37f3-8628-c9ae1384c112.roa File: 493a16ab-9932-37f3-8628-c9ae1384c112.roa (raw, json) Hash identifier: wMU/iOlg0eXf0lR7eN3+nn1yJXY74iZVlISs4Kc89z8= Subject key identifier: 99:DB:83:98:31:4C:A2:23:97:C5:31:C5:0C:FD:9C:7D:0A:E7:BA:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3BFF15C72F9C739E3400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493a16ab-9932-37f3-8628-c9ae1384c112.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 67.140.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3b:ff:15:c7:2f:9c:73:9e:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=60fdf365-5782-42af-856c-7f64bd85242f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:30:8d:3e:c1:bd:b3:a8:87:43:f7:dc:3b: 39:3b:8b:7e:9d:68:7a:51:3a:3f:21:81:f6:7c:84: 28:8f:a8:d2:44:b2:9a:45:b7:54:97:39:5b:50:9c: 50:89:7c:76:e1:a4:f3:1e:56:4f:75:ad:78:b7:8e: 40:9b:dc:cc:8f:07:7e:4b:00:d0:35:18:58:d0:e4: 05:c6:0c:99:95:b1:e2:64:74:3f:2c:66:e7:bd:9c: 49:12:43:02:14:5d:84:51:bd:f6:1b:64:83:d5:53: d6:cb:65:db:fe:cf:df:da:d5:07:36:b3:ba:1a:5d: f4:6f:0d:08:7b:42:4f:75:9a:b9:ce:ec:ce:8f:3e: 1d:2d:7a:55:0f:fe:65:ac:fd:c8:62:04:7c:c8:5b: 44:64:cc:3a:30:52:37:48:1e:02:9d:b5:1d:1a:8c: 7f:86:50:ab:b9:43:04:82:d3:7f:8d:c5:ad:f9:f1: 3f:e6:ae:c2:a8:4e:a2:3f:5d:b2:ff:21:5c:7e:25: 10:78:5f:c2:e6:0d:4e:89:ad:73:8a:f5:f1:65:18: 0c:53:19:9e:1d:8b:bd:d1:41:be:e4:bd:8c:db:0e: 93:e0:7e:c6:cd:ff:ad:d9:00:35:ef:cf:bf:90:9d: d0:d0:59:5d:00:d6:48:22:cc:08:bb:41:a4:aa:42: 8a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:DB:83:98:31:4C:A2:23:97:C5:31:C5:0C:FD:9C:7D:0A:E7:BA:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493a16ab-9932-37f3-8628-c9ae1384c112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.0.0/15 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:58:72:cc:ef:f0:a4:68:e2:a2:a9:e3:aa:4e:d3:9b:6b:14: 34:9a:c2:6a:b0:9c:5d:44:d7:fd:1d:8b:93:c2:f7:37:5f:74: 20:27:3d:b5:0e:41:7d:64:c0:28:56:3a:56:d1:57:11:02:5a: 72:19:ea:46:a0:45:a8:14:69:9e:7d:e5:ca:43:78:4f:38:02: 15:c0:e4:2d:4a:7a:5e:7d:84:e0:fa:37:96:53:9d:9e:82:19: 51:f3:1f:85:17:4c:5f:43:08:43:24:68:00:30:6b:32:bd:d7: 62:e4:c5:cb:07:0f:b3:7c:d9:07:71:a0:d8:ff:5e:a1:87:c9: e3:26:a3:d8:a0:8d:f2:ec:54:8c:36:d6:96:44:59:37:bb:28: 8c:b7:25:cc:68:c9:a6:cd:e1:4a:2c:1e:95:46:f2:24:fb:21: 4a:e6:df:44:5e:65:0d:1f:41:6d:74:f4:f9:59:34:c9:de:c8: 32:f0:c2:1b:97:e0:16:37:db:3f:b0:66:9c:5e:22:46:64:1e: 4f:94:aa:eb:82:55:8a:18:37:29:e6:6f:e8:51:0f:68:2f:71: b1:e5:3f:eb:bb:66:99:26:2f:7c:95:8a:c9:3c:2d:5c:91:dd: ba:c9:e7:44:13:08:9a:35:a3:c4:d6:a9:8c:3a:f5:f1:3a:10: d9:2d:8a:b1 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSjv/FccvnHOeNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjBmZGYzNjUtNTc4Mi00MmFmLTg1NmMtN2Y2NGJkODUyNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVYwjT7BvbOoh0P33Ds5O4t+nWh6UTo/IYH2 fIQoj6jSRLKaRbdUlzlbUJxQiXx24aTzHlZPda14t45Am9zMjwd+SwDQNRhY0OQF xgyZlbHiZHQ/LGbnvZxJEkMCFF2EUb32G2SD1VPWy2Xb/s/f2tUHNrO6Gl30bw0I e0JPdZq5zuzOjz4dLXpVD/5lrP3IYgR8yFtEZMw6MFI3SB4CnbUdGox/hlCruUME gtN/jcWt+fE/5q7CqE6iP12y/yFcfiUQeF/C5g1Oia1zivXxZRgMUxmeHYu90UG+ 5L2M2w6T4H7Gzf+t2QA178+/kJ3Q0FldANZIIswIu0GkqkKK5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJnbg5gxTKIjl8UxxQz9nH0K57pRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkzYTE2YWItOTkzMi0z N2YzLTg2MjgtYzlhZTEzODRjMTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBQ4wwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZlhyzO/wpGjioqnjqk7Tm2sUNJrCarCcXUTX/R2Lk8L3N190ICc9tQ5B fWTAKFY6VtFXEQJachnqRqBFqBRpnn3lykN4TzgCFcDkLUp6Xn2E4Po3llOdnoIZ UfMfhRdMX0MIQyRoADBrMr3XYuTFywcPs3zZB3Gg2P9eoYfJ4yaj2KCN8uxUjDbW lkRZN7sojLclzGjJps3hSiwelUbyJPshSubfRF5lDR9BbXT0+Vk0yd7IMvDCG5fg FjfbP7BmnF4iRmQeT5Sq64JVihg3KeZv6FEPaC9xseU/67tmmSYvfJWKyTwtXJHd usnnRBMImjWjxNapjDr18ToQ2S2KsQ== -----END CERTIFICATE-----Generated at Sun May 11 02:06:49 2025 by rpki-client