$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa File: 5313c1c7-7762-3008-a43b-d619f2ea123f.roa (raw, json) Hash identifier: TgPMh8J00LZbUCdUR+8mSawB9ICmFO8P2hJ909rXHzc= Subject key identifier: CD:21:CA:AD:9A:33:B4:05:41:8D:C8:16:A3:05:44:CF:9F:DA:A1:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A486FEB4F17E4D7BE7080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 11632 IP address blocks: 216.172.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:6f:eb:4f:17:e4:d7:be:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=de9eede5-a922-4482-9fa6-34ae22a3a0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:c0:35:b9:25:ac:47:5d:49:d9:04:31:9a: 99:3f:49:2c:73:08:d5:d4:d6:98:f4:f9:8d:ea:2e: 17:64:43:d6:25:7b:87:dc:ce:44:ec:ea:22:92:04: 9b:d3:c6:f2:1a:bb:07:f8:d7:28:c8:fb:fc:48:ff: 1d:82:50:b7:cb:8b:2d:62:fb:f0:45:ab:c1:d3:fc: 2a:2f:32:a7:81:fc:db:7c:a7:39:1a:cd:46:0f:ce: 62:da:be:9d:1d:d9:5e:aa:ab:78:02:53:74:52:c8: f8:e5:07:e5:e1:11:c5:c9:c5:a1:a6:c2:4b:eb:1a: dd:60:38:c5:aa:dc:b2:24:fe:9c:d1:f8:65:3e:eb: d1:37:a1:77:80:fd:7e:86:e0:68:85:5d:90:9d:7f: 4b:1c:38:a6:1a:9c:70:73:8b:fd:65:47:f3:20:92: 7a:79:af:86:92:14:64:f8:ce:ce:37:16:7b:41:04: 7b:3e:45:6b:5f:dd:2b:d8:d6:48:bd:7a:fb:fc:35: ec:f2:24:bf:88:ab:17:91:28:d0:e3:25:45:b9:e4: 68:ea:ea:dc:2a:43:bc:5a:91:b7:96:21:1c:db:fe: 9e:67:60:93:d3:98:9b:dc:d9:4e:46:28:5c:79:ff: f6:be:c6:00:33:29:ac:ce:4c:3a:ea:f6:b2:33:1a: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:21:CA:AD:9A:33:B4:05:41:8D:C8:16:A3:05:44:CF:9F:DA:A1:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5313c1c7-7762-3008-a43b-d619f2ea123f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5c:6e:bc:97:40:a7:54:90:cf:fe:bd:f5:92:94:72:90:01: 9e:2a:c4:5b:d5:1c:dc:1d:fc:b6:b0:16:91:59:96:56:66:72: 39:9c:1f:5e:fc:6c:49:7f:41:33:95:08:2c:26:77:af:bd:c4: 90:3a:36:f6:a9:f3:50:07:5b:e7:7f:8a:35:bd:fa:c6:8f:c9: 2c:28:74:31:9d:7e:be:e5:0f:42:23:df:a9:ca:d8:3b:28:0b: ee:98:94:8a:d6:66:a9:ce:99:13:05:d1:89:14:80:f8:90:70: 5f:f4:96:10:4d:25:e8:f6:47:b6:ae:c6:89:c9:ba:78:2f:65: c0:c9:50:3c:63:3e:59:ea:cc:fc:d9:76:cd:81:f7:7f:6d:93: 43:98:6e:a5:36:a2:aa:32:1a:d0:3e:ff:bd:7c:f5:5e:42:3b: 5e:16:d9:41:e0:63:34:d4:6f:d1:90:57:b7:ee:11:bd:e3:28: 39:b2:8d:be:9c:c4:56:75:bd:2f:64:33:3a:df:b7:9f:36:e1: 75:e6:fe:eb:fb:ac:0c:ae:13:07:2a:2b:f6:72:d5:42:be:3b: ff:2c:90:fd:5d:65:bb:82:5c:ed:6d:a5:e4:ff:01:2b:f3:d6: 1d:2b:7a:39:3e:6f:ef:0f:a2:ca:14:e5:fe:42:a5:31:ce:00: 8e:25:1e:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkhv608X5Ne+cIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGU5ZWVkZTUtYTkyMi00NDgyLTlmYTYtMzRhZTIyYTNhMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubPANbklrEddSdkEMZqZP0kscwjV1NaY9PmN 6i4XZEPWJXuH3M5E7OoikgSb08byGrsH+NcoyPv8SP8dglC3y4stYvvwRavB0/wq LzKngfzbfKc5Gs1GD85i2r6dHdleqqt4AlN0Usj45Qfl4RHFycWhpsJL6xrdYDjF qtyyJP6c0fhlPuvRN6F3gP1+huBohV2QnX9LHDimGpxwc4v9ZUfzIJJ6ea+GkhRk +M7ONxZ7QQR7PkVrX90r2NZIvXr7/DXs8iS/iKsXkSjQ4yVFueRo6urcKkO8WpG3 liEc2/6eZ2CT05ib3NlORihcef/2vsYAMymszkw66vayMxq98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0hyq2aM7QFQY3IFqMFRM+f2qFeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTMxM2MxYzctNzc2Mi0z MDA4LWE0M2ItZDYxOWYyZWExMjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENcbryXQKdUkM/+vfWSlHKQAZ4qxFvVHNwd/LawFpFZllZmcjmcH178 bEl/QTOVCCwmd6+9xJA6Nvap81AHW+d/ijW9+saPySwodDGdfr7lD0Ij36nK2Dso C+6YlIrWZqnOmRMF0YkUgPiQcF/0lhBNJej2R7auxonJungvZcDJUDxjPlnqzPzZ ds2B939tk0OYbqU2oqoyGtA+/7189V5CO14W2UHgYzTUb9GQV7fuEb3jKDmyjb6c xFZ1vS9kMzrft5824XXm/uv7rAyuEwcqK/Zy1UK+O/8skP1dZbuCXO1tpeT/ASvz 1h0rejk+b+8PosoU5f5CpTHOAI4lHnk= -----END CERTIFICATE-----Generated at Sun May 11 04:02:35 2025 by rpki-client