$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa File: 558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa (raw, json) Hash identifier: p6Rt3dOreKmv/vkSSx5e8hmP8BMezePQCe9nQd3EYl4= Subject key identifier: 24:30:78:E3:2C:05:97:B1:08:32:A6:F7:60:23:B8:D0:E5:64:6F:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A189C8C766CF07AEC8480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 208.101.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:18:9c:8c:76:6c:f0:7a:ec:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b1ab7974-4af5-476b-9505-6732b7ffa203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:a3:19:84:df:5d:34:94:f1:d4:71:f2:19: 9a:3e:5b:0c:3e:d6:61:3e:a7:b8:5d:4f:dc:05:e5: 72:13:64:c6:19:c7:5a:a7:0c:08:13:8d:20:29:36: 0c:1b:e7:c9:83:03:f0:bb:63:87:f9:25:b2:4e:f1: 10:4e:d2:96:bf:ba:f2:3e:93:75:a8:bb:6b:32:a1: 36:49:74:15:db:bf:76:ff:2e:34:30:95:8c:b6:5f: 52:0b:3b:93:31:e7:8d:0a:41:d7:1c:58:34:8d:d0: 88:32:4b:64:71:6d:a7:90:39:f5:dd:53:58:01:2d: dd:4f:b9:fa:3a:35:af:37:a8:3d:ad:32:c3:55:7a: 84:24:aa:e0:1f:5a:cb:e0:82:88:93:2b:c7:6f:fd: 2f:77:f1:28:d8:97:57:ed:3a:b4:1c:04:6c:4d:e2: 76:7e:ea:47:f8:36:13:cf:5a:70:76:b9:1c:e6:45: b9:3a:f8:26:6b:56:ff:2c:56:e1:b6:bf:19:00:c8: 0e:76:3c:eb:da:4c:30:b2:ac:b3:4a:fa:62:37:23: 0f:5b:b6:eb:5a:36:fd:26:8f:bf:11:50:62:4e:f7: 53:fa:62:3d:95:5d:06:95:ea:32:b5:5c:ff:7d:2d: 8e:00:de:c6:cb:17:c1:72:d0:60:78:df:b6:fb:99: e6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:30:78:E3:2C:05:97:B1:08:32:A6:F7:60:23:B8:D0:E5:64:6F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/558b4558-fb3f-3b99-80a8-8a383ad6ad69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0b:40:12:5e:51:99:96:ee:3a:d7:f7:99:ef:55:be:b1:e6: 53:27:f1:76:68:3c:2b:f1:01:65:31:15:a6:1d:00:f6:f3:e8: 71:54:47:4e:84:93:37:e5:a2:7a:bc:1e:f3:7c:ab:62:7e:4d: d5:65:a5:de:52:47:ab:ec:3b:7d:e0:fc:4a:ea:99:49:aa:77: 23:48:3a:88:7d:6a:83:38:94:c8:c9:d1:a3:f9:ab:c5:4f:93: a3:73:6a:1c:6b:44:9f:47:34:e6:10:63:3f:0b:f9:d0:88:df: 61:5b:d5:7c:fe:e4:f7:7e:05:41:b2:70:36:eb:a2:47:d4:33: 19:58:af:f5:8a:bd:5a:f4:5d:24:1d:48:6d:56:27:fe:70:10: c5:02:60:c0:7e:2d:9b:29:29:ae:30:ad:bf:b7:ab:e3:d9:f8: 5c:28:95:90:3f:a0:70:b7:7a:97:c2:c6:e3:b6:94:35:36:3f: 6e:07:30:53:ca:f7:84:77:4a:b9:7e:49:aa:37:18:f3:67:cb: 01:fd:c6:1c:4c:3c:98:93:44:e3:f8:38:93:3d:8b:ea:d6:31: 7f:c5:00:56:44:91:73:de:11:9d:9f:3a:18:c8:2b:eb:67:97: a5:8d:d5:0a:af:83:1f:be:01:48:b3:de:5c:2e:90:e0:6e:dd: 27:fb:3b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShicjHZs8HrshIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjFhYjc5NzQtNGFmNS00NzZiLTk1MDUtNjczMmI3ZmZhMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUujGYTfXTSU8dRx8hmaPlsMPtZhPqe4XU/c BeVyE2TGGcdapwwIE40gKTYMG+fJgwPwu2OH+SWyTvEQTtKWv7ryPpN1qLtrMqE2 SXQV2792/y40MJWMtl9SCzuTMeeNCkHXHFg0jdCIMktkcW2nkDn13VNYAS3dT7n6 OjWvN6g9rTLDVXqEJKrgH1rL4IKIkyvHb/0vd/Eo2JdX7Tq0HARsTeJ2fupH+DYT z1pwdrkc5kW5Ovgma1b/LFbhtr8ZAMgOdjzr2kwwsqyzSvpiNyMPW7brWjb9Jo+/ EVBiTvdT+mI9lV0GleoytVz/fS2OAN7GyxfBctBgeN+2+5nm5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQweOMsBZexCDKm92AjuNDlZG9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTU4YjQ1NTgtZmIzZi0z Yjk5LTgwYTgtOGEzODNhZDZhZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYLQBJeUZmW7jrX95nvVb6x5lMn8XZoPCvxAWUxFaYdAPbz6HFUR06E kzflonq8HvN8q2J+TdVlpd5SR6vsO33g/ErqmUmqdyNIOoh9aoM4lMjJ0aP5q8VP k6NzahxrRJ9HNOYQYz8L+dCI32Fb1Xz+5Pd+BUGycDbrokfUMxlYr/WKvVr0XSQd SG1WJ/5wEMUCYMB+LZspKa4wrb+3q+PZ+FwolZA/oHC3epfCxuO2lDU2P24HMFPK 94R3Srl+Sao3GPNnywH9xhxMPJiTROP4OJM9i+rWMX/FAFZEkXPeEZ2fOhjIK+tn l6WN1Qqvgx++AUiz3lwukOBu3Sf7O/M= -----END CERTIFICATE-----Generated at Sun May 11 14:44:09 2025 by rpki-client