$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa File: 631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa (raw, json) Hash identifier: rTCZdKRj2Oty4IzKpmBNDdPDSKwSXfMYEkpPpRtaEKo= Subject key identifier: 26:46:5D:F7:39:BC:30:08:58:5D:CB:1D:F6:8A:63:35:0B:1A:32:77 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A43A525960C2CD86ADA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.60.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:43:a5:25:96:0c:2c:d8:6a:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=90b5b11f-da1a-4503-8c64-38e05a9db249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:67:4a:80:6d:aa:a1:93:2c:84:1e:a1:fe:ec: 43:06:a5:0f:47:a8:e8:f0:2e:3f:6c:de:d8:74:2d: f2:52:cd:ee:f6:07:60:dc:93:8e:a6:cc:15:88:bd: 27:0c:cf:aa:55:9c:b5:0a:b8:df:cf:49:43:a2:b5: 35:07:a2:c4:f8:51:9c:f6:71:d5:cb:24:fd:d0:dd: 48:14:98:06:cb:b3:ba:4c:07:ca:ff:1b:1c:48:3e: 6f:26:3f:a7:ed:51:8c:86:4c:47:59:11:96:9b:ce: 83:1a:be:74:3b:96:e0:20:d1:f8:86:44:d6:f3:5d: cf:8b:1f:37:e0:d7:09:49:76:45:06:2b:47:49:0e: 5b:78:30:ab:62:b8:15:50:b1:14:bd:08:02:d2:8b: e1:05:3d:ff:c8:ab:a8:4b:35:16:07:70:da:f1:85: 9d:ad:8c:dd:8a:91:06:8e:de:31:eb:d0:7e:f0:11: 57:22:7d:4f:79:32:c3:10:93:cc:a0:67:8c:de:97: d9:e7:58:0c:e7:33:f8:ef:34:70:5d:d7:b2:7e:52: fa:a2:a1:bc:77:de:5b:07:ce:6f:88:55:da:f2:28: 49:0c:dc:a7:26:70:9a:67:c1:de:d1:39:42:bf:e1: 0e:cf:a8:d9:6f:6b:56:56:ed:4d:8f:fd:bc:32:84: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:5D:F7:39:BC:30:08:58:5D:CB:1D:F6:8A:63:35:0B:1A:32:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/631944b1-0ce7-35bb-88b7-7dbbbf77fab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.60.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:79:f3:dd:41:88:3f:33:72:f0:72:79:e9:bb:75:76:2d:83: 35:16:ee:6b:16:dc:67:44:cb:4b:c6:fc:dd:dc:20:36:49:77: af:0d:12:db:db:64:64:ea:60:32:7d:28:97:24:78:ab:85:c8: 7f:ae:27:46:61:32:38:c2:f4:d2:60:d1:40:4d:63:92:3b:03: 9c:20:81:65:fc:0d:d6:49:2e:16:44:63:68:30:3a:c5:d0:28: 5e:9c:70:7a:72:c2:3d:35:94:66:5e:b5:ee:14:22:c6:32:b3: 9a:2c:c0:b2:47:b8:23:f5:a4:ac:19:b6:5e:17:9f:c2:e8:df: d2:b3:19:8c:7f:24:8e:70:66:55:fe:a1:12:05:31:4e:b2:cf: 5e:e8:cc:83:82:a1:0d:05:f2:4f:dd:d8:61:7f:1c:c2:e1:15: ff:0b:76:9f:70:c1:30:4e:b2:54:61:d2:14:90:59:2c:a1:e3: c8:dc:d3:93:72:9e:55:61:0e:63:f5:4e:51:a9:c6:c2:07:f1: 62:29:dd:b9:f1:86:57:a9:95:40:c0:fa:1d:bd:f4:0d:3c:1e: 58:ee:1c:c1:93:f1:56:59:a5:dd:42:b5:00:21:bb:4f:35:06: b9:74:ca:52:02:a9:86:b7:03:0d:5a:8f:f1:70:76:d0:0c:a3: 75:58:00:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkOlJZYMLNhq2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTBiNWIxMWYtZGExYS00NTAzLThjNjQtMzhlMDVhOWRiMjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmdKgG2qoZMshB6h/uxDBqUPR6jo8C4/bN7Y dC3yUs3u9gdg3JOOpswViL0nDM+qVZy1Crjfz0lDorU1B6LE+FGc9nHVyyT90N1I FJgGy7O6TAfK/xscSD5vJj+n7VGMhkxHWRGWm86DGr50O5bgINH4hkTW813Pix83 4NcJSXZFBitHSQ5beDCrYrgVULEUvQgC0ovhBT3/yKuoSzUWB3Da8YWdrYzdipEG jt4x69B+8BFXIn1PeTLDEJPMoGeM3pfZ51gM5zP47zRwXdeyflL6oqG8d95bB85v iFXa8ihJDNynJnCaZ8He0TlCv+EOz6jZb2tWVu1Nj/28MoTXLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZGXfc5vDAIWF3LHfaKYzULGjJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjMxOTQ0YjEtMGNlNy0z NWJiLTg4YjctN2RiYmJmNzdmYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0TxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC55891BiD8zcvByeem7dXYtgzUW7msW3GdEy0vG/N3cIDZJd68NEtvb ZGTqYDJ9KJckeKuFyH+uJ0ZhMjjC9NJg0UBNY5I7A5wggWX8DdZJLhZEY2gwOsXQ KF6ccHpywj01lGZete4UIsYys5oswLJHuCP1pKwZtl4Xn8Lo39KzGYx/JI5wZlX+ oRIFMU6yz17ozIOCoQ0F8k/d2GF/HMLhFf8Ldp9wwTBOslRh0hSQWSyh48jc05Ny nlVhDmP1TlGpxsIH8WIp3bnxhleplUDA+h299A08HljuHMGT8VZZpd1CtQAhu081 Brl0ylICqYa3Aw1aj/FwdtAMo3VYALs= -----END CERTIFICATE-----Generated at Sat May 10 22:05:04 2025 by rpki-client