$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789d1381-8868-33ae-99e1-73f7c1f74dd0.roa File: 789d1381-8868-33ae-99e1-73f7c1f74dd0.roa (raw, json) Hash identifier: g82C7W85WgGxlKRpLnl/DiTmSe3d5XWf9BqfuukoobE= Subject key identifier: 96:90:87:AC:00:C7:1A:18:79:9B:A8:5F:D2:4C:48:9E:5C:13:2B:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A48BDF86EF3D9FC707E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789d1381-8868-33ae-99e1-73f7c1f74dd0.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 16402 IP address blocks: 63.252.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:bd:f8:6e:f3:d9:fc:70:7e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c1b05519-1c4c-4d7c-9fc0-1df6be0edcaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5e:98:61:8a:b3:34:9c:af:6f:ce:a5:36:8e: a5:8e:db:ca:a0:62:d3:03:2d:c4:20:31:18:ca:9e: aa:02:1e:71:4c:ec:19:fa:ce:be:73:df:26:db:2f: 7a:67:89:30:a8:63:75:b2:07:c5:3b:4e:a0:87:fd: 2f:a2:83:2a:76:08:06:5c:5a:20:e7:d1:b6:35:39: 79:f0:d3:6a:74:c5:b4:0f:2b:81:14:ca:6d:3f:96: 60:87:fc:10:07:ce:b6:0b:4b:ca:cc:8d:11:bd:7d: e1:43:2e:62:4d:91:7f:13:92:15:80:3b:52:3e:d5: 34:26:b0:b8:4a:f7:27:2d:2a:26:28:20:80:54:fc: 30:57:fc:63:2a:cd:94:be:64:cf:bc:d7:c4:32:a3: f1:e2:c3:15:11:02:25:f4:ff:ca:d9:d1:78:26:7b: 4b:61:da:48:10:63:61:52:80:42:d2:1b:60:5c:81: 8e:c1:4f:36:4d:27:33:52:63:6c:2f:91:56:36:48: ea:3a:bf:da:69:f8:d3:31:9a:11:0b:fd:b1:c2:76: 93:26:39:6a:c5:f5:40:47:86:7a:dd:ca:0c:20:64: 94:68:5c:9f:15:cc:86:1b:64:5f:6c:3c:e8:59:39: 42:fd:58:6a:ab:24:4d:08:36:30:9d:89:7e:2b:c6: 76:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:90:87:AC:00:C7:1A:18:79:9B:A8:5F:D2:4C:48:9E:5C:13:2B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/789d1381-8868-33ae-99e1-73f7c1f74dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.252.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:5a:36:ca:77:f7:52:5b:c2:0a:60:e0:2e:97:51:b4:d4:9e: a1:e9:c8:5b:33:5a:65:80:94:af:09:61:f5:15:0e:41:d3:65: ec:85:31:c4:05:ec:1c:20:c9:39:af:b5:94:ef:e5:67:08:b6: c4:b9:48:1c:86:40:15:0f:f1:6e:fc:76:d6:3e:e3:5c:a1:80: 67:2a:6f:37:22:a7:a0:3f:31:47:a8:c2:d8:97:52:94:f6:80: dc:d6:2a:1e:29:38:c1:6d:02:fb:fe:d7:49:1d:3b:98:03:fa: e9:0b:d4:dc:db:c1:73:18:d0:f9:cc:47:cf:d8:fb:6f:5d:80: cd:8b:e7:d1:f1:50:de:aa:6c:c1:04:08:62:64:ed:42:1f:82: 99:e9:fd:20:6f:0b:75:55:b1:03:65:8b:60:24:33:d7:08:14: d0:e5:b9:a1:7f:7c:ed:67:de:bc:ed:1f:56:0d:28:1f:ea:da: f7:f9:79:1d:15:05:81:d6:03:4d:40:d6:21:05:70:b9:39:98: 20:20:57:06:4f:b6:5a:2a:2d:fd:3f:fd:da:11:31:67:65:8f: be:9d:05:74:8d:36:cf:b6:26:fc:ba:9b:70:71:ec:ad:f1:9b: c7:31:8a:fb:36:b3:5c:3e:30:d6:00:cd:2e:01:9e:46:a8:05: e5:05:60:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSki9+G7z2fxwfkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzFiMDU1MTktMWM0Yy00ZDdjLTlmYzAtMWRmNmJlMGVkY2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l6YYYqzNJyvb86lNo6ljtvKoGLTAy3EIDEY yp6qAh5xTOwZ+s6+c98m2y96Z4kwqGN1sgfFO06gh/0vooMqdggGXFog59G2NTl5 8NNqdMW0DyuBFMptP5Zgh/wQB862C0vKzI0RvX3hQy5iTZF/E5IVgDtSPtU0JrC4 SvcnLSomKCCAVPwwV/xjKs2UvmTPvNfEMqPx4sMVEQIl9P/K2dF4JntLYdpIEGNh UoBC0htgXIGOwU82TSczUmNsL5FWNkjqOr/aafjTMZoRC/2xwnaTJjlqxfVAR4Z6 3coMIGSUaFyfFcyGG2RfbDzoWTlC/VhqqyRNCDYwnYl+K8Z2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaQh6wAxxoYeZuoX9JMSJ5cEytmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzg5ZDEzODEtODg2OC0z M2FlLTk5ZTEtNzNmN2MxZjc0ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/xdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9aNsp391Jbwgpg4C6XUbTUnqHpyFszWmWAlK8JYfUVDkHTZeyFMcQF 7BwgyTmvtZTv5WcItsS5SByGQBUP8W78dtY+41yhgGcqbzcip6A/MUeowtiXUpT2 gNzWKh4pOMFtAvv+10kdO5gD+ukL1NzbwXMY0PnMR8/Y+29dgM2L59HxUN6qbMEE CGJk7UIfgpnp/SBvC3VVsQNli2AkM9cIFNDluaF/fO1n3rztH1YNKB/q2vf5eR0V BYHWA01A1iEFcLk5mCAgVwZPtloqLf0//doRMWdlj76dBXSNNs+2Jvy6m3Bx7K3x m8cxivs2s1w+MNYAzS4BnkaoBeUFYD0= -----END CERTIFICATE-----Generated at Sat May 10 13:35:50 2025 by rpki-client