$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b84d9e0-5d0b-3874-a301-9733eeb99140.roa File: 7b84d9e0-5d0b-3874-a301-9733eeb99140.roa (raw, json) Hash identifier: gwW/dZ3yGUURj7ny8LQHw0U4Y51uiiZbtVJZtKZdEAc= Subject key identifier: 70:65:04:B7:B7:7F:F4:39:92:3A:59:D8:BE:03:6E:18:7B:56:DC:98 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A15B78702A3FA8BB40F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b84d9e0-5d0b-3874-a301-9733eeb99140.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 146.145.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:15:b7:87:02:a3:fa:8b:b4:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=3ad05e47-3700-4b7f-addd-3a98ccdb2b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:9e:3a:94:81:53:89:3a:eb:39:11:23:a5:92: 10:14:9b:9e:60:91:b0:e0:ac:96:fe:af:1f:b8:87: dd:4d:1d:c3:9d:4f:1e:35:c0:a0:12:3b:ac:1f:50: 67:a9:7a:c2:57:0a:6e:e5:18:67:31:77:61:8c:30: b6:e3:c8:80:fc:c8:69:73:c4:67:f0:0e:30:fe:cf: 25:fb:4c:4c:d1:9c:83:1e:29:5a:78:0e:e8:d2:b7: 95:d0:37:51:b4:df:ef:5c:3c:e1:ac:5d:f3:f5:30: f4:3e:5b:57:a3:eb:7b:d5:2b:a1:c4:52:ba:3b:53: 39:aa:84:d0:4b:5a:18:bd:e7:d7:93:cb:b5:06:2f: 14:fd:97:52:90:f9:4f:1f:8a:d9:63:4e:95:c6:09: 25:fe:8a:03:4a:40:77:f5:5d:6a:9d:e8:cd:36:81: e6:fc:41:cf:c5:98:04:aa:17:a3:22:af:b7:86:54: 81:dd:f6:85:13:cd:4c:9d:b8:a1:f3:65:2b:97:62: c0:0b:1e:be:19:3a:0e:91:25:d2:b2:82:22:b1:af: 4d:e7:18:6b:8e:42:88:8d:25:1c:c9:bf:f8:5b:e6: 23:16:8a:f9:e4:20:fb:a5:08:76:bf:f6:00:61:bb: 79:26:b8:bf:7b:ac:c6:61:53:3c:4b:f7:82:90:65: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:04:B7:B7:7F:F4:39:92:3A:59:D8:BE:03:6E:18:7B:56:DC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7b84d9e0-5d0b-3874-a301-9733eeb99140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 146.145.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b8:53:02:cc:da:12:97:fc:6d:ef:4e:45:a7:3e:f4:57:8c: b2:8a:2c:10:d4:24:3b:70:fc:0e:cc:60:69:a3:e8:56:3f:0c: c0:fb:a4:ad:41:31:e2:9e:93:ed:f5:6a:ea:98:4c:9d:c9:d0: b8:3b:b6:3c:bd:1b:13:fc:07:80:5c:04:5f:e8:90:42:b4:44: e7:a9:d0:83:30:79:c8:e2:42:98:a8:17:86:af:57:6e:13:4e: f7:9a:97:e6:61:f3:7e:72:61:a1:6e:1f:b3:cc:05:85:9d:c9: 95:76:0d:f2:f0:4d:a0:af:74:97:bd:1e:46:07:44:37:51:98: f1:ee:c7:e3:e1:2c:b8:f5:f1:2b:f7:01:f7:b8:e4:48:b5:5a: 09:c8:60:d7:e5:38:94:f3:37:22:91:42:09:b4:ea:4a:e9:b8: fc:6e:90:a8:38:bb:9a:f6:d3:76:12:54:a1:fc:05:b5:3e:9e: dc:93:63:30:d3:65:87:14:d6:00:ed:58:48:64:0a:92:ce:58: 35:d3:67:74:fe:2e:ba:67:e6:6f:3c:bc:4e:8d:68:05:79:91: 3f:2a:91:d5:95:c9:22:b9:8d:fa:99:40:0b:7a:6b:72:7f:e1: f0:88:7c:4f:35:a6:22:19:51:36:a9:51:88:43:18:ad:81:24: 95:a1:1e:da -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShW3hwKj+ou0DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk M2FkMDVlNDctMzcwMC00YjdmLWFkZGQtM2E5OGNjZGIyYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJ46lIFTiTrrOREjpZIQFJueYJGw4KyW/q8f uIfdTR3DnU8eNcCgEjusH1BnqXrCVwpu5RhnMXdhjDC248iA/Mhpc8Rn8A4w/s8l +0xM0ZyDHilaeA7o0reV0DdRtN/vXDzhrF3z9TD0PltXo+t71SuhxFK6O1M5qoTQ S1oYvefXk8u1Bi8U/ZdSkPlPH4rZY06Vxgkl/ooDSkB39V1qnejNNoHm/EHPxZgE qhejIq+3hlSB3faFE81Mnbih82Url2LACx6+GToOkSXSsoIisa9N5xhrjkKIjSUc yb/4W+YjFor55CD7pQh2v/YAYbt5Jri/e6zGYVM8S/eCkGVTtQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHBlBLe3f/Q5kjpZ2L4Dbhh7VtyYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2I4NGQ5ZTAtNWQwYi0z ODc0LWEzMDEtOTczM2VlYjk5MTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkpEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAkbhTAszaEpf8be9ORac+9FeMsoosENQkO3D8DsxgaaPoVj8MwPukrUEx 4p6T7fVq6phMncnQuDu2PL0bE/wHgFwEX+iQQrRE56nQgzB5yOJCmKgXhq9XbhNO 95qX5mHzfnJhoW4fs8wFhZ3JlXYN8vBNoK90l70eRgdEN1GY8e7H4+EsuPXxK/cB 97jkSLVaCchg1+U4lPM3IpFCCbTqSum4/G6QqDi7mvbTdhJUofwFtT6e3JNjMNNl hxTWAO1YSGQKks5YNdNndP4uumfmbzy8To1oBXmRPyqR1ZXJIrmN+plAC3prcn/h 8Ih8TzWmIhlRNqlRiEMYrYEklaEe2g== -----END CERTIFICATE-----Generated at Sat May 10 10:08:35 2025 by rpki-client