$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa File: 88348225-4e15-3a0e-bde2-822861e71616.roa (raw, json) Hash identifier: XTEIeM8j7foES5HajNPoMWjPxpyqtP2+GDnrCTBfWL4= Subject key identifier: 14:67:4F:90:DF:64:07:4D:6C:0E:9F:B9:50:51:21:D5:37:EA:51:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A26AD3435DBB0584BC480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 36471 IP address blocks: 209.255.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:26:ad:34:35:db:b0:58:4b:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0652396b-bedb-41fe-b8aa-7a774ab73cbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:cd:49:aa:4e:10:f4:ea:d5:55:88:a1:fa: 38:36:83:f0:72:5e:fe:df:4e:57:3f:21:79:75:a1: d1:11:80:74:05:38:c6:cf:02:86:ac:d9:57:ce:34: a8:ff:0c:b1:f3:12:9d:e6:61:c1:de:b9:0a:94:f7: e4:eb:07:f9:d8:d2:b7:b9:b7:e3:ed:b6:82:65:aa: db:c7:2c:78:3d:cf:73:b7:72:e7:28:c5:eb:b6:ca: 8c:58:63:4f:a9:b1:e9:f0:64:e2:1e:75:96:4e:1f: 85:83:54:a4:a6:18:1b:7a:65:b4:87:74:f2:ad:79: 0e:e4:d4:3c:fc:1d:6a:11:8e:8b:f4:c5:51:4f:2d: 2b:6a:81:1d:9b:7c:17:9c:af:a7:1e:64:8c:35:7c: f6:5e:ff:cf:32:f0:7f:8e:cd:db:de:89:82:4f:d4: 06:0d:e6:b1:1a:58:9b:a4:f3:4e:eb:20:3c:83:66: d1:b0:4d:8b:0a:04:84:cf:cb:22:17:d7:02:06:aa: b4:e0:4d:9d:a6:04:36:80:ad:e1:b7:8d:6c:38:b1: a4:1c:ad:f5:f6:77:eb:3a:7a:c4:b5:51:6f:fc:34: 76:75:7b:0c:4e:a4:72:ae:2a:ce:bf:37:22:05:56: f6:68:3e:27:a5:e8:a8:9e:e4:96:c1:24:c5:59:98: 79:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:67:4F:90:DF:64:07:4D:6C:0E:9F:B9:50:51:21:D5:37:EA:51:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/88348225-4e15-3a0e-bde2-822861e71616.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:20:d8:18:f6:2a:e1:79:f4:b3:19:32:e1:5a:cd:0e:68:8f: 5e:aa:8a:b7:9b:6a:78:6d:fa:c8:78:39:59:f7:f1:bc:b0:0e: fb:98:46:7c:58:a7:89:92:e2:c0:77:56:5c:3d:03:ef:10:57: 4f:fb:68:aa:bc:8a:7e:48:5a:a2:85:a2:05:97:21:50:9f:0f: 6a:9b:4a:54:15:3c:78:a9:d8:d3:51:29:4a:39:33:b1:43:ff: cc:18:a0:3d:53:d5:15:5b:75:d9:58:53:92:be:5a:4b:84:03: bd:49:fe:32:3c:8b:d7:d4:d0:90:d9:b3:12:13:30:bc:d3:65: fb:e4:c2:71:cb:a2:7f:26:3b:8f:41:a4:67:d3:8c:67:1f:1b: de:a3:3f:d6:80:81:a3:fc:a3:5f:1e:40:15:94:ce:1d:c4:7f: fa:b8:d4:69:09:ed:f4:32:58:4e:8f:20:41:60:f3:1d:a6:1e: c9:71:bf:9f:a8:7e:d2:32:e3:cc:60:80:29:ba:8b:56:50:e9: c0:be:93:21:ee:33:e9:6e:3c:c3:cf:c2:33:cc:d8:c0:06:fb: 68:2b:93:bf:23:c1:53:9b:d2:a1:8f:c7:9f:0f:08:37:f1:62: 51:5c:6d:dc:52:8d:f9:00:96:59:8d:70:72:2c:3b:b9:8d:db: df:42:bb:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiatNDXbsFhLxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDY1MjM5NmItYmVkYi00MWZlLWI4YWEtN2E3NzRhYjczY2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKDNSapOEPTq1VWIofo4NoPwcl7+305XPyF5 daHREYB0BTjGzwKGrNlXzjSo/wyx8xKd5mHB3rkKlPfk6wf52NK3ubfj7baCZarb xyx4Pc9zt3LnKMXrtsqMWGNPqbHp8GTiHnWWTh+Fg1SkphgbemW0h3TyrXkO5NQ8 /B1qEY6L9MVRTy0raoEdm3wXnK+nHmSMNXz2Xv/PMvB/js3b3omCT9QGDeaxGlib pPNO6yA8g2bRsE2LCgSEz8siF9cCBqq04E2dpgQ2gK3ht41sOLGkHK319nfrOnrE tVFv/DR2dXsMTqRyrirOvzciBVb2aD4npeionuSWwSTFWZh5owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRnT5DfZAdNbA6fuVBRIdU36lGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODgzNDgyMjUtNGUxNS0z YTBlLWJkZTItODIyODYxZTcxNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUg2Bj2KuF59LMZMuFazQ5oj16qirebanht+sh4OVn38bywDvuYRnxY p4mS4sB3Vlw9A+8QV0/7aKq8in5IWqKFogWXIVCfD2qbSlQVPHip2NNRKUo5M7FD /8wYoD1T1RVbddlYU5K+WkuEA71J/jI8i9fU0JDZsxITMLzTZfvkwnHLon8mO49B pGfTjGcfG96jP9aAgaP8o18eQBWUzh3Ef/q41GkJ7fQyWE6PIEFg8x2mHslxv5+o ftIy48xggCm6i1ZQ6cC+kyHuM+luPMPPwjPM2MAG+2grk78jwVOb0qGPx58PCDfx YlFcbdxSjfkAllmNcHIsO7mN299Cu0c= -----END CERTIFICATE-----Generated at Sun May 11 12:34:22 2025 by rpki-client