$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94295925-4b63-31fe-9f02-827bd779d638.roa File: 94295925-4b63-31fe-9f02-827bd779d638.roa (raw, json) Hash identifier: jmAIycRC71RpnPfLxtMnAS/AiNRKoXDY8xn/5iCxuCE= Subject key identifier: F0:B9:18:B8:3A:8E:57:D5:2C:AC:CE:A3:D0:33:88:D5:F2:BD:42:10 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A44EB748472AC8C7505C8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94295925-4b63-31fe-9f02-827bd779d638.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.214.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:44:eb:74:84:72:ac:8c:75:05:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=43f29ebe-0251-42d6-81b8-f7f1bb8e869a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:dc:99:1e:5d:1c:d6:2b:ed:e5:50:fd:86:9b: 67:af:67:03:5c:8f:4a:2e:69:85:d4:ca:85:0d:76: 8d:29:3a:4b:57:cd:04:ab:aa:af:b3:1b:ce:35:fb: 0e:76:00:6b:bf:a2:69:55:ff:95:9d:ff:7d:46:1a: 7b:9e:c5:aa:82:4e:30:f6:93:06:18:d2:13:e0:7c: e9:d7:c1:3f:bb:af:31:d7:18:3e:82:70:b0:d9:be: 30:9f:a5:50:cb:a1:9c:73:00:28:88:fe:c5:b9:fa: 72:00:6d:e9:36:d2:a9:e5:d3:76:57:bf:97:8f:6a: 1b:45:45:d4:26:94:d8:f7:28:67:2b:93:6c:f3:d5: fb:2b:42:4a:97:4f:4c:44:22:dd:44:ed:66:48:2b: af:10:de:db:0c:90:85:76:47:09:7d:fb:be:54:7d: 0f:00:7e:0d:6e:0e:52:40:f3:54:58:e6:84:9d:a7: 9a:a3:88:ce:e2:fb:b8:0d:91:14:8e:b8:49:cb:43: 63:04:c4:3e:61:cd:d4:c9:ea:59:85:4f:56:19:2f: 38:e6:fb:b1:df:93:ca:72:b4:08:9c:f5:74:01:b8: 1a:c5:72:30:31:a6:38:d8:14:6b:1a:11:10:81:d8: 81:2e:14:e8:24:f3:fb:52:08:37:b5:97:d4:a5:8d: fe:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:B9:18:B8:3A:8E:57:D5:2C:AC:CE:A3:D0:33:88:D5:F2:BD:42:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/94295925-4b63-31fe-9f02-827bd779d638.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.214.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:d4:e5:0e:cf:79:32:90:b6:3c:c2:44:a8:69:f0:79:dc:0b: 31:42:fd:dd:e4:56:d6:0e:31:59:83:3b:9e:f8:bb:13:6b:a0: ef:79:bf:a3:b8:b5:47:e7:c5:fe:ad:37:0b:90:a7:07:7b:86: 60:02:fd:e9:77:ab:5e:2a:7d:b9:05:03:97:3f:84:00:c4:b8: 57:d6:5c:47:9c:41:b6:a2:85:1d:68:36:0b:1c:21:20:1c:d9: 61:89:a6:07:93:6f:54:7f:fe:a7:b7:d4:75:cd:9e:56:ff:df: 3b:54:a4:46:47:d0:80:01:88:0f:a7:7e:ad:35:20:c0:35:ad: 02:1f:79:00:1f:cc:85:14:b4:a6:77:d0:fb:33:3b:28:e0:6e: 70:9f:52:c4:fd:09:df:c3:1f:78:29:79:80:19:df:66:77:7f: b0:43:49:1e:57:46:23:d2:a2:e9:07:64:02:0c:0e:8b:2a:4b: ca:b5:4e:11:7e:94:ac:af:e8:c3:79:c5:5b:c5:72:d2:5b:11: e9:91:91:a3:8e:4b:bc:f7:c4:8c:fe:3b:d6:e2:0b:25:03:76: 3a:00:95:0a:0b:73:01:9b:24:c7:41:cf:0a:47:40:7b:4e:31: b6:a4:57:6f:51:fa:eb:18:ec:e7:96:3a:ee:27:2a:22:fa:66: 6d:f2:6c:17 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSkTrdIRyrIx1BcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDNmMjllYmUtMDI1MS00MmQ2LTgxYjgtZjdmMWJiOGU4NjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldyZHl0c1ivt5VD9hptnr2cDXI9KLmmF1MqF DXaNKTpLV80Eq6qvsxvONfsOdgBrv6JpVf+Vnf99Rhp7nsWqgk4w9pMGGNIT4Hzp 18E/u68x1xg+gnCw2b4wn6VQy6GccwAoiP7FufpyAG3pNtKp5dN2V7+Xj2obRUXU JpTY9yhnK5Ns89X7K0JKl09MRCLdRO1mSCuvEN7bDJCFdkcJffu+VH0PAH4Nbg5S QPNUWOaEnaeao4jO4vu4DZEUjrhJy0NjBMQ+Yc3UyepZhU9WGS845vux35PKcrQI nPV0AbgaxXIwMaY42BRrGhEQgdiBLhToJPP7Ugg3tZfUpY3+rQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPC5GLg6jlfVLKzOo9AziNXyvUIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTQyOTU5MjUtNGI2My0z MWZlLTlmMDItODI3YmQ3NzlkNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2NYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAatTlDs95MpC2PMJEqGnwedwLMUL93eRW1g4xWYM7nvi7E2ug73m/o7i1 R+fF/q03C5CnB3uGYAL96XerXip9uQUDlz+EAMS4V9ZcR5xBtqKFHWg2CxwhIBzZ YYmmB5NvVH/+p7fUdc2eVv/fO1SkRkfQgAGID6d+rTUgwDWtAh95AB/MhRS0pnfQ +zM7KOBucJ9SxP0J38MfeCl5gBnfZnd/sENJHldGI9Ki6QdkAgwOiypLyrVOEX6U rK/ow3nFW8Vy0lsR6ZGRo45LvPfEjP471uILJQN2OgCVCgtzAZskx0HPCkdAe04x tqRXb1H66xjs55Y67icqIvpmbfJsFw== -----END CERTIFICATE-----Generated at Sun May 11 13:29:05 2025 by rpki-client