$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/978b4077-1a02-3b98-8d18-74a542cacb88.roa File: 978b4077-1a02-3b98-8d18-74a542cacb88.roa (raw, json) Hash identifier: cj93X4wVYp8myROXJGkdf0tRu4BZJFV1ngfy5GddBTA= Subject key identifier: 02:56:69:89:D2:89:1B:FF:FE:4F:91:27:86:45:F7:5F:3D:E7:EE:DD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3D9516B26157864C4CA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/978b4077-1a02-3b98-8d18-74a542cacb88.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 74.223.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:95:16:b2:61:57:86:4c:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=6a0f5c78-da3c-4c50-b752-73438e65b9e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f4:52:ed:a4:7a:d8:ba:25:33:fa:79:c9:68: fd:d6:26:96:99:27:42:ed:fd:ac:11:4d:1c:63:70: 8c:a0:3c:84:c4:af:d5:dc:e1:0a:07:26:ad:88:42: 9b:0a:aa:d4:ef:a6:92:0c:d4:b8:a3:19:c9:d2:46: 50:5b:b9:62:c0:7b:ee:1e:de:60:bc:53:3d:7f:50: 6e:5c:06:77:12:b5:ee:ec:d8:c6:dd:0c:54:fe:cf: 22:06:c8:7e:74:5f:b6:8b:51:57:88:cd:44:32:98: b7:fc:61:8a:9d:3a:ec:bc:41:10:8e:c7:96:8a:4f: 28:20:2f:2c:09:53:7d:e7:be:41:e8:d4:31:7a:08: c3:15:69:c9:56:45:8d:3f:17:41:22:a9:dd:8d:cb: fb:70:09:04:66:3a:a8:04:b6:0c:6e:f1:ec:a3:52: 23:cf:d6:e6:48:85:ad:cb:9a:a8:ed:0d:69:e3:a9: 73:af:b2:5e:d2:30:b1:73:2e:c4:65:36:d2:fe:57: 1e:76:51:19:70:cc:0d:99:5a:f3:39:cb:0b:da:e4: 7f:50:2a:3e:a3:11:ca:94:6b:c0:38:8d:81:56:16: ea:98:89:1e:9a:fc:ea:13:b1:06:8d:cf:58:ab:35: bb:e8:e7:a7:0b:c9:85:1c:a1:4d:fe:8e:65:40:df: ba:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:56:69:89:D2:89:1B:FF:FE:4F:91:27:86:45:F7:5F:3D:E7:EE:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/978b4077-1a02-3b98-8d18-74a542cacb88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.223.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:72:5c:d6:b4:81:2c:0f:65:df:8d:d0:df:f9:fa:08:99:e6: db:d6:79:b9:e5:34:ba:d0:3f:23:e0:cf:66:7c:c1:04:67:43: 75:21:a8:ab:09:22:64:a2:09:ba:1e:99:63:9e:65:e4:d8:f9: 78:97:7d:e7:6b:c2:5d:1c:ed:a8:51:71:3d:d2:d8:45:67:b6: f8:f5:db:84:b8:e6:17:da:95:25:72:48:0b:a3:15:14:00:9d: 5c:5a:cf:c4:5d:23:d0:71:21:70:8f:dd:4d:35:dc:43:49:67: ae:fc:7f:65:f6:a2:ae:72:ce:fc:2b:c5:e8:80:a3:63:b6:68: ee:e4:a1:69:5b:b0:1d:50:1e:f9:a3:c8:e1:0d:6f:c2:75:0f: 6b:66:da:f9:4c:9f:63:c4:29:dc:d0:6f:fa:ea:c5:1d:ad:e1: 46:bf:7f:69:0b:88:bc:30:42:ad:b3:32:5b:21:54:a8:e0:a1: a3:50:b2:d7:72:98:94:1b:7b:b2:9d:c1:80:f5:62:00:f3:40: f2:ba:4b:1b:5f:31:ff:a5:d0:df:2c:b7:db:50:7a:73:88:54: b8:8d:d0:71:bf:0d:39:ee:33:ba:3e:0e:72:24:a7:77:6b:4a: f7:2e:67:ff:52:f8:d5:ef:d6:fd:46:3a:74:2f:a6:35:94:96: 5a:ff:5c:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSj2VFrJhV4ZMTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NmEwZjVjNzgtZGEzYy00YzUwLWI3NTItNzM0MzhlNjViOWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfRS7aR62LolM/p5yWj91iaWmSdC7f2sEU0c Y3CMoDyExK/V3OEKByatiEKbCqrU76aSDNS4oxnJ0kZQW7liwHvuHt5gvFM9f1Bu XAZ3ErXu7NjG3QxU/s8iBsh+dF+2i1FXiM1EMpi3/GGKnTrsvEEQjseWik8oIC8s CVN9575B6NQxegjDFWnJVkWNPxdBIqndjcv7cAkEZjqoBLYMbvHso1Ijz9bmSIWt y5qo7Q1p46lzr7Je0jCxcy7EZTbS/lcedlEZcMwNmVrzOcsL2uR/UCo+oxHKlGvA OI2BVhbqmIkemvzqE7EGjc9YqzW76OenC8mFHKFN/o5lQN+6oQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAJWaYnSiRv//k+RJ4ZF91895+7dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTc4YjQwNzctMWEwMi0z Yjk4LThkMTgtNzRhNTQyY2FjYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASt8wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAPXJc1rSBLA9l343Q3/n6CJnm29Z5ueU0utA/I+DPZnzBBGdDdSGoqwki ZKIJuh6ZY55l5Nj5eJd952vCXRztqFFxPdLYRWe2+PXbhLjmF9qVJXJIC6MVFACd XFrPxF0j0HEhcI/dTTXcQ0lnrvx/ZfairnLO/CvF6ICjY7Zo7uShaVuwHVAe+aPI 4Q1vwnUPa2ba+UyfY8Qp3NBv+urFHa3hRr9/aQuIvDBCrbMyWyFUqOCho1Cy13KY lBt7sp3BgPViAPNA8rpLG18x/6XQ3yy321B6c4hUuI3Qcb8NOe4zuj4OciSnd2tK 9y5n/1L41e/W/UY6dC+mNZSWWv9cdA== -----END CERTIFICATE-----Generated at Sat May 10 18:52:49 2025 by rpki-client