$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa File: c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa (raw, json) Hash identifier: nK9jsbeRIKduBhJ7+UEf31vtJ8THnanKJn0i+xLqv2M= Subject key identifier: 61:33:99:25:EC:C8:EA:5F:ED:CB:38:2C:F1:B0:27:32:B4:A0:D3:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA0BB3832113CC7132E780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 67.140.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:0b:b3:83:21:13:cc:71:32:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=1a218cb9-28c0-4dca-8ea0-8cf8d0596568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c6:05:74:40:cd:f0:07:b7:fa:86:f5:8c:5a: 6e:ae:0b:c8:72:53:09:87:99:06:65:8e:6a:b4:66: 7c:0d:f4:5f:fa:2a:a0:f3:ae:3e:a3:78:dc:43:53: fe:2a:ff:09:25:dd:ff:6e:45:15:9d:d9:77:51:6f: c0:6e:53:54:5e:e5:c3:4e:af:2e:8a:31:9c:61:b3: b4:cf:10:56:cb:99:54:da:66:67:45:dc:c6:0d:1f: 41:5e:ed:06:c3:2b:e4:ff:52:5f:06:07:1f:ef:b5: b8:1a:ea:b5:08:ad:22:95:17:b1:4d:c5:88:4a:7d: 70:b7:6d:5d:5f:9a:48:dd:de:cb:e0:9f:2f:64:47: a7:49:02:7a:12:52:4a:cf:b1:bc:f0:71:d4:0e:73: 63:41:99:d6:de:b0:4c:a7:74:31:d6:6b:35:44:81: fa:69:78:27:f2:16:2a:de:4f:bf:1e:11:c1:6a:7a: c5:65:e0:43:1b:86:ec:dd:74:3c:4e:b9:ca:7b:08: 6d:f1:6b:94:05:c0:0d:b9:f9:3e:cd:a8:54:2b:f8: 96:97:3b:bc:bc:7b:d1:77:08:47:9e:52:91:01:64: 01:00:87:c0:99:a1:0e:59:b6:ca:f6:ac:6d:82:67: 3d:72:1e:a7:84:29:0a:b5:26:62:3e:fc:79:18:52: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:33:99:25:EC:C8:EA:5F:ED:CB:38:2C:F1:B0:27:32:B4:A0:D3:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c03a605a-70d9-3c3e-ac83-419a01f07f3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:15:66:47:8f:f4:21:cb:8a:bd:e0:7e:ea:cd:47:4e:24:94: e2:99:d4:cd:09:d8:cf:85:91:77:69:07:6c:d5:27:76:26:e8: 0a:3a:90:06:0e:4b:c6:8c:8a:5c:ea:55:93:02:37:16:48:25: b9:6d:66:c2:02:09:c8:09:23:bd:1c:c4:a5:0e:5f:fe:c2:86: 1f:7b:f4:af:72:e3:88:32:34:e8:2b:8f:1a:26:39:07:ed:2d: 6c:83:06:75:f7:35:af:48:56:e6:5d:85:20:c7:66:88:55:43: 27:33:d2:91:46:4a:05:42:71:ad:e7:8e:57:80:9a:ab:6d:f4: f2:7b:e8:2b:e3:45:e1:0d:d0:a2:fe:fd:e5:e9:b4:1f:f8:89: 63:3f:12:74:85:77:4c:c8:6b:38:b9:db:ec:83:b7:82:6c:01: b3:c7:1a:16:65:88:8f:1a:a7:fc:96:1f:ca:60:6d:b9:cd:06: 65:15:2b:63:85:29:5b:ae:59:95:29:7b:56:32:06:c8:b1:b3: a3:76:11:7c:53:94:67:3c:db:4f:26:71:bc:e8:fe:d9:d0:25: 8f:ee:65:de:12:60:62:a8:e3:91:12:34:80:50:ed:36:9a:df: cd:b8:23:51:1a:6e:9c:b1:f9:85:47:05:f8:2a:6b:c1:6c:ff: 26:08:9f:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qguzgyETzHEy54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk MWEyMThjYjktMjhjMC00ZGNhLThlYTAtOGNmOGQwNTk2NTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksYFdEDN8Ae3+ob1jFpurgvIclMJh5kGZY5q tGZ8DfRf+iqg864+o3jcQ1P+Kv8JJd3/bkUVndl3UW/AblNUXuXDTq8uijGcYbO0 zxBWy5lU2mZnRdzGDR9BXu0Gwyvk/1JfBgcf77W4Guq1CK0ilRexTcWISn1wt21d X5pI3d7L4J8vZEenSQJ6ElJKz7G88HHUDnNjQZnW3rBMp3Qx1ms1RIH6aXgn8hYq 3k+/HhHBanrFZeBDG4bs3XQ8TrnKewht8WuUBcANufk+zahUK/iWlzu8vHvRdwhH nlKRAWQBAIfAmaEOWbbK9qxtgmc9ch6nhCkKtSZiPvx5GFJjnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEzmSXsyOpf7cs4LPGwJzK0oNNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzAzYTYwNWEtNzBkOS0z YzNlLWFjODMtNDE5YTAxZjA3ZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4xQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMVZkeP9CHLir3gfurNR04klOKZ1M0J2M+FkXdpB2zVJ3Ym6Ao6kAYO S8aMilzqVZMCNxZIJbltZsICCcgJI70cxKUOX/7Chh979K9y44gyNOgrjxomOQft LWyDBnX3Na9IVuZdhSDHZohVQycz0pFGSgVCca3njleAmqtt9PJ76CvjReEN0KL+ /eXptB/4iWM/EnSFd0zIazi52+yDt4JsAbPHGhZliI8ap/yWH8pgbbnNBmUVK2OF KVuuWZUpe1YyBsixs6N2EXxTlGc8208mcbzo/tnQJY/uZd4SYGKo45ESNIBQ7Taa 3824I1Eabpyx+YVHBfgqa8Fs/yYInww= -----END CERTIFICATE-----Generated at Wed May 7 19:30:08 2025 by rpki-client