$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4395e21-464a-33ee-8d38-8516ea44d618.roa File: c4395e21-464a-33ee-8d38-8516ea44d618.roa (raw, json) Hash identifier: fF23vhcDUdxDKv8ebVqJhBlnza9+l4ww4qXqR41egXE= Subject key identifier: D1:54:6D:3F:05:14:AE:46:F8:21:94:63:08:87:67:93:4F:89:5F:1E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1287A57F4C5C2553E100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4395e21-464a-33ee-8d38-8516ea44d618.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 67.151.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:12:87:a5:7f:4c:5c:25:53:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=03718156-a224-4747-9291-a0972dd49caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:22:28:62:4c:a2:76:99:f5:4c:f0:0b:27:69: 8d:b7:53:8d:c0:75:c1:52:f8:92:0e:6e:82:ca:22: 54:59:e0:95:3d:99:e7:2b:02:52:e7:a3:25:23:1b: 3b:78:f8:2d:a2:45:3d:b7:4a:5c:d2:a6:b6:c6:ec: f2:f8:51:97:bb:af:a5:0f:b6:7f:dc:52:7d:65:3a: d0:ce:71:1b:40:95:ee:9e:99:ed:52:a0:ed:aa:e4: 94:a1:97:a8:c0:1a:7e:4f:fe:dc:98:d5:11:f8:b5: 1e:8a:ec:4b:41:90:a7:e8:56:7e:89:1a:4e:59:1d: 00:96:2f:e9:7e:46:72:5e:48:24:29:d3:9f:31:65: 95:2d:b9:2c:d0:0e:34:6d:06:fb:e0:ac:64:3a:c6: bb:88:ed:d4:da:9c:a5:bf:71:4b:24:dd:7b:2d:77: e1:c6:26:e4:45:7c:a9:3f:c5:fb:38:66:9f:33:8e: fe:cb:86:bd:fe:a9:30:f9:f3:f7:96:db:34:33:a3: b5:09:65:b9:f8:3c:6c:53:57:98:70:13:40:35:db: 39:68:54:4d:e1:96:23:1d:65:e2:63:e1:f6:ff:c1: d1:62:0e:74:3d:ed:4a:4e:aa:9e:b1:fa:9d:27:fa: 8c:69:f7:1a:af:ba:05:9d:b6:bf:e9:bc:4e:83:ce: fc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:54:6D:3F:05:14:AE:46:F8:21:94:63:08:87:67:93:4F:89:5F:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c4395e21-464a-33ee-8d38-8516ea44d618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:92:52:45:dd:1f:93:47:83:c1:98:32:d6:4a:1c:ad:fd:61: 14:39:4b:37:37:65:5b:6f:27:ea:fc:27:3d:d7:e4:0c:f9:26: ef:14:ea:0b:e9:6f:4f:4a:ab:0c:fa:26:0d:4d:15:81:52:94: b4:2e:11:28:a0:34:ce:ef:dc:02:fb:6e:03:42:d9:ea:06:ca: eb:89:d9:ea:64:91:99:91:84:3c:a2:58:03:fc:28:03:f0:ea: 4f:b8:c4:57:4f:75:4a:84:71:2a:b4:3f:42:09:30:44:c0:c9: e5:85:77:05:0c:8f:22:62:25:ad:83:1d:bc:59:ef:39:18:9c: a0:fc:02:e8:d2:13:ed:8e:4d:42:68:52:b1:f7:c4:e3:e8:58: f4:f6:4b:85:89:fe:bc:d3:0d:ca:5c:40:c4:82:c5:20:56:44: df:3e:b2:6f:5f:e4:25:3a:65:d1:1f:23:36:f6:06:d5:f5:4c: 5f:dd:9c:b0:6c:39:24:c1:9e:8b:04:e4:b7:be:9b:ec:7c:46: dd:3f:86:9f:89:bd:e6:e1:11:c1:7c:12:1c:aa:60:dd:f7:db: 71:57:b4:aa:8c:be:be:59:27:3d:66:e1:61:44:fa:d9:b9:33: 1a:c7:16:e5:9e:07:37:2e:59:1b:8d:04:64:b9:28:90:7e:71: c1:5a:ed:74 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShKHpX9MXCVT4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDM3MTgxNTYtYTIyNC00NzQ3LTkyOTEtYTA5NzJkZDQ5Y2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SIoYkyidpn1TPALJ2mNt1ONwHXBUviSDm6C yiJUWeCVPZnnKwJS56MlIxs7ePgtokU9t0pc0qa2xuzy+FGXu6+lD7Z/3FJ9ZTrQ znEbQJXunpntUqDtquSUoZeowBp+T/7cmNUR+LUeiuxLQZCn6FZ+iRpOWR0Ali/p fkZyXkgkKdOfMWWVLbks0A40bQb74KxkOsa7iO3U2pylv3FLJN17LXfhxibkRXyp P8X7OGafM47+y4a9/qkw+fP3lts0M6O1CWW5+DxsU1eYcBNANds5aFRN4ZYjHWXi Y+H2/8HRYg50Pe1KTqqesfqdJ/qMafcar7oFnba/6bxOg878bQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNFUbT8FFK5G+CGUYwiHZ5NPiV8eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzQzOTVlMjEtNDY0YS0z M2VlLThkMzgtODUxNmVhNDRkNjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAQ5cwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAcJJSRd0fk0eDwZgy1kocrf1hFDlLNzdlW28n6vwnPdfkDPkm7xTqC+lv T0qrDPomDU0VgVKUtC4RKKA0zu/cAvtuA0LZ6gbK64nZ6mSRmZGEPKJYA/woA/Dq T7jEV091SoRxKrQ/QgkwRMDJ5YV3BQyPImIlrYMdvFnvORicoPwC6NIT7Y5NQmhS sffE4+hY9PZLhYn+vNMNylxAxILFIFZE3z6yb1/kJTpl0R8jNvYG1fVMX92csGw5 JMGeiwTkt76b7HxG3T+Gn4m95uERwXwSHKpg3ffbcVe0qoy+vlknPWbhYUT62bkz GscW5Z4HNy5ZG40EZLkokH5xwVrtdA== -----END CERTIFICATE-----Generated at Sat May 10 10:38:26 2025 by rpki-client