$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa File: d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa (raw, json) Hash identifier: y3zTMURxXaQBFaSsmy/R0FOhHbqcxBZ1GlY4d4ESIuA= Subject key identifier: B2:D5:59:23:E6:FC:20:E8:D9:E3:45:94:40:60:96:20:F6:DB:BC:83 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A49FD4A203D035998B200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27172 IP address blocks: 67.217.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:49:fd:4a:20:3d:03:59:98:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a68a8535-6f54-4c7e-840c-e30d28c5944f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b9:0a:6f:f0:2a:60:67:d7:44:d3:1a:21:78: ed:e1:52:c8:2c:5f:f6:8b:29:96:1c:3e:66:c9:19: 11:28:6e:8a:b3:62:40:9c:f7:2a:21:a8:5d:8e:e0: ce:c4:ca:5a:23:84:5f:c9:d7:2d:6e:10:33:0e:82: dd:f2:0d:e1:ea:2b:1a:b6:28:ad:06:82:47:5a:ed: fb:e1:11:a2:67:7a:11:ad:92:0d:31:25:1f:9e:ae: 5b:20:3c:a8:30:23:9f:94:42:20:fb:07:63:0a:f9: a6:ca:8c:ba:9b:81:53:ec:49:76:ea:37:fe:c8:1c: 70:fb:40:69:22:1e:fc:d0:05:7b:11:4e:8e:8d:ff: 88:b2:2a:a2:90:bc:54:e9:07:42:92:2a:25:bb:8b: b1:4c:92:57:14:9e:6e:fa:20:f6:c9:71:b0:e0:ed: 40:e7:c3:76:18:fa:3a:7e:00:e5:e0:4a:24:39:00: 70:45:e7:76:8d:d9:15:f3:ad:10:73:77:10:30:c0: 58:9c:31:7e:81:a8:04:86:d5:50:83:c6:95:29:8c: 86:8c:29:06:1a:7b:83:15:32:31:16:23:e8:4d:54: 9d:fb:36:30:df:6d:75:f7:60:19:0f:d4:b9:e3:25: 70:2f:96:13:23:11:ea:6e:6d:bf:71:67:21:d6:76: ca:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:59:23:E6:FC:20:E8:D9:E3:45:94:40:60:96:20:F6:DB:BC:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:c5:6e:a6:c9:82:3a:57:20:6d:ac:3d:dd:e4:0c:c9:54:2d: 73:46:1a:ab:3c:e2:ae:27:6c:9f:f8:bd:47:72:14:ab:ec:f8: 89:e8:33:e7:ab:c6:2b:7d:c5:13:d7:8a:ac:a8:74:a9:85:96: 29:e4:d9:44:a5:98:5b:5c:10:67:5d:da:1a:76:18:1a:04:25: 89:c4:a5:9d:ca:5b:9a:2c:17:56:af:54:e8:5f:bb:96:6b:5a: 99:12:f1:70:c1:04:9e:3b:11:7d:3c:fc:1b:25:5c:ee:00:d5: 33:32:33:46:8a:57:35:d7:6f:b1:fd:19:f4:23:33:c0:16:fa: 4a:ca:d0:21:ed:61:16:21:f8:32:fa:ce:15:3e:47:1f:63:1d: fd:c2:00:1b:9f:83:d5:30:76:cc:3e:4a:0b:9c:aa:5a:81:55: e7:f4:9e:8a:fd:48:45:9c:98:98:28:4c:8f:65:5f:94:f2:1a: 23:9e:ac:38:5d:f0:c3:8b:80:7a:93:59:a7:2c:fe:b8:02:02: b6:f2:53:98:a5:9d:07:c1:e4:6b:ad:d2:3e:7e:c5:1a:12:83: 7e:d8:85:98:e5:ea:57:62:42:db:f2:6d:c3:a6:90:22:29:9d: 0d:d8:01:7f:cd:36:18:dc:20:51:46:01:c4:86:5e:8e:1e:25: 69:3b:ee:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkn9SiA9A1mYsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTY4YTg1MzUtNmY1NC00YzdlLTg0MGMtZTMwZDI4YzU5NDRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrkKb/AqYGfXRNMaIXjt4VLILF/2iymWHD5m yRkRKG6Ks2JAnPcqIahdjuDOxMpaI4RfydctbhAzDoLd8g3h6isatiitBoJHWu37 4RGiZ3oRrZINMSUfnq5bIDyoMCOflEIg+wdjCvmmyoy6m4FT7El26jf+yBxw+0Bp Ih780AV7EU6Ojf+IsiqikLxU6QdCkiolu4uxTJJXFJ5u+iD2yXGw4O1A58N2GPo6 fgDl4EokOQBwRed2jdkV860Qc3cQMMBYnDF+gagEhtVQg8aVKYyGjCkGGnuDFTIx FiPoTVSd+zYw321192AZD9S54yVwL5YTIxHqbm2/cWch1nbKjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLVWSPm/CDo2eNFlEBgliD227yDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDU3YWRiMWUtN2IxZC0z Yzg3LTgxZWUtODMzYWMzMDM5ZGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTFbqbJgjpXIG2sPd3kDMlULXNGGqs84q4nbJ/4vUdyFKvs+InoM+er xit9xRPXiqyodKmFlink2USlmFtcEGdd2hp2GBoEJYnEpZ3KW5osF1avVOhfu5Zr WpkS8XDBBJ47EX08/BslXO4A1TMyM0aKVzXXb7H9GfQjM8AW+krK0CHtYRYh+DL6 zhU+Rx9jHf3CABufg9Uwdsw+SgucqlqBVef0nor9SEWcmJgoTI9lX5TyGiOerDhd 8MOLgHqTWacs/rgCArbyU5ilnQfB5Gut0j5+xRoSg37YhZjl6ldiQtvybcOmkCIp nQ3YAX/NNhjcIFFGAcSGXo4eJWk77kw= -----END CERTIFICATE-----Generated at Sat May 10 19:46:42 2025 by rpki-client