$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa File: d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa (raw, json) Hash identifier: o+ylh28McLsjyBw9qpDId1BSDlBN2S+9n/gWa+NdRhU= Subject key identifier: 17:3C:31:5F:06:7E:CE:64:FF:C0:64:B1:BA:C2:55:19:9B:04:DA:A6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BB0F6EE20C1EEAD806E75F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 63.254.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:6e:e2:0c:1e:ea:d8:06:e7:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=cd6ff68d-bee9-412b-8c2e-fd630e14cbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9a:f3:ed:f1:23:30:f7:64:bb:e4:e4:20:b2: 44:f5:f2:15:35:3f:ef:1f:6c:dc:56:e3:6b:49:70: 1b:21:82:b9:85:8d:e4:c1:ab:e7:c6:ab:d4:55:09: 3b:78:2b:25:92:e9:62:ab:28:cb:6f:78:a8:c4:a2: eb:06:9c:ee:50:10:46:c8:9b:72:29:25:4f:f9:7b: 11:25:c6:15:85:3b:e2:6c:fb:42:52:12:ed:7a:04: 38:7e:3f:d4:45:c3:9f:c0:99:7e:16:0d:70:1c:e3: a1:98:2c:ba:80:73:3a:02:6a:cb:d5:ce:27:95:2a: 62:58:39:9c:b4:1e:d2:61:c7:2c:10:69:28:2d:c5: c9:f5:75:59:7d:c8:bb:8c:ad:c6:3a:ad:2a:9e:7e: 40:24:cb:2c:cb:43:07:9f:72:ab:09:7a:96:0d:e5: d1:61:39:a6:11:97:77:e3:65:e1:e9:89:d6:d6:2e: bc:b2:fb:ab:52:c6:0b:ec:78:42:b4:6e:2c:53:a9: 58:19:b6:6b:57:9c:bc:03:94:33:9f:65:50:18:8b: 56:e7:4c:6f:83:6e:3a:a1:30:06:51:83:68:cf:f4: 91:b0:d5:85:ee:19:3a:7b:c6:e6:c8:45:6a:53:f0: c5:d3:d8:bc:0f:16:42:c9:54:6f:c5:7d:50:90:90: 5f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:3C:31:5F:06:7E:CE:64:FF:C0:64:B1:BA:C2:55:19:9B:04:DA:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7cd09ab-82fd-32a1-bf5f-3993b436ba24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3f:37:68:ae:97:c8:14:13:85:02:d5:f2:88:2f:04:89:0c: 59:5a:28:24:b5:b3:ea:20:09:a4:92:1a:e6:70:51:0e:6c:d2: ff:c4:73:09:1d:cc:dd:fd:32:79:15:b4:39:92:53:a3:9f:2b: f3:45:99:85:da:b1:71:65:c4:51:24:ba:60:3a:7a:3d:34:c3: 05:de:9b:c9:2d:eb:e1:24:3f:98:42:b5:66:ae:de:b8:9b:95: 37:63:52:11:bc:c3:82:e0:5f:89:63:94:ab:41:2f:11:1d:fe: ea:81:40:84:92:64:16:00:86:cd:41:af:78:45:59:06:ff:f4: 74:9b:ee:c8:0c:0e:6f:1c:f4:e6:88:45:ea:2d:f6:44:32:c9: e9:93:e8:81:bf:7e:e8:d5:96:47:2e:bb:40:d7:54:e6:7a:3a: 00:22:64:39:e7:ca:57:e9:73:87:08:eb:7c:e3:2e:6a:db:70: dd:e1:a0:79:e4:2b:6e:c0:01:bc:25:3c:fb:6e:9c:91:76:fb: 68:e7:a2:b5:d8:d2:56:c5:5c:19:92:4d:3a:93:88:c2:8f:5c: c2:55:ac:01:de:d9:a8:0c:a3:b1:39:5e:4b:40:f3:20:33:35: 73:e0:10:ed:4d:cc:3c:c1:6b:bf:8b:7b:f6:08:c1:57:69:cb: 94:f3:28:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D27iDB7q2AbnX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk Y2Q2ZmY2OGQtYmVlOS00MTJiLThjMmUtZmQ2MzBlMTRjYmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApprz7fEjMPdku+TkILJE9fIVNT/vH2zcVuNr SXAbIYK5hY3kwavnxqvUVQk7eCslkuliqyjLb3ioxKLrBpzuUBBGyJtyKSVP+XsR JcYVhTvibPtCUhLtegQ4fj/URcOfwJl+Fg1wHOOhmCy6gHM6AmrL1c4nlSpiWDmc tB7SYccsEGkoLcXJ9XVZfci7jK3GOq0qnn5AJMssy0MHn3KrCXqWDeXRYTmmEZd3 42Xh6YnW1i68svurUsYL7HhCtG4sU6lYGbZrV5y8A5Qzn2VQGItW50xvg246oTAG UYNoz/SRsNWF7hk6e8bmyEVqU/DF09i8DxZCyVRvxX1QkJBfcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc8MV8Gfs5k/8BksbrCVRmbBNqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdjZDA5YWItODJmZC0z MmExLWJmNWYtMzk5M2I0MzZiYTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY/N2iul8gUE4UC1fKILwSJDFlaKCS1s+ogCaSSGuZwUQ5s0v/Ecwkd zN39MnkVtDmSU6OfK/NFmYXasXFlxFEkumA6ej00wwXem8kt6+EkP5hCtWau3rib lTdjUhG8w4LgX4ljlKtBLxEd/uqBQISSZBYAhs1Br3hFWQb/9HSb7sgMDm8c9OaI Reot9kQyyemT6IG/fujVlkcuu0DXVOZ6OgAiZDnnylfpc4cI63zjLmrbcN3hoHnk K27AAbwlPPtunJF2+2jnorXY0lbFXBmSTTqTiMKPXMJVrAHe2agMo7E5XktA8yAz NXPgEO1NzDzBa7+Le/YIwVdpy5TzKDQ= -----END CERTIFICATE-----Generated at Sat May 10 19:44:19 2025 by rpki-client