$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa File: d8aada01-f195-3c39-b506-9b9140b28ba2.roa (raw, json) Hash identifier: xNTZbwTSqnpcrnsT1q4ueDJI3Z7UrH9EHDlRXEaeLWQ= Subject key identifier: B1:F2:65:47:3F:B2:52:6D:07:ED:E0:E9:DF:22:03:F5:9A:D8:E2:E9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4943E0BD1B8C86FBEC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 22773 IP address blocks: 151.213.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:49:43:e0:bd:1b:8c:86:fb:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=70835099-7e1c-4714-9ba9-2e52ec94f3eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:d3:73:66:18:a9:63:d5:ff:c2:4a:58:76: 66:b9:99:75:90:27:d7:39:c0:14:e2:13:59:b5:83: 5b:dd:dc:d8:83:d2:84:54:d6:f8:d1:04:0f:6f:5d: ce:c3:1c:53:33:82:85:48:0d:b3:47:3a:5c:e2:9a: 6d:2b:ca:0a:4b:6d:f9:da:a8:0c:44:9c:e0:d5:24: 26:a9:25:92:04:0f:9c:f6:9b:ff:64:9c:2a:20:f7: 83:10:62:a6:13:a7:49:81:f2:17:7b:e5:7b:04:8b: 4a:32:af:ca:f5:53:1f:77:66:e9:e7:b2:6c:1a:e0: f2:5c:f6:42:a9:e9:55:c3:2f:c6:4d:d3:aa:53:70: d7:01:b3:f3:20:b8:d6:d2:0d:ab:5d:78:35:70:c2: 80:85:87:41:84:f4:fa:13:65:59:02:89:73:dc:eb: e1:1e:29:90:17:24:a5:f7:76:99:59:23:07:1a:78: de:e7:ec:b9:83:95:4b:02:45:07:44:c2:f1:f7:af: ca:00:34:e0:b5:85:ce:7b:6c:65:f2:00:64:cb:43: c0:7b:66:86:1a:d5:5a:17:94:fb:85:a3:10:28:82: 48:0d:cf:34:90:11:e2:95:67:e7:84:1b:47:44:87: 15:2f:3b:ef:58:09:b3:15:13:aa:8a:ff:5b:a7:43: 68:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F2:65:47:3F:B2:52:6D:07:ED:E0:E9:DF:22:03:F5:9A:D8:E2:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8aada01-f195-3c39-b506-9b9140b28ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:01:b8:33:cb:6b:64:71:55:1c:2e:11:90:b7:8a:fe:b8:f7: f0:0d:5b:70:45:fd:42:39:eb:a0:52:9e:a6:e8:ed:d9:68:02: 7e:4d:7e:29:1e:71:6b:03:c2:e3:3a:f7:02:16:58:5c:8d:5c: 51:ae:5f:01:14:06:16:b7:94:f7:cf:d1:a4:04:85:8f:23:be: 36:8f:17:1e:5c:00:33:dd:cd:ab:dd:5d:8d:0c:27:95:e9:09: ab:56:7f:c8:42:c9:d7:62:45:00:aa:bd:95:db:4c:69:6d:cf: 92:6f:6e:2b:39:0d:41:98:0e:28:12:0d:66:72:db:cb:27:2a: 89:76:b8:ac:53:fd:ce:91:e7:9e:ba:20:87:8f:4f:29:86:16: 97:d7:08:a2:c9:fa:2c:61:65:fd:e6:dd:b0:42:03:ce:0e:2e: be:5f:bd:50:d6:2b:5a:ef:ad:dc:87:d2:93:69:f2:cc:c1:c6: 5f:de:b4:ea:bc:e4:e1:96:6d:cd:17:e5:b8:b3:e6:02:36:d0: bd:c0:38:c1:c0:27:59:85:f3:e7:be:37:88:84:bd:89:d9:14: f8:33:02:ca:af:78:d5:ae:36:fa:af:ab:83:04:fb:bd:99:f6: a2:b3:de:e3:e7:f9:f1:bc:21:73:68:2f:88:14:93:bd:c8:59: 9b:59:14:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSklD4L0bjIb77IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzA4MzUwOTktN2UxYy00NzE0LTliYTktMmU1MmVjOTRmM2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2jTc2YYqWPV/8JKWHZmuZl1kCfXOcAU4hNZ tYNb3dzYg9KEVNb40QQPb13OwxxTM4KFSA2zRzpc4pptK8oKS2352qgMRJzg1SQm qSWSBA+c9pv/ZJwqIPeDEGKmE6dJgfIXe+V7BItKMq/K9VMfd2bp57JsGuDyXPZC qelVwy/GTdOqU3DXAbPzILjW0g2rXXg1cMKAhYdBhPT6E2VZAolz3OvhHimQFySl 93aZWSMHGnje5+y5g5VLAkUHRMLx96/KADTgtYXOe2xl8gBky0PAe2aGGtVaF5T7 haMQKIJIDc80kBHilWfnhBtHRIcVLzvvWAmzFROqiv9bp0NoOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHyZUc/slJtB+3g6d8iA/Wa2OLpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhhYWRhMDEtZjE5NS0z YzM5LWI1MDYtOWI5MTQwYjI4YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkBuDPLa2RxVRwuEZC3iv649/ANW3BF/UI566BSnqbo7dloAn5Nfike cWsDwuM69wIWWFyNXFGuXwEUBha3lPfP0aQEhY8jvjaPFx5cADPdzavdXY0MJ5Xp CatWf8hCyddiRQCqvZXbTGltz5Jvbis5DUGYDigSDWZy28snKol2uKxT/c6R5566 IIePTymGFpfXCKLJ+ixhZf3m3bBCA84OLr5fvVDWK1rvrdyH0pNp8szBxl/etOq8 5OGWbc0X5biz5gI20L3AOMHAJ1mF8+e+N4iEvYnZFPgzAsqveNWuNvqvq4ME+72Z 9qKz3uPn+fG8IXNoL4gUk73IWZtZFI4= -----END CERTIFICATE-----Generated at Sun May 11 02:09:06 2025 by rpki-client