$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e125505f-e726-38aa-b029-88707d43bc4f.roa File: e125505f-e726-38aa-b029-88707d43bc4f.roa (raw, json) Hash identifier: Z0OtnzsctaN7PQKFQrzI9Bnz7fX0rQ6sZtZL35ONMm0= Subject key identifier: EB:65:ED:BF:06:B0:19:96:99:CF:D2:CB:E5:5F:55:85:21:6B:C3:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A41B037F88B5040846720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e125505f-e726-38aa-b029-88707d43bc4f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 205.237.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:41:b0:37:f8:8b:50:40:84:67:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ef1afb8b-4b86-4de0-858d-51a7e101d790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:7a:d4:6a:1f:fb:44:ad:e6:d7:21:39:23: 10:1f:f6:fd:08:56:f4:ff:0c:3d:fa:2e:24:87:86: fa:e7:c6:25:bb:62:f1:a0:a4:41:5d:de:d2:76:00: dd:a1:c3:71:c5:3b:18:4d:b0:99:c3:6d:48:6e:45: 77:25:d4:9c:0e:60:7f:29:44:f7:bd:c1:b0:a7:92: ff:87:a6:80:b2:dc:e6:7f:11:fe:11:bd:2d:9c:b9: 72:c7:78:69:18:b3:81:0f:5b:6d:46:7a:f4:8b:1f: 5d:50:d3:b9:15:bc:ab:15:cd:ff:af:49:f4:ef:9a: e4:87:3b:62:17:e4:5e:8a:94:4f:4f:9f:1a:d5:27: 4d:95:5c:36:d7:ce:c8:96:21:77:e9:da:c1:1a:ff: 70:f6:20:e0:d7:15:2e:3f:4d:df:ad:e4:11:07:a0: a4:d5:c9:72:86:c9:22:e7:91:52:61:ee:02:a1:51: c4:96:ba:45:a3:04:bd:29:9e:92:91:f2:6e:f9:34: 56:ab:5e:f6:96:bb:a1:b8:a0:e4:41:80:ae:35:ac: 76:a1:1c:47:40:14:1c:12:dd:6c:15:ae:ca:ad:d8: d6:16:2e:ab:0e:61:f5:85:4c:6c:40:0e:b2:10:ac: a0:f6:7d:b4:76:7e:0d:e1:6e:c0:2d:92:aa:95:18: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:65:ED:BF:06:B0:19:96:99:CF:D2:CB:E5:5F:55:85:21:6B:C3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e125505f-e726-38aa-b029-88707d43bc4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.237.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:54:31:43:59:fd:f7:cb:60:7e:42:ff:19:71:54:ad:a8:10: e5:20:f5:27:f4:88:9c:43:86:eb:b9:7d:98:38:5a:ad:ba:0c: 1a:67:01:1d:ab:c6:25:30:63:8c:8e:41:2b:eb:dd:09:bd:b0: 56:c9:54:c8:00:ee:40:0c:94:ad:38:27:45:72:a8:ba:a2:df: d8:d1:19:eb:73:1b:6e:25:a9:d4:de:91:cc:52:1b:49:cf:33: 84:1b:49:67:4e:e7:c3:07:ab:02:b1:87:5a:bd:d7:b6:51:c6: 48:79:c8:40:48:3b:ba:d6:b2:2b:c1:15:af:90:24:49:75:29: f6:86:5b:30:04:15:ad:b0:a3:2b:af:64:69:c1:ad:06:a5:3b: 4c:93:00:e3:dc:ef:a0:7c:1e:20:93:a1:5b:28:8b:54:ac:dc: 61:ef:50:32:68:76:aa:2f:25:ba:2a:fb:75:6c:59:3f:9e:b4: 25:a8:a5:e7:3e:ac:7f:82:8c:a1:5b:5b:5c:0f:de:85:4d:84: 81:4e:c3:4c:ef:75:3f:5c:ce:11:e6:cd:e3:ab:55:09:8b:83: 4d:7c:a5:9f:d3:b4:27:02:d8:f6:c4:24:ca:4a:cb:a9:29:e5: bc:85:db:96:0a:78:6b:4a:d2:9e:0a:35:5f:90:a8:94:e3:79: ff:21:6a:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkGwN/iLUECEZyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZWYxYWZiOGItNGI4Ni00ZGUwLTg1OGQtNTFhN2UxMDFkNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkF61Gof+0St5tchOSMQH/b9CFb0/ww9+i4k h4b658Ylu2LxoKRBXd7SdgDdocNxxTsYTbCZw21IbkV3JdScDmB/KUT3vcGwp5L/ h6aAstzmfxH+Eb0tnLlyx3hpGLOBD1ttRnr0ix9dUNO5FbyrFc3/r0n075rkhzti F+ReipRPT58a1SdNlVw2187IliF36drBGv9w9iDg1xUuP03freQRB6Ck1clyhski 55FSYe4CoVHElrpFowS9KZ6SkfJu+TRWq172lruhuKDkQYCuNax2oRxHQBQcEt1s Fa7KrdjWFi6rDmH1hUxsQA6yEKyg9n20dn4N4W7ALZKqlRgaWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtl7b8GsBmWmc/Sy+VfVYUha8MyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTEyNTUwNWYtZTcyNi0z OGFhLWIwMjktODg3MDdkNDNiYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEze1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVUMUNZ/ffLYH5C/xlxVK2oEOUg9Sf0iJxDhuu5fZg4Wq26DBpnAR2r xiUwY4yOQSvr3Qm9sFbJVMgA7kAMlK04J0VyqLqi39jRGetzG24lqdTekcxSG0nP M4QbSWdO58MHqwKxh1q917ZRxkh5yEBIO7rWsivBFa+QJEl1KfaGWzAEFa2woyuv ZGnBrQalO0yTAOPc76B8HiCToVsoi1Ss3GHvUDJodqovJboq+3VsWT+etCWopec+ rH+CjKFbW1wP3oVNhIFOw0zvdT9czhHmzeOrVQmLg018pZ/TtCcC2PbEJMpKy6kp 5byF25YKeGtK0p4KNV+QqJTjef8hahc= -----END CERTIFICATE-----Generated at Sun May 11 17:03:04 2025 by rpki-client