$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa File: ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa (raw, json) Hash identifier: Mmq9Lvagezi4OWDLG3Kqsj+1SHzXmEckjuY5xrro4Lc= Subject key identifier: 99:03:06:45:AD:18:FA:0C:07:1E:D2:AF:F5:B0:98:AB:2E:8B:F6:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A3FAAD245A410E979166E4400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa Signing time: Fri 20 Jun 2025 01:00:51 +0000 ROA not before: Fri 20 Jun 2025 01:00:51 +0000 ROA not after: Thu 18 Sep 2025 01:00:51 +0000 asID: 7029 IP address blocks: 71.28.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3f:aa:d2:45:a4:10:e9:79:16:6e:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 20 01:00:51 2025 GMT Not After : Sep 18 01:00:51 2025 GMT Subject: CN=9d3ec0d0-2488-4897-b9d9-d3fb6c47f47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:e3:21:cf:54:d8:52:ca:cd:64:00:18:ae:ca: 63:5f:98:ab:b6:69:3f:43:2a:ce:e5:7d:0e:38:54: f3:5d:26:26:3c:bd:af:1e:81:15:cf:13:a7:db:a1: 5f:d3:af:d3:4b:b6:dd:75:8b:d5:0a:6c:b7:8e:8e: c6:63:ed:3c:ea:92:91:83:2c:30:bc:07:fc:73:53: 1d:bb:11:fc:e3:04:1b:ba:ad:6a:31:f2:e8:e8:22: 01:a8:6e:f1:53:9d:61:43:f3:29:8d:df:2c:be:cb: 40:68:5a:3b:8c:59:32:a9:d5:bb:e9:25:e9:10:ee: 2b:63:9a:fe:c3:b8:2f:3f:e5:27:a5:35:97:15:93: f6:03:26:72:d3:89:5f:bf:a5:c9:1d:58:e8:95:cb: 47:ca:5a:04:81:2f:d9:32:d8:93:34:27:1b:69:0b: 03:1b:fa:64:de:01:79:3f:eb:e3:5d:9f:2d:c1:69: e6:bd:b5:ec:8a:49:05:5c:50:d2:cb:ce:79:3a:9b: 68:aa:97:43:81:71:1d:e9:07:12:27:b5:d7:a3:ae: 77:a6:59:95:55:f3:64:71:80:c2:b6:11:90:6f:f3: e4:52:b9:04:ec:f2:0f:4a:18:d8:c0:bb:78:e1:d2: 00:21:75:1f:06:d0:f2:b3:d0:a0:eb:e1:de:15:f0: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:03:06:45:AD:18:FA:0C:07:1E:D2:AF:F5:B0:98:AB:2E:8B:F6:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ebf3b3a9-5e34-3cc6-9d63-7697990536bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:50:66:f4:a0:1d:a6:8c:b6:70:8f:58:6d:bc:82:28:5f:78: ab:54:22:79:60:48:61:12:74:38:06:ab:78:d0:4d:53:3a:f0: ab:66:0a:a1:50:b0:67:52:53:3e:10:64:30:b8:fc:0e:55:0a: 4d:03:71:c1:ea:32:f0:c3:63:62:fe:a8:6e:7f:24:5f:93:32: 03:5d:05:fe:bd:ed:4b:54:de:35:a4:ac:d9:eb:ec:18:b8:8a: fa:97:d4:1d:8e:f0:08:f5:e1:0e:89:75:6a:24:d4:41:a3:3f: f4:53:bc:84:b5:f3:a3:1f:eb:3a:e6:4e:d8:5e:fe:56:6f:0c: ec:45:c4:66:96:32:6b:cc:76:17:cc:00:5b:70:dc:fa:de:b7: 65:d9:97:11:e0:38:96:1a:f3:93:f0:97:f7:77:c5:f4:3f:81: c6:06:b4:04:62:17:29:2d:72:a4:4c:68:e2:52:0d:4d:fc:1a: 40:6b:b8:5b:b6:04:17:7c:d0:0b:db:e1:be:82:85:ef:0b:be: 7c:80:6f:72:69:3e:86:bd:4c:de:9d:85:ae:1c:09:67:ce:7e: 78:7a:62:f5:8b:74:a5:6c:cc:23:58:99:4e:06:a8:27:c4:21: 21:95:9f:da:07:f5:f7:b1:c3:13:93:21:a5:78:c9:bc:0f:e5: f6:e9:b4:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtJFpBDpeRZuRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk OWQzZWMwZDAtMjQ4OC00ODk3LWI5ZDktZDNmYjZjNDdmNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7uMhz1TYUsrNZAAYrspjX5irtmk/QyrO5X0O OFTzXSYmPL2vHoEVzxOn26Ff06/TS7bddYvVCmy3jo7GY+086pKRgywwvAf8c1Md uxH84wQbuq1qMfLo6CIBqG7xU51hQ/Mpjd8svstAaFo7jFkyqdW76SXpEO4rY5r+ w7gvP+UnpTWXFZP2AyZy04lfv6XJHVjolctHyloEgS/ZMtiTNCcbaQsDG/pk3gF5 P+vjXZ8twWnmvbXsikkFXFDSy855OptoqpdDgXEd6QcSJ7XXo653plmVVfNkcYDC thGQb/PkUrkE7PIPShjYwLt44dIAIXUfBtDys9Cg6+HeFfD4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkDBkWtGPoMBx7Sr/WwmKsui/Y8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWJmM2IzYTktNWUzNC0z Y2M2LTlkNjMtNzY5Nzk5MDUzNmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRxySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBQZvSgHaaMtnCPWG28gihfeKtUInlgSGESdDgGq3jQTVM68KtmCqFQ sGdSUz4QZDC4/A5VCk0DccHqMvDDY2L+qG5/JF+TMgNdBf697UtU3jWkrNnr7Bi4 ivqX1B2O8Aj14Q6JdWok1EGjP/RTvIS186Mf6zrmTthe/lZvDOxFxGaWMmvMdhfM AFtw3Pret2XZlxHgOJYa85Pwl/d3xfQ/gcYGtARiFyktcqRMaOJSDU38GkBruFu2 BBd80Avb4b6Che8LvnyAb3JpPoa9TN6dha4cCWfOfnh6YvWLdKVszCNYmU4GqCfE ISGVn9oH9fexwxOTIaV4ybwP5fbptBI= -----END CERTIFICATE-----Generated at Tue Jul 1 07:05:39 2025 by rpki-client