$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa File: ecfb9210-26d0-385b-979e-e9e75e5f5103.roa (raw, json) Hash identifier: P8I9AuYfB1OAIK96gChH1+pVhQ+j/iVpz1AWOvWy0n8= Subject key identifier: 74:33:5A:CA:EB:35:65:F0:01:6D:12:CE:49:36:32:3F:06:58:1D:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F8E9333B064D958886100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 67.214.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8e:93:33:b0:64:d9:58:88:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=789d4d67-d576-449c-bf9b-844d9d2a7196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cc:30:24:5e:47:d9:8f:bc:7e:a1:07:09:80: 35:c1:fc:ea:a9:16:9c:9c:79:f9:a2:5c:f3:f1:1d: 3f:0c:dc:6b:bb:ed:27:7b:47:eb:13:40:5c:c4:e0: 2d:9b:27:dc:e6:11:a9:92:46:30:1a:d6:d7:8e:32: 0f:64:5c:83:13:65:ff:9b:f2:95:e2:29:26:dc:0b: fe:8a:46:84:22:57:c2:bd:58:86:db:c2:8b:08:f6: b1:b6:ae:1e:e5:df:46:96:ca:05:46:72:9f:46:74: 55:3d:e7:cc:e8:b9:3d:18:f9:48:21:f8:ad:8f:ee: 33:ba:1a:2e:99:0d:2a:d8:13:8d:2f:3c:b0:2f:8f: a7:e2:e8:e4:b4:e8:28:b1:99:bb:1d:9d:10:43:59: 62:c5:ad:64:42:3d:7a:32:aa:98:28:89:05:36:f2: 0a:22:91:f9:80:e9:58:43:35:3f:5a:2e:ea:7e:1b: 4d:c1:13:15:a5:75:34:eb:6a:4e:af:b6:65:bd:cb: a8:10:ba:aa:8f:16:bd:44:92:e4:d0:94:97:af:f8: 87:7f:bf:76:31:b0:42:6e:b5:f2:ee:c8:3b:51:57: 58:dc:a7:3e:ac:42:2a:36:5b:03:10:7e:ce:3a:4f: 60:1b:f0:a9:c2:01:18:a5:4e:2c:88:4b:8c:f4:f3: 9a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:33:5A:CA:EB:35:65:F0:01:6D:12:CE:49:36:32:3F:06:58:1D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ecfb9210-26d0-385b-979e-e9e75e5f5103.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.214.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a7:dd:db:85:f4:41:95:67:2a:2f:1e:13:65:ea:87:9d:71: 8e:53:44:ae:b4:24:c8:53:f4:e0:33:8e:e7:44:af:b2:e7:c4: 40:27:c6:52:77:33:66:5a:0a:f3:5a:6f:30:dc:cc:4b:5c:be: f3:6c:15:da:be:93:89:e1:98:55:98:9f:f8:c3:e4:64:d5:24: 55:05:f5:71:95:01:82:93:32:a5:35:14:38:39:b3:d1:5b:e2: d6:56:aa:9e:6c:55:22:45:0c:28:bc:2a:2e:5a:22:4c:b9:e4: 45:d0:d0:40:99:7b:81:15:77:a4:ed:da:8b:56:c4:3e:8f:37: f0:8b:28:8d:5d:81:22:33:7c:7c:78:6e:50:36:44:4a:b4:99: 1a:fd:d3:0b:b6:f6:c8:54:ad:e2:22:76:c0:9f:82:9f:0c:4c: ca:fa:b6:42:4e:c0:37:ad:ed:5f:52:48:fd:e6:aa:b6:1f:30: 90:13:a4:66:48:0e:29:b6:88:7d:54:39:cf:85:88:54:b7:84: 34:71:bd:c4:ab:d4:2c:56:0f:dc:bd:1a:de:6e:8b:f6:c2:ab: 6c:20:df:86:30:ff:9e:32:61:e5:bf:50:67:0c:b9:76:00:68: 79:59:03:e6:95:d6:79:51:57:94:eb:83:03:f2:1b:24:48:46: d1:d3:0e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P46TM7Bk2ViIYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Nzg5ZDRkNjctZDU3Ni00NDljLWJmOWItODQ0ZDlkMmE3MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcwwJF5H2Y+8fqEHCYA1wfzqqRacnHn5olzz 8R0/DNxru+0ne0frE0BcxOAtmyfc5hGpkkYwGtbXjjIPZFyDE2X/m/KV4ikm3Av+ ikaEIlfCvViG28KLCPaxtq4e5d9GlsoFRnKfRnRVPefM6Lk9GPlIIfitj+4zuhou mQ0q2BONLzywL4+n4ujktOgosZm7HZ0QQ1lixa1kQj16MqqYKIkFNvIKIpH5gOlY QzU/Wi7qfhtNwRMVpXU062pOr7ZlvcuoELqqjxa9RJLk0JSXr/iHf792MbBCbrXy 7sg7UVdY3Kc+rEIqNlsDEH7OOk9gG/CpwgEYpU4siEuM9POaawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQzWsrrNWXwAW0Szkk2Mj8GWB0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWNmYjkyMTAtMjZkMC0z ODViLTk3OWUtZTllNzVlNWY1MTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9YAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCn3duF9EGVZyovHhNl6oedcY5TRK60JMhT9OAzjudEr7LnxEAnxlJ3 M2ZaCvNabzDczEtcvvNsFdq+k4nhmFWYn/jD5GTVJFUF9XGVAYKTMqU1FDg5s9Fb 4tZWqp5sVSJFDCi8Ki5aIky55EXQ0ECZe4EVd6Tt2otWxD6PN/CLKI1dgSIzfHx4 blA2REq0mRr90wu29shUreIidsCfgp8MTMr6tkJOwDet7V9SSP3mqrYfMJATpGZI Dim2iH1UOc+FiFS3hDRxvcSr1CxWD9y9Gt5ui/bCq2wg34Yw/54yYeW/UGcMuXYA aHlZA+aV1nlRV5TrgwPyGyRIRtHTDgQ= -----END CERTIFICATE-----Generated at Fri May 9 08:08:38 2025 by rpki-client