$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa File: f08df877-a0a6-3b38-b4f7-a229952babc8.roa (raw, json) Hash identifier: lWGyhsz/NF16jgGUcwNRWkljcUrJrQtJEE8ycAiP8yg= Subject key identifier: 9F:20:53:71:56:2D:C4:70:F1:85:EF:2C:B2:8F:D5:D4:A8:67:68:96 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3FA7C03A199C540A443E40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 71.30.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:a7:c0:3a:19:9c:54:0a:44:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=f743e0de-46a0-4b9f-b74a-a7f76e4fa33d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:0b:a3:01:38:a0:86:34:44:6e:ea:24:4b: 62:64:05:f3:f4:15:e3:14:ff:20:f0:2c:ba:32:ca: 5a:90:67:26:a6:b3:43:2b:38:18:7b:3e:95:8c:50: 76:f1:c6:a0:4f:7e:77:50:07:5d:d5:69:3a:b8:59: 41:63:9d:7b:f8:4a:b4:dc:12:5c:16:af:82:93:ac: 78:02:3c:87:56:6b:88:e4:36:e5:0f:82:e9:a0:56: 83:4c:97:7f:35:be:8f:0e:93:cd:55:77:f6:24:cf: 80:72:ba:16:16:9b:e6:46:de:1b:ac:18:04:fa:09: 59:99:26:3c:e2:f5:03:76:c2:ec:3c:a4:41:6b:c8: 35:0b:94:d9:24:6c:aa:d0:f7:93:07:5f:c8:ff:fa: d0:11:af:6d:89:55:29:e0:79:4d:fa:40:f9:9a:b1: 71:c4:08:87:e4:c0:a7:42:e3:a9:ab:4f:38:3f:27: 0a:f1:fc:10:46:55:92:ba:ff:4c:6a:b2:55:ce:05: 24:55:bb:b7:5b:5f:54:9b:67:5b:89:b5:eb:c4:2d: 54:5b:3b:16:2e:7d:ea:7e:3a:bf:ee:ce:75:13:bb: e1:d2:b4:78:4a:37:c5:b5:fc:f9:bc:f4:83:a4:be: f5:3b:ad:7d:67:ce:1b:96:88:20:26:e2:7c:eb:9a: 6c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:20:53:71:56:2D:C4:70:F1:85:EF:2C:B2:8F:D5:D4:A8:67:68:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f08df877-a0a6-3b38-b4f7-a229952babc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.30.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d5:09:84:e5:af:92:31:ca:0f:e6:cf:ce:aa:92:d3:0a:83: 7b:7d:05:69:10:40:cf:20:5a:b4:f1:d0:8b:73:da:2b:2f:e9: 27:9d:5c:83:da:70:1f:15:6d:4c:25:29:44:d9:84:b2:79:2c: a0:f7:15:fc:ee:e3:84:89:4e:de:be:bd:db:56:ef:f5:fb:d0: 50:42:b0:56:d6:70:3c:18:a6:92:5d:60:39:38:f2:d6:3b:f7: 33:ba:d8:22:e7:80:30:e0:b7:a2:1d:87:fe:08:8d:96:ff:98: 5d:44:f3:13:5a:5b:dc:dd:19:16:93:c8:f1:b9:9a:90:e0:5f: 51:ba:aa:54:ab:f3:d5:ee:d8:f3:04:89:24:39:a0:fb:30:e9: b7:f5:71:55:b3:a5:e1:e1:27:f6:fa:94:13:20:3d:a5:a6:3c: b4:ba:46:35:c6:0c:1b:da:9f:4e:dd:1b:eb:0d:e5:9b:84:f6: 96:3e:7e:cb:41:51:55:13:53:4f:b3:69:f9:59:2f:35:fa:8b: 1e:63:00:82:8a:9a:ab:71:69:fe:f6:a6:58:cd:32:18:f8:61: b5:7d:07:e7:b7:cc:2c:b7:8f:66:71:6a:24:9b:bf:16:ab:35: e7:b2:3a:e9:e4:17:9f:bc:bc:16:fc:6b:29:36:a0:42:26:11: c7:29:9b:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P6fAOhmcVApEPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk Zjc0M2UwZGUtNDZhMC00YjlmLWI3NGEtYTdmNzZlNGZhMzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+kLowE4oIY0RG7qJEtiZAXz9BXjFP8g8Cy6 MspakGcmprNDKzgYez6VjFB28cagT353UAdd1Wk6uFlBY517+Eq03BJcFq+Ck6x4 AjyHVmuI5DblD4LpoFaDTJd/Nb6PDpPNVXf2JM+AcroWFpvmRt4brBgE+glZmSY8 4vUDdsLsPKRBa8g1C5TZJGyq0PeTB1/I//rQEa9tiVUp4HlN+kD5mrFxxAiH5MCn QuOpq084PycK8fwQRlWSuv9MarJVzgUkVbu3W19Um2dbibXrxC1UWzsWLn3qfjq/ 7s51E7vh0rR4SjfFtfz5vPSDpL71O619Z84bloggJuJ865psAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8gU3FWLcRw8YXvLLKP1dSoZ2iWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjA4ZGY4NzctYTBhNi0z YjM4LWI0ZjctYTIyOTk1MmJhYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRx6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDVCYTlr5Ixyg/mz86qktMKg3t9BWkQQM8gWrTx0Itz2isv6SedXIPa cB8VbUwlKUTZhLJ5LKD3Ffzu44SJTt6+vdtW7/X70FBCsFbWcDwYppJdYDk48tY7 9zO62CLngDDgt6Idh/4IjZb/mF1E8xNaW9zdGRaTyPG5mpDgX1G6qlSr89Xu2PME iSQ5oPsw6bf1cVWzpeHhJ/b6lBMgPaWmPLS6RjXGDBvan07dG+sN5ZuE9pY+fstB UVUTU0+zaflZLzX6ix5jAIKKmqtxaf72pljNMhj4YbV9B+e3zCy3j2ZxaiSbvxar NeeyOunkF5+8vBb8ayk2oEImEccpm2w= -----END CERTIFICATE-----Generated at Thu May 8 12:37:02 2025 by rpki-client