$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa File: f363de57-c40e-349f-b019-70a573f7e01a.roa (raw, json) Hash identifier: zjCgM3BMJYU6veO0S0kRIzmyLBng19q8qiG3gQ2J5Ug= Subject key identifier: BC:61:E1:D4:64:CF:E7:9E:FA:E2:EE:31:3F:E5:72:53:06:4F:E2:EC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1B3E691D7E74560C2500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.235.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1b:3e:69:1d:7e:74:56:0c:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d978dad4-fb22-45ee-be0c-9b49eadc2260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:28:69:c6:bd:5f:8b:ff:bb:c2:14:87:93: f4:0c:5d:76:e8:db:4a:83:c9:82:75:4f:5c:f0:2e: e9:44:e8:78:8a:cb:39:d8:f7:75:34:35:1d:ec:82: 9f:f1:19:d5:09:b3:63:02:bb:81:5b:08:39:99:e7: 5b:08:d2:ba:b6:0b:54:cd:25:ae:ea:24:e3:56:98: d5:28:0e:dc:65:5d:5c:71:1e:5c:6b:15:a4:a5:0c: 2e:9f:b8:a7:1d:e5:36:37:50:b7:53:ce:af:39:53: a4:de:a3:78:a8:b8:54:4b:a4:bc:b0:73:c7:56:25: 6c:63:2c:3d:c7:f9:9d:a4:5b:8e:54:94:7c:45:a3: 0e:3c:b8:03:80:9f:fc:1e:eb:90:43:42:99:d6:7f: 2a:74:ae:4c:00:ee:10:ac:89:ca:be:bf:e6:ca:39: 21:7f:94:fd:2f:71:b0:ee:8d:96:f4:59:27:c0:00: 9a:2a:6e:4b:61:13:19:bd:f2:c2:df:b3:85:46:b1: a4:bb:f5:9b:8d:e0:c7:b7:e5:bb:64:4c:c1:89:be: 75:6a:34:38:d4:5a:0e:63:8a:0c:51:14:d3:2f:86: 02:5e:3a:b5:41:a3:45:26:46:b3:d2:c3:92:a8:a9: 95:36:4d:f5:c4:1b:cc:2d:2e:fd:10:53:7b:75:91: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:E1:D4:64:CF:E7:9E:FA:E2:EE:31:3F:E5:72:53:06:4F:E2:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f363de57-c40e-349f-b019-70a573f7e01a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.235.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2b:db:14:f1:25:db:8c:18:7b:c1:77:ce:0e:a4:62:5c:d9: 35:f1:0d:cd:f4:2a:af:1f:92:75:fe:9e:47:6a:57:c8:4c:68: b4:9d:d3:03:ba:24:50:05:ba:8f:14:72:3a:f5:70:9e:41:7c: 26:fd:26:ec:9b:00:1a:2e:61:1b:2a:4d:ae:b2:d1:5a:0a:0b: 12:96:b0:33:5e:a2:07:d2:88:b3:a8:88:f3:be:9c:08:5f:b2: 7f:5d:fe:16:cb:29:4d:06:e9:1b:6c:5b:4a:7f:a5:97:43:f6: cf:7e:39:c3:91:7a:92:2f:1b:49:b2:73:c4:da:bb:02:f7:59: 83:73:61:a9:61:5a:61:5c:e7:cc:2e:7b:d3:7c:e6:80:e6:5d: 68:7a:bb:78:99:49:45:e7:ca:46:62:ff:0e:d0:f9:45:40:9a: 5e:9c:b9:45:da:70:3f:4c:20:ce:f1:a6:35:1d:46:b9:c8:7a: ce:be:fe:e5:a7:9e:19:36:7b:92:fa:18:d0:b6:1b:eb:95:74: 45:17:10:4d:fd:7b:87:f9:84:f5:bb:82:46:9b:30:59:b9:84: a4:c5:e2:4f:b7:8d:ba:2d:d2:e6:92:93:d7:f9:d1:9f:f5:be: f6:c7:e1:2e:d7:ed:b4:50:37:b7:07:72:f6:9b:fb:20:d2:1d: bd:13:b5:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShs+aR1+dFYMJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDk3OGRhZDQtZmIyMi00NWVlLWJlMGMtOWI0OWVhZGMyMjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQYoaca9X4v/u8IUh5P0DF126NtKg8mCdU9c 8C7pROh4iss52Pd1NDUd7IKf8RnVCbNjAruBWwg5medbCNK6tgtUzSWu6iTjVpjV KA7cZV1ccR5caxWkpQwun7inHeU2N1C3U86vOVOk3qN4qLhUS6S8sHPHViVsYyw9 x/mdpFuOVJR8RaMOPLgDgJ/8HuuQQ0KZ1n8qdK5MAO4QrInKvr/myjkhf5T9L3Gw 7o2W9FknwACaKm5LYRMZvfLC37OFRrGku/WbjeDHt+W7ZEzBib51ajQ41FoOY4oM URTTL4YCXjq1QaNFJkaz0sOSqKmVNk31xBvMLS79EFN7dZHvMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxh4dRkz+ee+uLuMT/lclMGT+LsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjM2M2RlNTctYzQwZS0z NDlmLWIwMTktNzBhNTczZjdlMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEr2xTxJduMGHvBd84OpGJc2TXxDc30Kq8fknX+nkdqV8hMaLSd0wO6 JFAFuo8Ucjr1cJ5BfCb9JuybABouYRsqTa6y0VoKCxKWsDNeogfSiLOoiPO+nAhf sn9d/hbLKU0G6RtsW0p/pZdD9s9+OcORepIvG0myc8TauwL3WYNzYalhWmFc58wu e9N85oDmXWh6u3iZSUXnykZi/w7Q+UVAml6cuUXacD9MIM7xpjUdRrnIes6+/uWn nhk2e5L6GNC2G+uVdEUXEE39e4f5hPW7gkabMFm5hKTF4k+3jbot0uaSk9f50Z/1 vvbH4S7X7bRQN7cHcvab+yDSHb0TtaA= -----END CERTIFICATE-----Generated at Thu May 8 00:34:52 2025 by rpki-client