$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa File: 49e20564-5bb6-373a-bf3f-8d7320b64039.roa (raw, json) Hash identifier: GJ8FyArY78rzPJn+MRNUFuKIcnNY3pi0GFxgTiGrcXU= Subject key identifier: E0:7E:B3:73:34:91:38:CD:64:75:10:4A:61:67:8D:CE:76:C5:58:DA Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F43285849D430AC73C78A6C0434627680 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 33668 IP address blocks: 68.49.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:ac:73:c7:8a:6c:04:34:62:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=5119719d-a4cf-4782-bd2b-2135269892d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b1:37:66:7d:53:ef:c3:04:16:9a:a6:0a:f5: 7e:6c:4c:a4:76:d9:af:13:d7:7e:61:c1:a2:90:41: 75:54:c6:28:7a:1d:c6:43:46:a6:8e:52:81:5a:70: b9:9b:4b:57:6b:10:d6:eb:59:9c:31:5b:e3:a9:6b: ac:53:5e:dd:c9:03:a1:2e:f8:18:fb:b0:50:fd:94: 01:c3:2f:1a:1d:89:45:db:be:94:7d:13:33:57:bb: 41:d2:ad:1c:bb:f9:87:e7:69:cf:57:2c:a2:50:ea: c5:4d:82:c3:be:ff:8c:fc:1a:b0:5e:1f:22:75:3a: ed:90:2e:5d:84:55:5c:b8:0c:62:72:63:b2:97:07: d8:1a:7b:4f:ae:b1:58:a7:72:35:b2:0a:12:2b:41: 80:86:23:30:68:53:f8:b8:cc:1a:79:b7:ee:f1:69: cb:de:7c:dd:fe:e3:01:42:4f:67:69:61:ac:be:18: cc:05:69:f3:35:4b:ad:21:02:a4:c8:bc:79:48:6e: 82:28:fc:50:ae:62:5f:34:77:b3:94:26:c1:b1:05: e5:30:ec:a4:a2:f5:d8:74:ab:42:d5:32:68:6b:86: 01:c9:aa:4d:71:73:07:40:ce:83:71:07:cf:cc:4e: a6:e2:18:3f:d5:19:07:8e:91:5c:9b:0f:8c:95:82: c9:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:7E:B3:73:34:91:38:CD:64:75:10:4A:61:67:8D:CE:76:C5:58:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49e20564-5bb6-373a-bf3f-8d7320b64039.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.49.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:53:01:5d:2c:1b:f0:66:ed:30:44:13:93:37:05:d6:98:d6: 7c:37:91:bb:ec:e5:74:7a:88:96:dd:44:c2:6f:72:c9:70:86: 47:9c:89:64:a1:ec:5f:e9:69:1d:68:77:66:41:ea:f6:31:e2: 6b:b0:0a:65:5c:e0:16:3d:17:65:a0:06:a2:92:d8:da:43:a9: fa:12:c8:ac:17:06:0c:4c:3b:88:89:84:a8:c0:e2:c3:0a:70: 7f:fc:38:4d:0e:06:53:1a:8c:7f:63:71:d1:3f:28:2e:ea:9c: 35:3b:db:b9:6b:4c:11:6c:8c:49:f5:3c:3f:86:b8:07:02:b8: 75:cc:2b:58:dd:c1:6c:dd:65:81:8b:43:3b:a6:c6:68:bc:49: 9e:ed:fd:18:72:f2:9a:66:5d:40:f8:16:ee:01:28:34:74:3d: ea:75:12:e6:78:3a:40:ca:d4:57:03:ea:c5:0d:41:94:a6:75: 3b:ed:bc:bc:99:e5:dc:2a:d2:6e:9c:c4:c8:4b:8e:d5:d6:58: 39:37:16:15:da:73:89:c5:90:a1:ce:a3:f9:8d:60:b3:79:55: ac:4d:fb:05:57:9d:25:14:ef:88:b2:3e:b7:27:55:85:29:23: 7d:44:5c:14:72:b4:42:2e:90:0f:b3:e4:a2:71:2f:cb:79:74: 0b:e8:4d:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMKxzx4psBDRidoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTExOTcxOWQtYTRjZi00NzgyLWJkMmItMjEzNTI2OTg5MmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLE3Zn1T78MEFpqmCvV+bEykdtmvE9d+YcGi kEF1VMYoeh3GQ0amjlKBWnC5m0tXaxDW61mcMVvjqWusU17dyQOhLvgY+7BQ/ZQB wy8aHYlF276UfRMzV7tB0q0cu/mH52nPVyyiUOrFTYLDvv+M/BqwXh8idTrtkC5d hFVcuAxicmOylwfYGntPrrFYp3I1sgoSK0GAhiMwaFP4uMwaebfu8WnL3nzd/uMB Qk9naWGsvhjMBWnzNUutIQKkyLx5SG6CKPxQrmJfNHezlCbBsQXlMOykovXYdKtC 1TJoa4YByapNcXMHQM6DcQfPzE6m4hg/1RkHjpFcmw+MlYLJ3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOB+s3M0kTjNZHUQSmFnjc52xVjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDllMjA1NjQtNWJiNi0z NzNhLWJmM2YtOGQ3MzIwYjY0MDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRDGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFTAV0sG/Bm7TBEE5M3BdaY1nw3kbvs5XR6iJbdRMJvcslwhkeciWSh 7F/paR1od2ZB6vYx4muwCmVc4BY9F2WgBqKS2NpDqfoSyKwXBgxMO4iJhKjA4sMK cH/8OE0OBlMajH9jcdE/KC7qnDU727lrTBFsjEn1PD+GuAcCuHXMK1jdwWzdZYGL Qzumxmi8SZ7t/Rhy8ppmXUD4Fu4BKDR0Pep1EuZ4OkDK1FcD6sUNQZSmdTvtvLyZ 5dwq0m6cxMhLjtXWWDk3FhXac4nFkKHOo/mNYLN5VaxN+wVXnSUU74iyPrcnVYUp I31EXBRytEIukA+z5KJxL8t5dAvoTT8= -----END CERTIFICATE-----Generated at Tue Jun 3 06:19:24 2025 by rpki-client