$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/83f68b1c-7062-36b8-805b-dc6d9e1fd1c4.roa File: 83f68b1c-7062-36b8-805b-dc6d9e1fd1c4.roa (raw, json) Hash identifier: C3UnsbhdnlwhmEO8AHJsaMD390bqQTsSwmxOKL94xgA= Subject key identifier: 7E:26:97:BB:1D:BC:11:24:6E:75:EB:D0:0A:68:14:2E:CF:3A:15:03 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3BA149D241D85468AA00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/83f68b1c-7062-36b8-805b-dc6d9e1fd1c4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 66.109.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3b:a1:49:d2:41:d8:54:68:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=9258bbb3-0235-4513-9b5d-424bde11ebc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:14:1f:d5:3a:46:36:49:96:de:f9:61:4e:0c: da:1c:6d:22:9d:45:57:b4:1a:a8:33:0d:f5:bb:1f: 5d:77:5d:f1:b6:3a:ab:23:13:47:ae:ea:4a:13:90: 8d:2e:d0:c4:89:34:cc:32:9d:51:6c:2d:1d:23:8d: e0:cd:66:88:3b:a9:e5:53:9b:08:2f:66:81:9a:36: b4:52:13:4c:c7:e8:4f:48:72:40:5e:2c:27:2a:a0: 98:58:26:d4:91:e5:61:3b:62:a6:30:1c:59:30:97: 9f:d1:f2:ac:a6:b3:13:58:99:7a:31:e8:7e:07:21: bb:4e:a7:17:2e:f0:23:c7:0d:79:27:2c:0b:57:c6: c5:7b:3d:1f:8f:28:1f:3a:e9:6f:a5:03:da:e8:5b: 27:2e:ea:35:7e:35:a3:6d:e6:25:46:ae:0c:bf:82: 74:ce:e0:82:e3:67:a9:20:0a:44:02:2d:25:e7:f5: e0:0c:60:53:67:4d:47:dd:c8:e9:a7:9f:da:00:df: 92:3a:45:4c:3f:14:58:4f:3f:bf:11:4d:47:89:b4: 17:4b:a7:30:46:d5:15:38:71:03:2f:d8:94:8b:91: c7:6e:8a:e1:18:81:a0:da:ee:6f:26:dc:ee:c7:f5: a0:44:ae:0a:87:ea:5f:fc:a4:10:d1:d6:b4:44:95: 54:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:26:97:BB:1D:BC:11:24:6E:75:EB:D0:0A:68:14:2E:CF:3A:15:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/83f68b1c-7062-36b8-805b-dc6d9e1fd1c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 66.109.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0c:38:9f:5f:0f:c1:ab:f4:8c:df:b2:9c:82:30:05:2d:33: da:09:cf:1b:e2:2b:b0:a4:ea:3f:81:db:34:35:e2:de:a0:81: fd:ef:68:36:2d:76:2f:ed:32:ab:85:3a:3d:29:8a:ae:76:26: 8b:59:73:fe:39:84:13:4c:da:a8:51:f3:d3:1f:2f:43:92:1c: fa:ff:d3:a6:9f:33:53:17:33:ae:13:55:88:60:f0:b2:88:76: 0b:3c:eb:29:8d:d3:0c:c0:7d:8a:a9:7e:36:b6:b3:d6:2f:d2: a7:a9:fd:6d:c3:56:2c:28:be:a6:8c:96:8b:c3:39:a2:c6:e5: 2a:a0:2f:4f:88:b7:a3:ae:6f:7e:0f:c5:d8:0b:03:44:13:58: bf:17:36:08:ff:7b:74:82:3c:a8:c2:9a:0d:e8:da:6e:32:4f: ef:9a:7f:c3:be:dc:d9:0d:7d:8b:64:ee:7e:4b:fb:e9:e3:84: a0:6b:ae:f0:76:e1:c0:48:cf:e3:23:25:2d:72:d1:4f:e5:29: 52:98:12:94:d9:6f:92:ac:c9:2e:27:1f:49:3d:4b:89:b8:eb: 63:3d:36:24:f3:d4:2c:52:c7:51:cc:f6:c8:a1:b1:cc:7f:1b: 32:d8:39:87:57:ae:7f:90:2d:df:dc:ce:90:f7:ea:7a:07:88: 48:f8:f7:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjuhSdJB2FRoqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTI1OGJiYjMtMDIzNS00NTEzLTliNWQtNDI0YmRlMTFlYmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRQf1TpGNkmW3vlhTgzaHG0inUVXtBqoMw31 ux9dd13xtjqrIxNHrupKE5CNLtDEiTTMMp1RbC0dI43gzWaIO6nlU5sIL2aBmja0 UhNMx+hPSHJAXiwnKqCYWCbUkeVhO2KmMBxZMJef0fKsprMTWJl6Meh+ByG7TqcX LvAjxw15JywLV8bFez0fjygfOulvpQPa6FsnLuo1fjWjbeYlRq4Mv4J0zuCC42ep IApEAi0l5/XgDGBTZ01H3cjpp5/aAN+SOkVMPxRYTz+/EU1HibQXS6cwRtUVOHED L9iUi5HHborhGIGg2u5vJtzux/WgRK4Kh+pf/KQQ0da0RJVUXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH4ml7sdvBEkbnXr0ApoFC7POhUDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODNmNjhiMWMtNzA2Mi0z NmI4LTgwNWItZGM2ZDllMWZkMWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQm3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8MOJ9fD8Gr9IzfspyCMAUtM9oJzxviK7Ck6j+B2zQ14t6ggf3vaDYt di/tMquFOj0piq52JotZc/45hBNM2qhR89MfL0OSHPr/06afM1MXM64TVYhg8LKI dgs86ymN0wzAfYqpfja2s9Yv0qep/W3DViwovqaMlovDOaLG5SqgL0+It6Oub34P xdgLA0QTWL8XNgj/e3SCPKjCmg3o2m4yT++af8O+3NkNfYtk7n5L++njhKBrrvB2 4cBIz+MjJS1y0U/lKVKYEpTZb5KsyS4nH0k9S4m462M9NiTz1CxSx1HM9sihscx/ GzLYOYdXrn+QLd/czpD36noHiEj497Y= -----END CERTIFICATE-----Generated at Thu Jun 5 18:43:07 2025 by rpki-client