$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa File: 03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa (raw, json) Hash identifier: 40sSmkKfleeL+kFKl5uSsHZ4Ks3PytlAUJbE1F1J1Kk= Subject key identifier: F1:81:0D:DE:F5:3B:CC:9F:F8:EF:CA:05:AE:AF:B1:E0:55:F9:3C:E6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA1F6E30936512096AE900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 67.141.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:1f:6e:30:93:65:12:09:6a:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=face95c6-4fd6-4d83-87d9-a43838ec7bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:9e:27:95:2e:95:e6:d4:62:19:01:bb:56: a6:97:75:6a:6c:b8:64:04:af:2a:eb:54:9d:65:76: 7d:09:2f:ec:01:d9:e2:e3:08:a3:ab:33:15:e5:5f: d3:90:42:93:90:b9:8d:54:ea:c4:ae:7b:2a:af:b9: 49:e6:bc:41:8c:17:af:2f:38:b6:ea:97:e4:c3:dd: a6:c3:10:58:e3:b4:c3:cb:c9:35:bc:b4:a7:96:24: 87:97:67:fc:4b:cc:f1:24:d2:70:bc:6f:a2:81:c6: f5:f5:1c:40:3d:3b:a6:2c:83:f0:6b:65:c1:84:20: 6d:4e:ee:46:c1:5e:6d:ea:62:bc:1a:24:a2:26:dd: 5d:3c:f0:37:02:0c:d2:bc:ae:3c:15:b4:87:2e:2a: 06:5d:97:28:55:84:ab:af:13:52:95:b6:8a:7b:69: c7:83:fd:67:02:93:d1:ff:2b:b9:bc:74:bd:a2:a3: 61:1a:93:a0:ed:ae:88:d1:9c:43:e1:86:ea:e6:f0: e3:d5:ec:1a:84:24:25:76:a7:63:55:3c:16:81:ee: 08:23:02:d5:64:bf:df:65:b0:a6:52:91:4d:e4:7e: 86:f0:21:b3:ea:14:96:06:7f:5b:d5:4c:f6:1a:12: a6:23:05:6d:5e:74:6b:41:63:3f:d2:9e:6c:14:32: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:81:0D:DE:F5:3B:CC:9F:F8:EF:CA:05:AE:AF:B1:E0:55:F9:3C:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/03c82bd3-ec15-355a-a5f4-d334426ebe0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ad:22:c6:48:c1:95:74:da:5b:3d:52:11:08:b7:89:d6:88: 0c:e9:cf:a2:d3:7f:1d:a8:bc:82:6f:79:84:0b:19:99:0e:14: f5:65:31:b2:e6:2c:85:f0:ff:d7:6f:3f:50:f8:8e:b9:42:92: 09:44:4c:f0:8f:d7:30:45:b7:04:ab:0f:31:15:4a:67:23:de: e0:ed:ad:74:82:ed:49:a4:ed:4b:0f:b2:a8:17:70:96:34:59: cf:02:fb:7c:d5:b3:81:84:9c:46:31:70:92:e9:9d:36:e6:72: de:63:a7:7e:92:88:b3:43:97:f3:3c:e2:11:5c:72:dd:77:77: ae:91:a1:f2:cc:b3:60:18:78:69:66:f1:74:f2:a6:c2:6e:a6: e8:29:03:c2:f4:78:35:23:31:7e:c5:81:b6:c9:fe:6f:12:3a: 91:1e:6d:3b:05:89:59:e4:e5:aa:53:7c:3e:72:31:8b:8e:da: 76:ce:e3:c0:3e:df:35:a5:c1:fe:51:bb:06:d0:f8:07:3c:5a: bb:a1:d7:1c:5f:52:d0:0d:a8:36:d9:51:aa:da:93:0c:03:bd: 2c:1d:d6:2e:7a:91:cf:60:b2:ca:7a:20:4b:ca:5f:72:f8:82: 0d:cb:d9:94:f6:a8:db:ad:d6:47:40:76:dc:ed:19:89:5f:8f: e8:24:1b:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyh9uMJNlEglq6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk ZmFjZTk1YzYtNGZkNi00ZDgzLTg3ZDktYTQzODM4ZWM3YmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTmeJ5UulebUYhkBu1aml3VqbLhkBK8q61Sd ZXZ9CS/sAdni4wijqzMV5V/TkEKTkLmNVOrErnsqr7lJ5rxBjBevLzi26pfkw92m wxBY47TDy8k1vLSnliSHl2f8S8zxJNJwvG+igcb19RxAPTumLIPwa2XBhCBtTu5G wV5t6mK8GiSiJt1dPPA3AgzSvK48FbSHLioGXZcoVYSrrxNSlbaKe2nHg/1nApPR /yu5vHS9oqNhGpOg7a6I0ZxD4Ybq5vDj1ewahCQldqdjVTwWge4IIwLVZL/fZbCm UpFN5H6G8CGz6hSWBn9b1Uz2GhKmIwVtXnRrQWM/0p5sFDLQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGBDd71O8yf+O/KBa6vseBV+TzmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDNjODJiZDMtZWMxNS0z NTVhLWE1ZjQtZDMzNDQyNmViZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ40QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAButIsZIwZV02ls9UhEIt4nWiAzpz6LTfx2ovIJveYQLGZkOFPVlMbLm LIXw/9dvP1D4jrlCkglETPCP1zBFtwSrDzEVSmcj3uDtrXSC7Umk7UsPsqgXcJY0 Wc8C+3zVs4GEnEYxcJLpnTbmct5jp36SiLNDl/M84hFcct13d66RofLMs2AYeGlm 8XTypsJupugpA8L0eDUjMX7FgbbJ/m8SOpEebTsFiVnk5apTfD5yMYuO2nbO48A+ 3zWlwf5RuwbQ+Ac8Wruh1xxfUtANqDbZUarakwwDvSwd1i56kc9gssp6IEvKX3L4 gg3L2ZT2qNut1kdAdtztGYlfj+gkG60= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:30 2025 by rpki-client