$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa File: 152d5f6f-78f2-31d9-8757-11d8cefc505c.roa (raw, json) Hash identifier: 1le+PaUZlo9znKUBugNiThG1pAjto4evwBVJgMGGJDg= Subject key identifier: CF:2B:3C:F3:BF:12:43:21:79:66:BD:AC:81:23:31:21:CF:35:D4:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497C3EF51AD8DEF219E6009280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa Signing time: Fri 11 Apr 2025 01:00:48 +0000 ROA not before: Fri 11 Apr 2025 01:00:48 +0000 ROA not after: Thu 10 Jul 2025 01:00:48 +0000 asID: 53271 IP address blocks: 67.62.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7c:3e:f5:1a:d8:de:f2:19:e6:00:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 11 01:00:48 2025 GMT Not After : Jul 10 01:00:48 2025 GMT Subject: CN=d4d692b4-4536-441e-a5be-4e1accf9f6ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:7a:d4:df:fc:26:d5:42:62:93:7b:e4:3d: 0c:17:17:cf:d2:b2:58:00:b5:96:41:b6:0f:4f:fc: 20:85:f9:18:a4:5b:7d:ee:6f:02:36:a8:7e:6e:97: 22:e9:16:57:76:27:d9:9a:47:f2:dd:13:c2:6a:01: 47:0b:46:23:3d:50:78:aa:d5:eb:a5:c6:f9:b2:af: dd:58:5c:81:6f:94:e3:3f:66:a3:da:c8:be:7a:ec: e7:63:76:8a:95:8b:f8:59:87:6c:e5:1e:0a:10:69: 97:f5:6e:55:3d:b1:1c:d0:a3:fa:ad:e9:e1:f1:41: e9:00:93:78:ed:43:f2:bc:81:37:25:7a:6f:30:1e: c8:a0:61:06:a7:8a:90:cf:70:c2:79:94:86:79:80: 3a:0b:a3:ac:64:aa:e6:3e:f1:9a:35:92:78:7d:fe: 18:bd:0f:39:23:e7:06:f9:9b:f3:f7:ab:c2:47:94: 40:35:2d:41:dd:be:6c:47:f2:ee:0f:9d:44:eb:ec: 1e:2a:5c:69:82:59:fc:90:35:c6:37:9a:9f:ab:c2: ef:a8:53:1e:3b:d4:26:62:5d:db:cc:fb:1a:7b:9c: 95:0b:c0:e5:a8:fb:c8:df:dd:07:37:8f:c6:49:ac: 1e:33:3c:8f:e0:83:50:41:6b:2b:29:9f:0f:bb:ff: 2d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2B:3C:F3:BF:12:43:21:79:66:BD:AC:81:23:31:21:CF:35:D4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/152d5f6f-78f2-31d9-8757-11d8cefc505c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.62.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:11:fb:c0:9f:19:3d:e7:ad:1e:a3:71:f5:eb:4a:b4:42:85: ae:54:7d:c5:93:84:47:6f:8b:20:66:ff:fe:b1:33:1c:44:06: 84:d6:a7:92:6c:c5:c5:ac:bf:8a:42:3d:e8:78:1c:c7:77:b7: a7:0f:17:c7:d0:77:3d:29:97:a5:77:80:5b:08:27:54:ee:81: a1:95:e5:3a:24:d5:13:50:f3:f1:02:6a:a4:da:73:c0:1c:96: 37:33:f5:18:26:6c:df:eb:ab:1e:70:4e:31:02:57:80:38:9d: af:ae:d4:dd:ab:02:cd:13:07:88:9e:fb:64:cc:e0:2c:75:0b: 8f:9b:18:4a:07:a5:46:b7:c6:14:10:f8:d4:b5:af:99:2f:d1: 45:6b:9f:2f:5f:c2:79:17:0a:4a:a4:d3:25:75:ed:2c:3d:eb: 98:d2:9a:da:be:c0:19:0f:ce:50:04:23:6e:1e:b4:a4:fb:20: 1b:56:7f:19:91:da:f0:05:09:74:d2:a8:72:d1:9b:08:3d:ac: c4:3d:8d:8c:1e:5a:d1:b1:1c:84:86:5e:5b:f4:e0:7c:2b:d9: 8f:30:02:29:75:aa:8a:74:8b:bb:ad:7b:33:e2:eb:5a:07:8f: 84:12:b7:d7:21:b5:bc:57:64:f0:b8:65:0b:e0:9b:3e:20:e4: ef:6b:5d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl8PvUa2N7yGeYAkoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMTAxMDA0OFoXDTI1MDcxMDAxMDA0OFowLzEtMCsGA1UEAxMk ZDRkNjkyYjQtNDUzNi00NDFlLWE1YmUtNGUxYWNjZjlmNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZp61N/8JtVCYpN75D0MFxfP0rJYALWWQbYP T/wghfkYpFt97m8CNqh+bpci6RZXdifZmkfy3RPCagFHC0YjPVB4qtXrpcb5sq/d WFyBb5TjP2aj2si+euznY3aKlYv4WYds5R4KEGmX9W5VPbEc0KP6renh8UHpAJN4 7UPyvIE3JXpvMB7IoGEGp4qQz3DCeZSGeYA6C6OsZKrmPvGaNZJ4ff4YvQ85I+cG +Zvz96vCR5RANS1B3b5sR/LuD51E6+weKlxpgln8kDXGN5qfq8LvqFMeO9QmYl3b zPsae5yVC8DlqPvI390HN4/GSaweMzyP4INQQWsrKZ8Pu/8tRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8rPPO/EkMheWa9rIEjMSHPNdSxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTUyZDVmNmYtNzhmMi0z MWQ5LTg3NTctMTFkOGNlZmM1MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQz5YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsR+8CfGT3nrR6jcfXrSrRCha5UfcWThEdviyBm//6xMxxEBoTWp5Js xcWsv4pCPeh4HMd3t6cPF8fQdz0pl6V3gFsIJ1TugaGV5Tok1RNQ8/ECaqTac8Ac ljcz9RgmbN/rqx5wTjECV4A4na+u1N2rAs0TB4ie+2TM4Cx1C4+bGEoHpUa3xhQQ +NS1r5kv0UVrny9fwnkXCkqk0yV17Sw965jSmtq+wBkPzlAEI24etKT7IBtWfxmR 2vAFCXTSqHLRmwg9rMQ9jYweWtGxHISGXlv04Hwr2Y8wAil1qop0i7utezPi61oH j4QSt9chtbxXZPC4ZQvgmz4g5O9rXTo= -----END CERTIFICATE-----Generated at Sun Apr 27 10:29:56 2025 by rpki-client