$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a2636ec-0161-397f-8ac9-6d548fb061b4.roa File: 1a2636ec-0161-397f-8ac9-6d548fb061b4.roa (raw, json) Hash identifier: IBTJgycEPRMKzUlQ5HMykrCD0CYQs5KmXmTU6df7uSU= Subject key identifier: 3A:99:C8:C4:2F:87:EF:0C:AF:53:C8:EA:80:72:15:5D:79:60:A9:80 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849780F197FDE253CE88DD8CC00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a2636ec-0161-397f-8ac9-6d548fb061b4.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 67.140.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:19:7f:de:25:3c:e8:8d:d8:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=181f33c8-13f5-4052-9b15-3945cdc4ae73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:31:36:1c:f0:96:d4:cb:b6:49:cd:73:94:96: 70:8b:04:db:6a:83:4d:6c:c3:65:e4:3f:1b:4c:d3: cf:81:3c:3c:12:35:3b:fc:94:9d:5d:f5:bb:01:98: 4e:ad:d0:80:62:5b:1b:82:67:d7:a0:e9:a2:46:a8: c6:66:b1:b2:26:8c:e3:43:b9:68:43:fb:d7:1a:10: 18:27:4f:15:07:b3:fb:bb:bf:fc:8f:cd:9b:1f:b7: 95:42:6d:13:e4:19:76:24:63:4e:d6:a7:b4:74:83: 02:e2:80:75:c5:c7:64:d0:69:04:f7:03:8a:b2:ef: 60:3c:c3:10:f4:4d:c5:91:16:97:b8:7d:f1:e8:36: 7b:89:19:14:78:3a:96:6d:e5:b0:98:98:27:2d:1e: e2:53:7a:6b:ae:fa:97:c4:a4:c7:5e:41:76:c4:27: 6a:e5:5d:85:f0:78:17:72:87:01:98:83:68:17:b3: 6e:74:48:c3:3a:7f:48:d3:fc:c6:00:6e:2a:f8:83: d2:b8:40:8c:15:41:c2:18:0d:60:ae:4b:a2:2f:1e: 19:67:4a:3f:81:8e:9b:7c:ed:ff:3d:a7:b3:fa:5c: 67:f7:28:68:c1:d7:6c:31:5e:dd:37:92:7d:d5:fb: 5c:a9:aa:69:6e:a8:fb:25:ff:eb:b8:74:85:9e:35: 84:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:99:C8:C4:2F:87:EF:0C:AF:53:C8:EA:80:72:15:5D:79:60:A9:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1a2636ec-0161-397f-8ac9-6d548fb061b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:38:ea:9b:c3:3d:e4:c5:3a:ad:71:c5:c3:1b:6f:8a:c1:e3: 8b:c2:66:b8:b4:b7:b6:91:ac:12:65:25:81:01:4b:9d:4a:4a: d9:ca:50:6c:8b:61:50:ef:e9:bb:6b:d0:00:2a:a8:a8:e6:a3: b4:04:02:3f:02:eb:cd:ae:f6:e7:9f:e4:b0:eb:d1:bf:37:5c: a4:b6:c3:5d:df:0a:30:f8:d8:ea:22:35:c5:dd:04:58:47:78: 94:34:30:ac:7c:7e:1b:a1:db:b3:f1:f2:cc:f9:27:cd:b0:ee: 6c:d2:67:c1:97:35:4b:45:30:d6:04:b0:eb:86:1b:b8:aa:b5: 1c:5e:bd:1c:7b:f6:b0:86:03:cb:26:63:42:c5:3d:16:c8:ca: 1b:c5:63:e5:76:44:b9:a5:8c:cf:97:4e:8c:5f:b2:6c:b0:de: 20:c7:35:08:02:a3:88:6e:6a:14:ff:15:35:01:83:c6:3f:19: c7:1b:56:8c:f6:b8:d2:1c:a1:3c:45:8a:24:1b:9e:fb:13:83: 8e:5a:8c:e8:f8:14:b4:06:35:fd:7c:ea:83:34:97:60:68:5e: 59:9e:c3:fc:a8:12:05:27:4f:20:2e:2c:66:ac:9a:54:50:d3: 95:c1:7b:47:a5:1c:20:07:ce:88:fa:a6:1b:94:9e:72:cd:8f: c7:54:99:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dxl/3iU86I3YzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk MTgxZjMzYzgtMTNmNS00MDUyLTliMTUtMzk0NWNkYzRhZTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjE2HPCW1Mu2Sc1zlJZwiwTbaoNNbMNl5D8b TNPPgTw8EjU7/JSdXfW7AZhOrdCAYlsbgmfXoOmiRqjGZrGyJozjQ7loQ/vXGhAY J08VB7P7u7/8j82bH7eVQm0T5Bl2JGNO1qe0dIMC4oB1xcdk0GkE9wOKsu9gPMMQ 9E3FkRaXuH3x6DZ7iRkUeDqWbeWwmJgnLR7iU3prrvqXxKTHXkF2xCdq5V2F8HgX cocBmINoF7NudEjDOn9I0/zGAG4q+IPSuECMFUHCGA1grkuiLx4ZZ0o/gY6bfO3/ Paez+lxn9yhowddsMV7dN5J91ftcqappbqj7Jf/ruHSFnjWE7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqZyMQvh+8Mr1PI6oByFV15YKmAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWEyNjM2ZWMtMDE2MS0z OTdmLThhYzktNmQ1NDhmYjA2MWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4xwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU46pvDPeTFOq1xxcMbb4rB44vCZri0t7aRrBJlJYEBS51KStnKUGyL YVDv6btr0AAqqKjmo7QEAj8C682u9uef5LDr0b83XKS2w13fCjD42OoiNcXdBFhH eJQ0MKx8fhuh27Px8sz5J82w7mzSZ8GXNUtFMNYEsOuGG7iqtRxevRx79rCGA8sm Y0LFPRbIyhvFY+V2RLmljM+XToxfsmyw3iDHNQgCo4huahT/FTUBg8Y/GccbVoz2 uNIcoTxFiiQbnvsTg45ajOj4FLQGNf186oM0l2BoXlmew/yoEgUnTyAuLGasmlRQ 05XBe0elHCAHzoj6phuUnnLNj8dUmSc= -----END CERTIFICATE-----Generated at Tue Apr 29 18:46:05 2025 by rpki-client