$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60132f95-7bee-3e5b-ad2f-16bda476f21f.roa File: 60132f95-7bee-3e5b-ad2f-16bda476f21f.roa (raw, json) Hash identifier: oed083Wzg9SthvW9Sqd7JMUufPCZDsZxWpDNjoCncaw= Subject key identifier: AE:06:D8:03:62:93:BF:D3:AC:8D:EF:83:CB:C9:75:08:88:5C:52:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A181717AE4D51092099BC5BC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60132f95-7bee-3e5b-ad2f-16bda476f21f.roa Signing time: Thu 05 Jun 2025 20:46:41 +0000 ROA not before: Thu 05 Jun 2025 20:46:41 +0000 ROA not after: Wed 03 Sep 2025 20:46:41 +0000 asID: 0 IP address blocks: 67.158.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:17:17:ae:4d:51:09:20:99:bc:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 5 20:46:41 2025 GMT Not After : Sep 3 20:46:41 2025 GMT Subject: CN=b1a54755-97cd-4fa1-ab26-e3da8d0f410b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:52:03:e2:40:f2:5f:0a:be:20:d7:a6:8d: eb:58:e4:33:dc:39:e0:a7:1d:8f:56:ae:ec:97:cd: 9c:63:32:23:0a:30:16:77:18:18:16:ea:1f:60:4e: 55:91:46:53:c6:ae:96:e3:ee:be:8c:07:e2:57:65: 96:92:16:df:3d:48:26:54:c8:2a:87:41:ba:bd:fa: 23:42:98:52:ef:1a:2b:18:39:e9:44:0a:cf:d6:2f: 61:32:e7:41:f6:8d:b3:fb:b2:cf:b9:7d:66:a8:e2: c4:21:4c:69:f5:bd:99:13:11:74:0c:54:1f:34:0f: 07:56:05:12:df:dc:7a:57:8d:b5:db:a1:41:ea:cd: 14:2e:39:5a:18:f2:ed:e3:ea:4a:de:b6:a8:73:43: 4c:7a:c1:ff:69:9f:2a:c9:d6:fd:9b:88:a5:58:24: 70:53:1a:21:6f:1b:d4:ba:90:58:e6:59:f2:33:19: 40:3d:14:b9:48:e8:1c:e6:bf:ba:ac:9f:02:fa:2d: 4d:39:b6:06:69:7a:c8:c4:b4:63:c6:71:16:b9:26: f3:fa:c3:e6:6f:2e:b7:f7:98:49:d7:cb:f8:a4:e4: 8e:b1:db:7e:4b:04:a6:a6:c1:27:19:28:97:05:46: e2:3a:5e:fb:b5:e2:9f:c1:57:b2:b1:8b:e9:d9:e3: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:06:D8:03:62:93:BF:D3:AC:8D:EF:83:CB:C9:75:08:88:5C:52:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60132f95-7bee-3e5b-ad2f-16bda476f21f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.158.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:4b:73:d0:bc:58:64:03:7e:e4:60:c1:6b:5e:10:41:33:8e: 3e:31:f1:f2:67:20:0a:a9:62:15:c7:e9:94:1e:15:e2:be:19: d3:80:75:9c:f0:43:dd:16:73:d0:5a:b1:f9:89:83:4f:09:4e: f5:fd:86:61:86:7e:c8:04:17:94:5d:3f:de:33:9e:c0:dd:02: bd:8b:c1:2e:b7:6e:9e:3d:74:d3:2f:2e:3d:8b:0d:9f:d6:16: da:af:5e:0f:19:47:86:25:fd:84:e9:13:52:91:f3:11:b2:df: 03:ce:7b:14:a0:4b:66:b4:38:e6:1b:fd:af:7f:28:da:b0:b8: 1a:27:70:4d:c2:fc:80:dd:6a:3e:17:8e:8f:73:e1:af:ed:24: 6d:e5:5a:a2:e7:49:1e:a6:a3:b8:e1:f2:c0:e1:86:a2:41:5b: 2b:dd:b7:7d:fb:30:de:d9:bd:ad:13:c3:19:c9:9a:fc:1e:01: d5:05:7c:b2:05:3d:70:f2:fd:ab:dd:39:a1:4b:26:92:88:6f: 3c:68:ed:b9:d4:5f:db:0b:23:ed:41:73:cb:05:62:4a:5a:21: 76:c1:e9:91:fa:da:3e:5b:6b:da:45:8f:7a:25:0e:5e:1d:af: c1:92:a4:8c:37:3c:c8:a5:a4:9d:99:df:d9:0d:5d:0c:54:31: 4a:f5:39:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYFxeuTVEJIJm8W8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYwNTIwNDY0MVoXDTI1MDkwMzIwNDY0MVowLzEtMCsGA1UEAxMk YjFhNTQ3NTUtOTdjZC00ZmExLWFiMjYtZTNkYThkMGY0MTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8hSA+JA8l8KviDXpo3rWOQz3Dngpx2PVq7s l82cYzIjCjAWdxgYFuofYE5VkUZTxq6W4+6+jAfiV2WWkhbfPUgmVMgqh0G6vfoj QphS7xorGDnpRArP1i9hMudB9o2z+7LPuX1mqOLEIUxp9b2ZExF0DFQfNA8HVgUS 39x6V42126FB6s0ULjlaGPLt4+pK3raoc0NMesH/aZ8qydb9m4ilWCRwUxohbxvU upBY5lnyMxlAPRS5SOgc5r+6rJ8C+i1NObYGaXrIxLRjxnEWuSbz+sPmby6395hJ 18v4pOSOsdt+SwSmpsEnGSiXBUbiOl77teKfwVeysYvp2eOriwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4G2ANik7/TrI3vg8vJdQiIXFJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjAxMzJmOTUtN2JlZS0z ZTViLWFkMmYtMTZiZGE0NzZmMjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQ55gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVLc9C8WGQDfuRgwWteEEEzjj4x8fJnIAqpYhXH6ZQeFeK+GdOAdZzw Q90Wc9BasfmJg08JTvX9hmGGfsgEF5RdP94znsDdAr2LwS63bp49dNMvLj2LDZ/W FtqvXg8ZR4Yl/YTpE1KR8xGy3wPOexSgS2a0OOYb/a9/KNqwuBoncE3C/IDdaj4X jo9z4a/tJG3lWqLnSR6mo7jh8sDhhqJBWyvdt337MN7Zva0TwxnJmvweAdUFfLIF PXDy/avdOaFLJpKIbzxo7bnUX9sLI+1Bc8sFYkpaIXbB6ZH62j5ba9pFj3olDl4d r8GSpIw3PMilpJ2Z39kNXQxUMUr1OQ0= -----END CERTIFICATE-----Generated at Sun Jun 15 13:21:10 2025 by rpki-client