$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa File: 9318fe24-60e4-3b51-8fce-61b094e34012.roa (raw, json) Hash identifier: JrY54EYUvydr4ngfevA4UxoHp4FQJp/Gk7ekqs4DyoM= Subject key identifier: 15:F1:B5:E1:57:84:0A:A0:BF:1C:A4:25:4C:09:B1:64:A1:67:92:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F09A0F2136318DAFDB9BC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 208.101.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a0:f2:13:63:18:da:fd:b9:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=f3c49d1a-80da-4b0a-a9e3-86ee66295d3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c7:d6:0c:39:1d:80:a7:f9:f1:a1:1f:90:bf: e5:17:b1:4c:06:1e:ef:e9:6d:f3:31:41:21:94:2e: 2b:6a:c1:94:d0:fa:2e:a9:73:43:cd:99:06:58:72: da:02:16:ff:cc:fc:36:0d:65:ad:3c:3a:b9:ca:2e: aa:e1:fa:98:9c:58:21:c0:dc:91:c3:28:4e:ff:82: 81:1e:ba:5d:ec:75:60:05:c4:93:b8:3d:11:26:b9: 23:94:e5:26:1e:e2:4a:36:c3:1e:e1:4c:10:1b:ad: 4b:ac:40:a5:bb:8c:e5:4f:b7:43:6b:c3:7f:3d:0f: e5:54:d4:90:3e:c4:44:aa:f7:d9:c9:38:34:81:f1: 91:5a:d8:37:60:38:b1:1d:b9:02:43:0f:24:4a:f8: b4:32:8f:30:14:46:d3:50:e5:dc:c8:22:b9:51:19: a6:42:90:3e:47:a9:e5:d0:01:15:2c:93:b4:e4:2c: ac:d5:5d:90:d1:2c:94:a1:fc:ec:27:4b:f3:0d:7c: b6:c7:36:24:aa:e2:7a:94:37:d1:c1:65:aa:90:92: 83:2a:d4:5c:b7:dc:24:e4:89:8b:a7:56:66:7f:a9: 6b:48:da:f2:a5:ce:8d:5e:c3:dc:e8:a8:42:a0:e3: 8b:e5:83:43:fd:ed:47:95:46:65:61:1b:98:b0:9e: fa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F1:B5:E1:57:84:0A:A0:BF:1C:A4:25:4C:09:B1:64:A1:67:92:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9318fe24-60e4-3b51-8fce-61b094e34012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 208.101.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:26:da:5c:26:55:6b:8b:1f:98:02:86:bc:f3:4c:5c:48:19: 41:a8:db:9f:6e:fb:4a:99:62:d9:60:53:f6:e5:80:96:7b:99: 8a:53:25:61:b5:59:88:dc:d0:8c:a0:52:93:2f:66:c7:6c:fd: 16:30:dc:c0:e3:ed:d3:42:b0:f5:ed:a8:36:d9:92:cd:94:16: 4c:c9:b3:1f:0e:a9:65:66:b9:8e:af:f2:10:b0:dd:93:a7:f4: 07:e5:2a:bc:0d:e4:66:6e:f5:ff:21:e7:98:a9:a0:d5:6f:b2: 52:45:77:96:6a:1e:e5:08:5f:f3:5f:ef:4c:7d:da:42:39:10: 9c:9b:17:64:d6:83:60:91:01:ed:ab:c6:f3:f1:04:41:6b:75: 29:a7:67:a3:15:83:7c:d2:aa:f6:08:da:e0:5c:53:15:c3:e5: 90:a6:72:97:30:ca:73:7e:fb:de:d3:4c:21:79:5c:c8:79:1c: f2:56:db:07:06:9b:cd:cc:2f:5b:a2:16:f0:5a:ef:e6:7e:4d: 97:ef:87:b7:44:26:2c:2b:2c:9d:06:68:85:48:99:26:8f:74: 64:66:e9:b4:d5:29:af:c3:b2:5f:9e:34:d5:dc:3b:8f:34:27: 81:73:4e:84:aa:68:e2:ce:80:db:cb:01:d0:1d:38:22:3d:8d: 6c:3f:1a:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaDyE2MY2v25vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk ZjNjNDlkMWEtODBkYS00YjBhLWE5ZTMtODZlZTY2Mjk1ZDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMfWDDkdgKf58aEfkL/lF7FMBh7v6W3zMUEh lC4rasGU0PouqXNDzZkGWHLaAhb/zPw2DWWtPDq5yi6q4fqYnFghwNyRwyhO/4KB Hrpd7HVgBcSTuD0RJrkjlOUmHuJKNsMe4UwQG61LrEClu4zlT7dDa8N/PQ/lVNSQ PsREqvfZyTg0gfGRWtg3YDixHbkCQw8kSvi0Mo8wFEbTUOXcyCK5URmmQpA+R6nl 0AEVLJO05Cys1V2Q0SyUofzsJ0vzDXy2xzYkquJ6lDfRwWWqkJKDKtRct9wk5ImL p1Zmf6lrSNrypc6NXsPc6KhCoOOL5YND/e1HlUZlYRuYsJ76dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXxteFXhAqgvxykJUwJsWShZ5I8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTMxOGZlMjQtNjBlNC0z YjUxLThmY2UtNjFiMDk0ZTM0MDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GWKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0m2lwmVWuLH5gChrzzTFxIGUGo259u+0qZYtlgU/blgJZ7mYpTJWG1 WYjc0IygUpMvZsds/RYw3MDj7dNCsPXtqDbZks2UFkzJsx8OqWVmuY6v8hCw3ZOn 9AflKrwN5GZu9f8h55ipoNVvslJFd5ZqHuUIX/Nf70x92kI5EJybF2TWg2CRAe2r xvPxBEFrdSmnZ6MVg3zSqvYI2uBcUxXD5ZCmcpcwynN++97TTCF5XMh5HPJW2wcG m83ML1uiFvBa7+Z+TZfvh7dEJiwrLJ0GaIVImSaPdGRm6bTVKa/Dsl+eNNXcO480 J4FzToSqaOLOgNvLAdAdOCI9jWw/GpU= -----END CERTIFICATE-----Generated at Sun Apr 27 09:17:45 2025 by rpki-client