$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c74b819c-f044-31c4-9085-1a1c60182997.roa File: c74b819c-f044-31c4-9085-1a1c60182997.roa (raw, json) Hash identifier: rBoUBzbSCNJUFDVaMlG4Up4s1hriEvcB7YujYDHm6yo= Subject key identifier: 1B:72:B0:8D:BD:53:A0:B3:5C:A6:55:E8:84:4C:36:13:CA:15:D0:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B8D6C4D6EE86EE76BC40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c74b819c-f044-31c4-9085-1a1c60182997.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 162.40.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b8:d6:c4:d6:ee:86:ee:76:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=ce9e1704-799e-43a6-b1a6-56bf73ac704c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:a9:84:b0:5b:d1:c3:44:14:06:6e:92:86: c4:18:97:7c:24:d9:73:a6:74:1a:2b:15:36:a9:93: 23:ab:80:33:5c:45:b2:60:35:cf:38:b5:28:bd:e0: 4d:ba:3f:c4:7f:c1:a6:d9:55:16:03:ef:f6:a5:5b: 11:be:5f:9a:37:13:ff:bf:d9:2f:6e:aa:31:7e:94: c9:e6:1a:04:f3:a0:aa:1a:e8:f8:a0:f4:a4:3e:be: a0:41:4c:a8:34:a2:cd:ea:44:6e:53:82:2a:ff:01: 61:f8:aa:a2:23:cb:a5:b5:79:68:31:2d:b6:7f:e1: 5d:e6:06:86:51:9b:7b:c9:d3:48:dc:c0:4c:99:37: 72:11:4d:70:21:b5:ac:2c:d9:5f:cf:76:ad:a0:26: 49:73:a4:9f:f5:d7:9e:4d:9c:f4:6e:4f:be:25:01: bf:72:92:86:95:f0:58:90:02:0b:80:ce:d8:a0:7d: 4b:65:50:78:67:b4:3e:51:cb:dc:1b:6b:fd:60:f1: d2:f6:55:e0:50:f5:29:0f:da:79:64:32:7d:1c:40: 5e:08:ec:07:a1:f6:54:ee:bc:8c:5b:81:85:19:0c: 44:d2:8e:82:f6:88:08:26:bd:58:74:0e:1f:7b:c5: 33:e4:1b:41:dc:03:09:2d:d3:a6:14:eb:c1:1c:bb: af:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:72:B0:8D:BD:53:A0:B3:5C:A6:55:E8:84:4C:36:13:CA:15:D0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c74b819c-f044-31c4-9085-1a1c60182997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:aa:f1:37:41:9f:dd:f7:22:ad:6b:46:26:4b:10:59:04:9a: 3e:00:41:eb:d1:c9:9f:95:3f:b4:4a:5f:31:6d:62:b5:64:7c: 6b:6f:81:70:7b:79:a6:e2:56:0a:e9:28:ee:96:d8:66:d2:16: 3b:4b:95:da:41:7d:ff:1c:e6:32:be:ac:5e:1f:f5:87:de:69: df:0e:b2:71:7a:66:be:5d:4e:b0:6d:a3:92:93:56:45:10:25: fc:fd:b2:3d:8a:b0:4c:39:5e:0e:51:f5:55:c8:7c:11:85:9e: 5e:5c:53:17:24:1b:b4:f4:b6:20:ee:3c:0e:fd:dd:9b:0e:dd: 14:14:ae:8e:26:84:d0:b1:80:c7:2a:8e:0c:ad:f7:4f:39:2a: 9b:13:51:97:a3:4a:e3:fb:fb:6b:2a:a4:35:77:1c:7d:43:90: af:09:47:4f:36:15:3b:20:07:96:4b:0a:ec:7e:73:75:5b:32: 83:9d:4a:6c:45:f0:e9:9e:21:6d:b5:2d:11:71:81:6f:94:60: ec:1e:62:ae:b9:c8:ce:18:1f:5f:57:90:f5:56:95:3e:d4:4d: 29:7c:d5:e1:0b:d4:f4:44:6f:b8:25:77:9b:a6:1b:d5:58:ad: d7:11:00:e7:65:e2:2c:0f:3f:4e:6b:c0:f1:01:32:33:87:00: a2:b0:15:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbjWxNbuhu52vEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk Y2U5ZTE3MDQtNzk5ZS00M2E2LWIxYTYtNTZiZjczYWM3MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV2phLBb0cNEFAZukobEGJd8JNlzpnQaKxU2 qZMjq4AzXEWyYDXPOLUoveBNuj/Ef8Gm2VUWA+/2pVsRvl+aNxP/v9kvbqoxfpTJ 5hoE86CqGuj4oPSkPr6gQUyoNKLN6kRuU4Iq/wFh+KqiI8ultXloMS22f+Fd5gaG UZt7ydNI3MBMmTdyEU1wIbWsLNlfz3atoCZJc6Sf9deeTZz0bk++JQG/cpKGlfBY kAILgM7YoH1LZVB4Z7Q+UcvcG2v9YPHS9lXgUPUpD9p5ZDJ9HEBeCOwHofZU7ryM W4GFGQxE0o6C9ogIJr1YdA4fe8Uz5BtB3AMJLdOmFOvBHLuvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtysI29U6CzXKZV6IRMNhPKFdDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzc0YjgxOWMtZjA0NC0z MWM0LTkwODUtMWExYzYwMTgyOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoihAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGq8TdBn933Iq1rRiZLEFkEmj4AQevRyZ+VP7RKXzFtYrVkfGtvgXB7 eabiVgrpKO6W2GbSFjtLldpBff8c5jK+rF4f9Yfead8OsnF6Zr5dTrBto5KTVkUQ Jfz9sj2KsEw5Xg5R9VXIfBGFnl5cUxckG7T0tiDuPA793ZsO3RQUro4mhNCxgMcq jgyt9085KpsTUZejSuP7+2sqpDV3HH1DkK8JR082FTsgB5ZLCux+c3VbMoOdSmxF 8OmeIW21LRFxgW+UYOweYq65yM4YH19XkPVWlT7UTSl81eEL1PREb7gld5umG9VY rdcRAOdl4iwPP05rwPEBMjOHAKKwFSU= -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:38 2025 by rpki-client