$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa File: d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa (raw, json) Hash identifier: 6vAlO7773XwgZW60g19W1h91mYJgXVWGzDGambZbacY= Subject key identifier: 6F:01:F2:5C:17:E9:29:AD:A4:3C:0A:B0:C8:77:AB:02:2B:2D:75:24 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B860109557562B870480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 151.213.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b8:60:10:95:57:56:2b:87:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=429bb00c-840d-46a3-a121-f946051d973b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:95:5a:48:d6:18:0c:74:e8:6f:e3:f3:76:95: f9:8e:30:dc:6f:8d:e3:e6:3a:ad:1e:9e:59:5b:bc: 9a:1b:ae:24:49:ca:15:d2:39:d7:55:b0:b3:32:9c: 71:99:dd:9a:97:f2:bb:57:f1:55:aa:36:a0:49:a5: f8:b4:7f:80:23:8b:8a:c1:fd:06:e8:7f:3e:1f:ae: 49:84:cc:7f:a2:10:52:60:85:96:c0:4f:ac:15:c8: 1f:fb:eb:14:f8:99:5c:a8:86:66:ff:6c:29:a7:4d: 9b:1d:39:2e:bf:d9:a6:f9:0e:0c:59:5c:aa:95:5f: 35:f2:10:f6:16:80:6f:e6:de:2d:68:c3:0f:64:f9: 87:99:ba:9c:b2:7e:05:7e:28:1c:b7:25:96:7f:3e: 38:31:2e:0c:3c:d8:b8:16:cc:5e:57:57:51:ca:05: 8b:ea:05:70:a1:45:d5:86:0e:e3:91:2e:48:b8:f2: 84:be:7c:17:17:2f:7d:ae:7c:e7:9f:71:71:13:05: 5c:2b:cc:a4:ba:4f:0e:b6:ee:74:82:56:45:08:53: 43:6a:b4:df:8d:ac:5f:d8:f8:7e:c8:cd:09:14:48: 80:21:a7:69:29:c7:52:0a:8f:c8:d5:53:97:78:a7: b7:56:20:ae:ed:2f:e8:60:40:db:97:91:9f:3f:d3: 5c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:01:F2:5C:17:E9:29:AD:A4:3C:0A:B0:C8:77:AB:02:2B:2D:75:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:25:67:0f:61:e5:a1:95:3c:45:38:9f:b5:73:6f:c9:79:c2: 4e:66:bd:de:76:ff:6c:9e:b2:6d:b5:31:1c:49:5b:88:dd:42: df:b8:cb:86:90:aa:fc:c9:9b:d2:22:2a:ca:2d:70:a9:4f:8a: 24:6e:a1:81:a1:f6:d1:0c:b2:57:db:4b:5b:ac:cb:1f:da:14: 0d:29:75:50:35:c2:49:1d:4a:d4:0c:87:5e:cb:21:a1:28:1b: f1:d8:42:10:77:79:9a:a1:30:5c:ed:d0:61:af:77:11:0b:b5: a8:65:5b:02:15:41:2b:21:68:86:73:97:92:c2:20:6a:9a:bb: c1:cc:b8:ca:89:da:4d:21:cf:d4:31:f0:68:bb:0a:e4:5b:1b: 1a:12:0e:b5:f3:cd:a8:65:3a:72:8d:3a:d0:cb:5c:93:32:d6: 8c:bf:97:49:ff:75:13:32:d4:09:8e:a2:61:8d:dc:35:5a:b7: 80:8c:7e:b0:d5:5a:06:da:78:71:39:5d:6a:0e:fb:9a:18:92: d0:57:74:ac:ea:6a:88:ca:ea:b5:56:b7:f9:25:27:3c:40:bd: d7:76:d5:45:76:d1:f4:61:9e:79:78:42:46:95:87:37:87:8c: 5f:71:b9:ac:19:db:74:ff:6a:a9:c8:0a:8b:0b:05:df:70:be: 9e:10:af:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbhgEJVXViuHBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk NDI5YmIwMGMtODQwZC00NmEzLWExMjEtZjk0NjA1MWQ5NzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJVaSNYYDHTob+PzdpX5jjDcb43j5jqtHp5Z W7yaG64kScoV0jnXVbCzMpxxmd2al/K7V/FVqjagSaX4tH+AI4uKwf0G6H8+H65J hMx/ohBSYIWWwE+sFcgf++sU+JlcqIZm/2wpp02bHTkuv9mm+Q4MWVyqlV818hD2 FoBv5t4taMMPZPmHmbqcsn4FfigctyWWfz44MS4MPNi4FsxeV1dRygWL6gVwoUXV hg7jkS5IuPKEvnwXFy99rnznn3FxEwVcK8ykuk8Otu50glZFCFNDarTfjaxf2Ph+ yM0JFEiAIadpKcdSCo/I1VOXeKe3ViCu7S/oYEDbl5GfP9NcOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8B8lwX6SmtpDwKsMh3qwIrLXUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDczYTBhMmEtOTkzMy0z Y2Q1LWIyODktYzdlYjJmODA1YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9VIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8lZw9h5aGVPEU4n7Vzb8l5wk5mvd52/2yesm21MRxJW4jdQt+4y4aQ qvzJm9IiKsotcKlPiiRuoYGh9tEMslfbS1usyx/aFA0pdVA1wkkdStQMh17LIaEo G/HYQhB3eZqhMFzt0GGvdxELtahlWwIVQSshaIZzl5LCIGqau8HMuMqJ2k0hz9Qx 8Gi7CuRbGxoSDrXzzahlOnKNOtDLXJMy1oy/l0n/dRMy1AmOomGN3DVat4CMfrDV WgbaeHE5XWoO+5oYktBXdKzqaojK6rVWt/klJzxAvdd21UV20fRhnnl4QkaVhzeH jF9xuawZ23T/aqnICosLBd9wvp4Qrwc= -----END CERTIFICATE-----Generated at Mon Apr 28 14:26:06 2025 by rpki-client