$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa File: dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa (raw, json) Hash identifier: ZyQVRbWAs5x+Ch7KqcGylStYr/01aBszuAjzWQ9FgXk= Subject key identifier: 77:EF:65:4C:65:71:CA:BB:C6:11:28:2C:14:53:C6:88:29:29:1C:F6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D431CE3C1FC416B381A0E6C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 67.224.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:ce:3c:1f:c4:16:b3:81:a0:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=928b2dc3-e468-4626-bf47-6d294580d572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:5c:c6:3c:6c:5d:c7:9a:91:9f:46:16:30: f3:08:78:e2:ca:c6:04:13:a1:d5:e9:b5:f3:40:a9: e7:af:1f:fa:bd:f7:f9:a6:be:55:25:62:3f:f5:c1: c9:ee:65:a0:fd:cb:be:e5:6f:74:69:96:dd:e0:57: a3:b4:9d:89:c7:b7:b9:79:72:1a:88:b1:c6:47:43: 5c:83:70:9d:bc:68:62:98:ed:c9:ba:7e:ac:51:47: c1:ae:b1:03:fa:37:29:14:4e:fb:4c:fa:d0:77:cb: 47:dd:1f:f5:2f:86:12:3f:c3:b4:92:c2:5f:e4:03: f0:d3:69:e0:cd:43:af:cf:f7:de:5d:17:e6:17:ca: 44:04:57:19:3e:00:33:3f:8d:ef:fe:69:5c:da:c2: 3b:8f:07:f0:ee:4e:b3:9b:df:a2:25:08:5e:47:8d: ad:49:c6:32:26:18:a9:d5:2c:56:ea:64:d8:17:80: f7:30:94:93:08:ad:fc:0f:d3:4b:32:cc:63:b2:00: d5:a6:79:96:1c:67:23:e2:d2:65:21:64:42:1e:bb: 38:39:b4:93:d2:22:3f:f3:5e:6a:29:1a:39:8b:21: 10:8a:b9:f3:58:e9:b3:b8:a3:5e:ca:f2:ab:b5:fb: 33:60:71:31:8c:e3:f7:15:74:99:cd:6f:62:7a:9a: 45:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:EF:65:4C:65:71:CA:BB:C6:11:28:2C:14:53:C6:88:29:29:1C:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad1fc82-f0ec-3e75-b6ac-dbf795bd0bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.224.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:7d:0d:7a:62:db:10:f7:47:3c:d8:26:b8:61:5f:55:40:7b: d3:0b:6f:64:0d:d5:04:54:09:53:e3:f3:3c:03:27:d9:cf:d5: 55:0d:3c:1c:7d:1d:2e:06:e1:5a:f3:f8:7d:83:ec:9b:f7:03: db:81:29:35:64:8f:e5:87:86:4c:63:e5:c3:c9:69:97:e3:d8: e5:2d:0a:d4:fc:4e:0c:a5:23:8b:53:63:18:46:d5:92:57:0f: 7b:e9:48:0e:86:8b:0e:9c:e2:24:17:e8:0e:76:eb:21:03:73: 86:fb:61:24:d8:47:0d:34:f4:c5:cf:de:94:3e:78:38:77:68: 20:b5:09:18:6f:57:60:cc:82:9c:dd:dc:bd:57:4e:ea:73:cf: 91:7d:a0:3d:d3:d1:f7:4f:c7:5a:de:4c:a7:cb:eb:3e:8a:fb: 9d:85:2a:cf:f2:f0:38:ca:36:aa:8a:de:76:dc:1c:e3:db:27: c8:95:a8:d4:02:ee:91:9e:73:92:0d:24:fc:ec:be:b6:8d:3a: 3e:41:2b:f7:6e:fe:61:89:a4:66:de:60:7b:25:a3:f1:40:36: 96:ad:00:42:51:4a:ea:e3:11:34:2a:8a:49:a7:36:b1:bd:49: aa:e4:83:11:b8:36:d9:50:9a:1b:e4:81:8f:84:66:3c:6d:28: 12:b7:8b:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMc48H8QWs4Gg5sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTI4YjJkYzMtZTQ2OC00NjI2LWJmNDctNmQyOTQ1ODBkNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvx1cxjxsXceakZ9GFjDzCHjiysYEE6HV6bXz QKnnrx/6vff5pr5VJWI/9cHJ7mWg/cu+5W90aZbd4FejtJ2Jx7e5eXIaiLHGR0Nc g3CdvGhimO3Jun6sUUfBrrED+jcpFE77TPrQd8tH3R/1L4YSP8O0ksJf5APw02ng zUOvz/feXRfmF8pEBFcZPgAzP43v/mlc2sI7jwfw7k6zm9+iJQheR42tScYyJhip 1SxW6mTYF4D3MJSTCK38D9NLMsxjsgDVpnmWHGcj4tJlIWRCHrs4ObST0iI/815q KRo5iyEQirnzWOmzuKNeyvKrtfszYHExjOP3FXSZzW9ieppFZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHfvZUxlccq7xhEoLBRTxogpKRz2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFkMWZjODItZjBlYy0z ZTc1LWI2YWMtZGJmNzk1YmQwYmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ+AwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI19DXpi2xD3RzzYJrhhX1VAe9MLb2QN1QRUCVPj8zwDJ9nP1VUNPBx9 HS4G4Vrz+H2D7Jv3A9uBKTVkj+WHhkxj5cPJaZfj2OUtCtT8TgylI4tTYxhG1ZJX D3vpSA6Giw6c4iQX6A526yEDc4b7YSTYRw009MXP3pQ+eDh3aCC1CRhvV2DMgpzd 3L1XTupzz5F9oD3T0fdPx1reTKfL6z6K+52FKs/y8DjKNqqK3nbcHOPbJ8iVqNQC 7pGec5INJPzsvraNOj5BK/du/mGJpGbeYHslo/FANpatAEJRSurjETQqikmnNrG9 SarkgxG4NtlQmhvkgY+EZjxtKBK3i3A= -----END CERTIFICATE-----Generated at Sun Jun 15 11:10:43 2025 by rpki-client