$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0effca6-ccf9-31f3-96fc-45c506d0930c.roa File: e0effca6-ccf9-31f3-96fc-45c506d0930c.roa (raw, json) Hash identifier: 6C30cp7uLdgEG2gl9UdUzkakKIMZ8IPODmwQHJx16wo= Subject key identifier: D4:84:53:39:49:CC:D0:CC:09:A3:7C:45:06:D0:57:BD:2A:40:32:7F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA209264F4C002E11B4000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0effca6-ccf9-31f3-96fc-45c506d0930c.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 71.28.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:20:92:64:f4:c0:02:e1:1b:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=12374b62-ceef-4be7-8b91-b69724defbaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:98:21:8f:aa:29:f5:d6:40:3a:e0:63:77:b0: 09:70:93:c3:6e:92:0d:59:50:be:94:ea:9d:3a:b7: 20:ee:7a:f3:6b:2d:d5:da:23:b1:23:5f:41:f7:e6: 7b:30:48:75:2d:5f:e1:4a:38:03:c5:5e:7e:b2:7a: 08:27:1c:75:08:7c:f4:0b:e0:9e:10:c5:53:90:25: 74:a1:23:8b:ce:c4:f3:c3:20:be:83:29:da:a4:3b: 35:d5:0c:3d:8c:1e:c2:9f:a1:41:0c:5a:62:f7:cd: 56:b5:7e:f9:9b:e0:b8:a3:a0:fe:d6:03:a8:ac:aa: 1b:70:71:6a:79:01:78:b1:6d:1e:e8:b2:8b:df:a6: 92:b4:46:47:36:26:ef:e1:55:a2:0c:53:53:01:54: fa:db:20:94:17:d6:7b:07:48:8b:28:ba:40:82:43: e8:55:ed:4a:69:ef:3c:e8:51:91:85:4d:46:cd:78: 5a:d3:ad:ae:69:bb:7b:58:4a:0a:ab:cd:02:47:7d: 7e:5f:b4:46:0b:93:c5:76:d6:bd:37:6e:d1:23:e1: af:c6:be:59:b3:77:ed:a6:c3:49:38:6a:a1:59:f9: c4:9c:ff:0a:0a:ee:15:45:6e:a7:2b:a1:be:41:0d: 89:8f:37:00:37:f6:b1:8a:70:53:43:c8:9f:99:84: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:84:53:39:49:CC:D0:CC:09:A3:7C:45:06:D0:57:BD:2A:40:32:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0effca6-ccf9-31f3-96fc-45c506d0930c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 71.28.180.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7c:41:a7:59:66:41:4b:00:a4:69:58:37:c6:47:d1:9a:ce: 75:d1:f7:da:a0:65:6e:9f:37:a4:a7:a2:47:f2:e7:89:57:50: c1:c3:5c:4d:5e:8f:e6:9f:d0:b5:b2:92:c7:11:f8:bb:b8:64: 9d:c9:2e:db:68:ea:88:f2:fb:bb:f1:49:08:45:74:07:45:d7: cb:72:02:7c:72:4a:f0:12:e2:fb:70:d0:ad:e8:b1:0c:5e:f0: d2:16:05:b4:37:d7:e8:6d:ee:79:05:a6:62:37:44:67:52:7f: 54:0e:89:52:50:59:0b:a7:d0:5f:9b:4f:90:a1:d6:12:ca:e4: 11:c3:3b:ec:25:d7:21:d6:4e:18:71:5d:46:4b:dd:86:59:74: 6d:63:74:23:c8:4b:25:12:0e:1b:ec:39:17:31:25:37:5f:ba: 6c:c5:56:f3:18:37:cf:9b:5a:32:10:f1:b7:a7:d1:de:95:3e: 74:06:52:78:3c:c9:3d:c2:bc:d5:ff:e1:94:a1:8b:57:ac:10: 6c:3d:b3:f1:f5:9e:e5:99:e7:42:5d:cd:56:61:81:86:d8:16: 55:9b:af:96:9e:82:5f:83:89:8a:5e:88:8b:c2:94:d7:7e:bf: 26:c2:f7:3e:48:33:46:06:f4:f7:2f:8a:2b:33:59:0d:96:24: 43:e0:ac:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiCSZPTAAuEbQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk MTIzNzRiNjItY2VlZi00YmU3LThiOTEtYjY5NzI0ZGVmYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipghj6op9dZAOuBjd7AJcJPDbpINWVC+lOqd Orcg7nrzay3V2iOxI19B9+Z7MEh1LV/hSjgDxV5+snoIJxx1CHz0C+CeEMVTkCV0 oSOLzsTzwyC+gynapDs11Qw9jB7Cn6FBDFpi981WtX75m+C4o6D+1gOorKobcHFq eQF4sW0e6LKL36aStEZHNibv4VWiDFNTAVT62yCUF9Z7B0iLKLpAgkPoVe1Kae88 6FGRhU1GzXha062uabt7WEoKq80CR31+X7RGC5PFdta9N27RI+Gvxr5Zs3ftpsNJ OGqhWfnEnP8KCu4VRW6nK6G+QQ2JjzcAN/axinBTQ8ifmYRh5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSEUzlJzNDMCaN8RQbQV70qQDJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTBlZmZjYTYtY2NmOS0z MWYzLTk2ZmMtNDVjNTA2ZDA5MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRxy0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN8QadZZkFLAKRpWDfGR9GaznXR99qgZW6fN6Snokfy54lXUMHDXE1e j+af0LWykscR+Lu4ZJ3JLtto6ojy+7vxSQhFdAdF18tyAnxySvAS4vtw0K3osQxe 8NIWBbQ31+ht7nkFpmI3RGdSf1QOiVJQWQun0F+bT5Ch1hLK5BHDO+wl1yHWThhx XUZL3YZZdG1jdCPISyUSDhvsORcxJTdfumzFVvMYN8+bWjIQ8ben0d6VPnQGUng8 yT3CvNX/4ZShi1esEGw9s/H1nuWZ50JdzVZhgYbYFlWbr5aegl+DiYpeiIvClNd+ vybC9z5IM0YG9PcviiszWQ2WJEPgrBk= -----END CERTIFICATE-----Generated at Sun Jun 15 11:47:30 2025 by rpki-client