$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0237aa91-5c7e-38cf-900f-598deeae6f84.roa File: 0237aa91-5c7e-38cf-900f-598deeae6f84.roa (raw, json) Hash identifier: 9+QPe7qdNbuu8tf9VL4bOee1InlTsi/3qS8VZCE97vw= Subject key identifier: 9A:1B:0E:BD:7E:A6:3B:C6:26:DE:8E:5C:57:69:0C:54:71:63:99:5C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A25D08DFA3B5E77661600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0237aa91-5c7e-38cf-900f-598deeae6f84.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 29877 IP address blocks: 216.106.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:25:d0:8d:fa:3b:5e:77:66:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=573d3f1e-de5b-4def-a097-ff5814eed7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:0a:fa:c2:26:d5:be:f8:5c:28:68:17:9a: c1:39:bd:47:b7:12:8e:98:11:8f:6f:b0:3b:e0:ff: 8b:51:e3:89:7a:37:d7:6e:5d:bc:26:1f:52:32:47: 90:7a:1b:dc:f2:a7:e4:7d:df:ce:ab:f1:af:bd:ae: b1:e0:2e:44:08:b5:ad:f8:ef:1b:2c:e5:9d:d3:6b: 15:4f:9c:3c:ab:d6:dd:ac:c8:a0:b9:ec:38:7c:18: 7b:e6:38:1a:21:fa:09:96:49:75:47:f6:af:ca:79: 13:75:87:0c:7c:f0:58:c6:b9:e9:c8:79:3a:f5:9e: ac:cf:87:5a:9d:56:c2:64:f2:4c:10:1e:c7:da:9f: 20:91:4d:15:cf:67:18:b0:65:cd:d1:84:3e:f5:eb: 21:cc:52:5a:ed:ac:6e:12:36:e4:37:fe:87:74:49: fe:c9:80:23:18:93:06:3c:e2:b3:41:39:3c:09:8d: 44:0a:33:96:d4:e0:93:36:de:ef:71:6f:2b:43:1a: 85:73:c4:8f:a5:df:56:c1:d4:59:89:b4:8b:9d:c6: 61:70:33:89:d3:32:5e:a2:ed:c4:b1:1d:ce:70:65: e0:fc:1d:6c:e6:70:31:af:eb:71:73:91:5e:62:9c: 12:f7:d8:2f:ef:f5:22:75:60:67:6a:1a:d1:4a:b4: 8b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1B:0E:BD:7E:A6:3B:C6:26:DE:8E:5C:57:69:0C:54:71:63:99:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0237aa91-5c7e-38cf-900f-598deeae6f84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.106.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7e:9e:13:f6:3f:e4:52:ae:38:6a:ee:70:a4:3d:25:12:08: a2:74:83:c4:fb:73:7d:1c:34:dd:02:9d:ff:70:4b:c1:d3:33: 72:46:24:c0:d2:8b:a5:e2:10:09:df:9a:28:2b:fe:09:16:e8: 72:28:bb:7f:82:89:f1:86:70:a8:b9:9b:95:0b:d7:fa:bb:9b: bf:d4:f9:8d:8e:3b:8a:38:68:1e:2b:a9:61:51:b3:a9:5c:0e: 5e:90:39:f1:2a:67:79:86:9b:9a:38:ce:47:45:08:f9:c9:a6: bb:28:32:ab:a1:cc:37:53:94:e2:a3:ca:63:77:c1:bb:61:6a: 52:e9:bf:27:9d:fe:33:14:b7:29:dc:51:dc:6c:00:e1:69:c5: 62:6d:59:c9:c8:99:2e:b9:d5:85:1a:b8:ae:a5:e5:2f:ca:07: d3:61:a7:44:7a:8e:c7:18:9a:fd:14:0f:90:c3:49:03:f0:e7: 10:2e:33:3c:55:94:5c:75:82:bd:6b:da:60:02:39:2a:54:a5: 5f:8f:94:17:c3:a8:34:f6:8b:7b:82:0c:95:71:d4:9f:b8:3b: b0:93:d7:8b:f5:48:19:eb:14:aa:5c:d6:be:f7:17:61:e7:bd: 93:23:dd:99:0a:f6:ce:aa:28:2d:63:50:b2:24:60:dc:7f:ab: 2e:bc:90:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiXQjfo7XndmFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTczZDNmMWUtZGU1Yi00ZGVmLWEwOTctZmY1ODE0ZWVkN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlwK+sIm1b74XChoF5rBOb1HtxKOmBGPb7A7 4P+LUeOJejfXbl28Jh9SMkeQehvc8qfkfd/Oq/Gvva6x4C5ECLWt+O8bLOWd02sV T5w8q9bdrMiguew4fBh75jgaIfoJlkl1R/avynkTdYcMfPBYxrnpyHk69Z6sz4da nVbCZPJMEB7H2p8gkU0Vz2cYsGXN0YQ+9eshzFJa7axuEjbkN/6HdEn+yYAjGJMG POKzQTk8CY1ECjOW1OCTNt7vcW8rQxqFc8SPpd9WwdRZibSLncZhcDOJ0zJeou3E sR3OcGXg/B1s5nAxr+txc5FeYpwS99gv7/UidWBnahrRSrSLhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJobDr1+pjvGJt6OXFdpDFRxY5lcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDIzN2FhOTEtNWM3ZS0z OGNmLTkwMGYtNTk4ZGVlYWU2Zjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2Gq4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV+nhP2P+RSrjhq7nCkPSUSCKJ0g8T7c30cNN0Cnf9wS8HTM3JGJMDS i6XiEAnfmigr/gkW6HIou3+CifGGcKi5m5UL1/q7m7/U+Y2OO4o4aB4rqWFRs6lc Dl6QOfEqZ3mGm5o4zkdFCPnJprsoMquhzDdTlOKjymN3wbthalLpvyed/jMUtync UdxsAOFpxWJtWcnImS651YUauK6l5S/KB9Nhp0R6jscYmv0UD5DDSQPw5xAuMzxV lFx1gr1r2mACOSpUpV+PlBfDqDT2i3uCDJVx1J+4O7CT14v1SBnrFKpc1r73F2Hn vZMj3ZkK9s6qKC1jULIkYNx/qy68kJg= -----END CERTIFICATE-----Generated at Sun May 11 11:03:28 2025 by rpki-client