$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05c5f05e-4b72-3551-a89e-094005537304.roa File: 05c5f05e-4b72-3551-a89e-094005537304.roa (raw, json) Hash identifier: vhHs6RThk6bBPT7EvGL73YCYd+UxTDp808DJonCoYrs= Subject key identifier: DB:18:AE:2E:66:ED:9F:56:0C:F4:D4:2F:DF:A8:90:7F:C5:3B:4C:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A41E5580AC8E8B4E43B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05c5f05e-4b72-3551-a89e-094005537304.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 206.245.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:41:e5:58:0a:c8:e8:b4:e4:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=df26ab39-8b2a-484b-b23b-5bea7f61a180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:94:29:fb:93:7d:64:d3:a4:6a:9e:d4:a9:f3: c3:62:ec:93:c4:f5:7a:6d:77:37:bc:fa:8b:f4:85: 3e:ab:53:e2:d9:d0:48:bf:32:a6:44:e8:1a:db:5f: 7d:cc:dd:83:5e:33:c5:28:d2:27:e9:02:2b:35:af: 34:5f:82:c5:3b:62:b4:76:fc:48:96:b2:4f:a2:ea: 81:15:65:b5:34:d6:be:f6:ca:2b:cf:d0:cc:4e:46: 45:10:8d:ac:9d:03:b8:81:3e:27:e9:e4:b0:1d:ea: bd:31:cf:e1:2b:1f:a7:48:d0:44:cf:6b:6e:04:79: f4:f8:5e:0e:65:68:56:2f:9d:fd:9c:46:25:da:ad: 35:37:e3:99:b3:55:16:cb:6a:73:a6:a7:54:7f:7c: a5:5a:cb:91:43:4a:70:91:69:2f:0c:2d:f8:ea:4b: 47:55:39:97:06:91:7c:52:0c:73:80:44:96:73:3f: 9b:64:a9:cb:d7:49:45:f6:6a:46:f2:f4:ba:d8:f8: 3f:4e:9c:bf:07:6e:51:16:45:22:38:4f:c3:67:4c: 64:7f:1f:f3:7b:82:6c:ec:8f:bf:f1:d0:77:9a:31: a6:0a:bc:ad:26:e5:0f:fe:6d:e5:15:e3:8a:f2:bf: d4:9c:e2:bf:91:43:94:69:f8:6a:f7:35:3f:10:85: 02:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:18:AE:2E:66:ED:9F:56:0C:F4:D4:2F:DF:A8:90:7F:C5:3B:4C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/05c5f05e-4b72-3551-a89e-094005537304.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 206.245.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:b6:20:dc:9b:df:3e:ed:ae:66:89:61:31:70:9e:fa:5c:99: 9a:7c:d5:22:12:72:b4:57:ed:31:d5:b7:7e:6c:54:f4:bb:6e: 21:35:a8:79:a1:62:e7:15:ee:62:36:f8:7e:68:5b:01:c1:5c: e4:20:57:6b:fa:46:55:4e:6a:a0:7e:21:c5:82:05:0b:71:d6: 02:83:4a:09:ac:5f:da:ae:20:23:b3:3b:4e:4a:a2:a8:44:a7: 34:1c:db:a4:0f:e6:3b:3e:c7:cc:18:31:19:39:94:43:b0:63: 0c:a5:3e:6b:16:48:b6:19:0a:e6:b1:03:80:46:0c:19:e7:90: 38:36:f0:08:52:f4:d3:ce:c3:70:d2:3c:4c:97:c4:cb:4d:48: ae:e9:75:7b:72:1a:85:64:ad:1b:dc:98:68:5f:7e:77:20:39: b3:80:cd:2c:ca:13:3d:54:9f:43:64:45:d8:a8:8d:07:67:8d: c6:5b:c7:df:23:b5:d8:69:75:19:f6:40:a0:32:a1:21:ad:ff: 70:13:9d:47:d6:83:51:b9:8f:fd:ff:a2:d0:af:14:e6:fe:da: 5e:02:42:d3:b3:63:dd:e6:29:93:c0:9c:3a:b6:c3:9b:82:d1: b3:13:fe:b8:2d:ed:ec:be:bc:59:72:b2:91:58:4f:64:cd:97: 76:83:6e:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkHlWArI6LTkO0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGYyNmFiMzktOGIyYS00ODRiLWIyM2ItNWJlYTdmNjFhMTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpQp+5N9ZNOkap7UqfPDYuyTxPV6bXc3vPqL 9IU+q1Pi2dBIvzKmROga2199zN2DXjPFKNIn6QIrNa80X4LFO2K0dvxIlrJPouqB FWW1NNa+9sorz9DMTkZFEI2snQO4gT4n6eSwHeq9Mc/hKx+nSNBEz2tuBHn0+F4O ZWhWL539nEYl2q01N+OZs1UWy2pzpqdUf3ylWsuRQ0pwkWkvDC346ktHVTmXBpF8 UgxzgESWcz+bZKnL10lF9mpG8vS62Pg/Tpy/B25RFkUiOE/DZ0xkfx/ze4Js7I+/ 8dB3mjGmCrytJuUP/m3lFeOK8r/UnOK/kUOUafhq9zU/EIUChQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsYri5m7Z9WDPTUL9+okH/FO0wHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDVjNWYwNWUtNGI3Mi0z NTUxLWE4OWUtMDk0MDA1NTM3MzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzvWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq2INyb3z7trmaJYTFwnvpcmZp81SIScrRX7THVt35sVPS7biE1qHmh YucV7mI2+H5oWwHBXOQgV2v6RlVOaqB+IcWCBQtx1gKDSgmsX9quICOzO05KoqhE pzQc26QP5js+x8wYMRk5lEOwYwylPmsWSLYZCuaxA4BGDBnnkDg28AhS9NPOw3DS PEyXxMtNSK7pdXtyGoVkrRvcmGhffncgObOAzSzKEz1Un0NkRdiojQdnjcZbx98j tdhpdRn2QKAyoSGt/3ATnUfWg1G5j/3/otCvFOb+2l4CQtOzY93mKZPAnDq2w5uC 0bMT/rgt7ey+vFlyspFYT2TNl3aDbr8= -----END CERTIFICATE-----Generated at Sat May 10 18:40:22 2025 by rpki-client