$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa File: 08f9e3af-a77c-300b-90ce-7f032359dcfa.roa (raw, json) Hash identifier: tiibRsSUc5qf4L0+/h0M/EmzTlKtjIvzvGrmv58pCVA= Subject key identifier: 96:73:8C:1E:1A:3C:74:92:C6:D3:BD:0C:F5:14:AC:C0:C6:01:13:F8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1B3150171D9E66446F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 151.213.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:1b:31:50:17:1d:9e:66:44:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=3bdeae0c-6e3c-44a3-b55b-9976daf8ea81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ff:19:42:fe:b9:5e:1e:29:28:2e:62:18:a1: 18:fc:39:61:1e:fc:0c:8b:4e:21:79:bd:9a:67:6a: a7:f1:78:05:07:f3:50:e5:75:d4:d4:38:20:29:93: fa:fb:1b:cf:bb:fe:40:c0:a2:11:67:eb:27:26:cb: 08:63:1b:d7:a8:2e:d4:5f:d2:58:47:8e:54:8c:a1: 2c:4b:a7:da:31:27:c2:37:ed:c4:45:16:cf:bf:48: 6f:d7:60:fe:9a:de:e8:ac:18:a4:96:aa:60:d4:7b: 15:89:57:5a:24:35:27:43:34:05:ef:f0:f6:e2:77: 80:4d:a3:fb:88:c6:ff:95:5f:2d:93:c6:30:39:50: 82:d2:0c:4e:16:92:f6:59:6d:72:d8:1b:df:ae:a1: 3c:d0:04:fb:e4:2c:35:eb:bf:da:75:0e:5c:c7:fd: 2e:bb:80:37:cb:70:fa:8b:8f:08:5c:c6:f8:40:5e: a4:a1:a4:0d:a8:17:12:cb:d4:91:e0:4b:58:96:85: d4:05:4c:7b:0d:9d:5a:8d:36:92:8b:c2:e5:7b:ba: e5:52:e9:1a:95:a1:f1:d7:b3:93:9f:ad:d6:49:1e: a3:71:d1:bc:de:62:a9:80:d4:37:e2:10:ce:6c:ac: 7a:f2:04:c9:e7:6e:e2:6c:62:bf:c1:22:1a:28:89: 70:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:73:8C:1E:1A:3C:74:92:C6:D3:BD:0C:F5:14:AC:C0:C6:01:13:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/08f9e3af-a77c-300b-90ce-7f032359dcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7b:b7:5c:74:77:50:bc:2a:c5:0d:43:a5:c2:eb:9c:6a:cf: a8:94:05:e9:78:6b:8a:d0:2f:08:24:4b:99:c7:73:b8:21:26: 73:44:c4:ef:01:0e:88:b5:9a:a5:f3:ba:e2:b1:5f:3b:7a:c3: 78:40:4e:fc:36:fb:c7:f6:9a:47:0e:3b:7c:0c:68:f9:2f:c5: 9c:e1:f3:de:b9:cb:08:bc:bd:c4:b0:50:ed:0f:e7:97:ad:83: 76:c1:24:0b:a3:86:38:2c:ae:b6:e5:31:cc:6f:9d:59:8b:71: 56:f8:eb:25:cd:f6:14:74:e4:9c:93:f8:4c:93:50:6d:73:7f: f2:f5:19:41:60:cc:08:51:f7:ae:41:f2:af:3b:2b:a7:8c:65: 75:93:38:58:6f:34:e2:cb:1c:57:25:ed:4f:ca:dd:19:4d:4c: c3:ee:27:bf:a2:28:eb:64:99:4f:b6:ee:b2:1e:1c:1d:9b:29: 39:ee:4b:66:e9:ba:7e:93:1c:28:e6:03:7d:59:2e:99:a3:ae: 93:91:19:d9:8d:57:d6:8d:c7:98:2a:ce:5e:66:29:b4:5a:73: 7f:09:fb:7b:38:3c:38:90:e8:b6:1a:09:4f:6f:6c:30:5f:82: 03:0a:22:69:a5:98:cf:e9:46:14:26:a9:2b:51:65:61:11:e2: 8a:0f:ec:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhsxUBcdnmZEb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk M2JkZWFlMGMtNmUzYy00NGEzLWI1NWItOTk3NmRhZjhlYTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP8ZQv65Xh4pKC5iGKEY/DlhHvwMi04heb2a Z2qn8XgFB/NQ5XXU1DggKZP6+xvPu/5AwKIRZ+snJssIYxvXqC7UX9JYR45UjKEs S6faMSfCN+3ERRbPv0hv12D+mt7orBiklqpg1HsViVdaJDUnQzQF7/D24neATaP7 iMb/lV8tk8YwOVCC0gxOFpL2WW1y2BvfrqE80AT75Cw167/adQ5cx/0uu4A3y3D6 i48IXMb4QF6koaQNqBcSy9SR4EtYloXUBUx7DZ1ajTaSi8Lle7rlUukalaHx17OT n63WSR6jcdG83mKpgNQ34hDObKx68gTJ527ibGK/wSIaKIlwDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZzjB4aPHSSxtO9DPUUrMDGARP4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDhmOWUzYWYtYTc3Yy0z MDBiLTkwY2UtN2YwMzIzNTlkY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9VYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl7t1x0d1C8KsUNQ6XC65xqz6iUBel4a4rQLwgkS5nHc7ghJnNExO8B Doi1mqXzuuKxXzt6w3hATvw2+8f2mkcOO3wMaPkvxZzh8965ywi8vcSwUO0P55et g3bBJAujhjgsrrblMcxvnVmLcVb46yXN9hR05JyT+EyTUG1zf/L1GUFgzAhR965B 8q87K6eMZXWTOFhvNOLLHFcl7U/K3RlNTMPuJ7+iKOtkmU+27rIeHB2bKTnuS2bp un6THCjmA31ZLpmjrpORGdmNV9aNx5gqzl5mKbRac38J+3s4PDiQ6LYaCU9vbDBf ggMKImmlmM/pRhQmqStRZWER4ooP7Ow= -----END CERTIFICATE-----Generated at Sat May 10 21:03:47 2025 by rpki-client