$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa File: 0a90a390-d0a5-365f-9730-fddae514051e.roa (raw, json) Hash identifier: hTJHoHqlFxjn2w0189WOKpiJJCiITPYOJsNJhrj4va0= Subject key identifier: 7B:C8:22:91:16:7C:F3:52:E1:87:5C:89:80:B0:19:37:B2:D9:59:28 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4130D115408C9C0A8D90 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 199.195.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:41:30:d1:15:40:8c:9c:0a:8d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=10f43f01-a7ef-480b-acdc-498e66053bf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:98:7f:23:8c:23:e1:95:95:80:03:ad:34: 3d:e6:2e:b0:8d:3b:1c:9f:e9:96:0c:4f:d6:4b:cc: 13:43:e2:e9:cc:50:db:59:f5:48:41:02:d6:a9:71: ad:2c:8f:42:f7:bd:39:35:43:7a:20:28:f3:d7:b7: a2:4c:0d:52:6b:8f:49:70:e6:e0:0f:7c:0e:34:8a: 5b:2c:cc:fb:d1:1d:e1:74:91:aa:60:64:95:88:9d: 0b:bb:92:4e:30:5a:39:f8:87:cf:16:04:9f:3f:a5: d5:80:50:1d:79:53:50:46:2e:11:c0:92:c5:21:d8: b0:58:03:85:01:8d:37:f3:34:ff:c5:e0:29:76:0e: de:04:83:a2:f1:d8:b8:04:86:13:d9:8f:00:36:b2: 82:a5:e0:bd:6d:67:df:ea:3d:4f:9a:af:3f:07:df: d7:d9:f7:81:9a:94:51:1c:01:b6:a6:50:c6:1c:9f: 99:8a:6a:c0:c3:e8:33:22:44:7f:03:e1:f3:47:6d: 1c:d3:2f:e4:54:2c:ca:aa:81:3e:12:8a:00:b7:a6: 63:b8:9e:80:33:70:d8:5d:3f:6f:64:84:7c:e7:94: cc:4f:61:de:a3:7c:ca:44:d7:ee:c1:04:ac:86:db: 66:97:62:56:65:d6:44:ce:05:17:d5:52:04:26:dd: 28:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:C8:22:91:16:7C:F3:52:E1:87:5C:89:80:B0:19:37:B2:D9:59:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0a90a390-d0a5-365f-9730-fddae514051e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:d6:25:a4:39:81:f5:a4:f6:93:11:67:06:fd:40:d3:95:56: 33:b3:1e:bc:f4:2a:24:6b:0b:b5:7e:06:18:4d:3c:3f:3d:c8: 96:8b:1d:e7:ec:29:a4:80:8f:76:9a:e6:2c:d7:a0:06:1d:a8: 3d:c2:b6:06:dd:5f:6a:33:b7:a6:4b:02:96:5f:41:76:1b:2e: 02:ed:be:64:7b:ef:bf:68:cd:d3:80:5f:bb:3c:8c:da:3e:78: f9:73:a3:2f:a2:d6:48:58:88:51:24:28:2e:42:15:13:e1:a3: af:24:b2:a8:51:c3:ab:0f:a7:dc:33:e7:66:20:c3:da:c9:26: df:b4:4d:2a:f7:55:c7:66:a0:ed:5e:a2:c0:b3:99:7f:88:d8: fa:9b:2f:9a:2f:47:42:b7:21:44:25:85:2d:d8:3f:0d:d7:6b: d0:6d:27:a7:57:81:09:71:74:89:84:0e:eb:1d:a2:34:67:78: 5f:d7:7a:54:ef:e9:cf:fb:60:e6:a3:7d:8e:16:32:ad:68:89: 09:4c:59:c8:11:6b:ad:8c:4e:c4:c1:8e:c6:71:68:28:7a:e2: 82:fa:f2:90:c7:1c:7e:f5:dc:71:9a:78:34:7a:1c:d7:0f:80: 10:e5:fa:7a:5f:3a:0f:15:da:c7:e2:b5:94:76:3e:9f:2a:ac: 07:1f:64:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkEw0RVAjJwKjZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTBmNDNmMDEtYTdlZi00ODBiLWFjZGMtNDk4ZTY2MDUzYmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwSYfyOMI+GVlYADrTQ95i6wjTscn+mWDE/W S8wTQ+LpzFDbWfVIQQLWqXGtLI9C9705NUN6ICjz17eiTA1Sa49JcObgD3wONIpb LMz70R3hdJGqYGSViJ0Lu5JOMFo5+IfPFgSfP6XVgFAdeVNQRi4RwJLFIdiwWAOF AY038zT/xeApdg7eBIOi8di4BIYT2Y8ANrKCpeC9bWff6j1Pmq8/B9/X2feBmpRR HAG2plDGHJ+ZimrAw+gzIkR/A+HzR20c0y/kVCzKqoE+EooAt6ZjuJ6AM3DYXT9v ZIR855TMT2Heo3zKRNfuwQSshttml2JWZdZEzgUX1VIEJt0o8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvIIpEWfPNS4YdciYCwGTey2VkoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGE5MGEzOTAtZDBhNS0z NjVmLTk3MzAtZmRkYWU1MTQwNTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx8PwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfWJaQ5gfWk9pMRZwb9QNOVVjOzHrz0KiRrC7V+BhhNPD89yJaLHefs KaSAj3aa5izXoAYdqD3CtgbdX2ozt6ZLApZfQXYbLgLtvmR7779ozdOAX7s8jNo+ ePlzoy+i1khYiFEkKC5CFRPho68ksqhRw6sPp9wz52Ygw9rJJt+0TSr3VcdmoO1e osCzmX+I2PqbL5ovR0K3IUQlhS3YPw3Xa9BtJ6dXgQlxdImEDusdojRneF/XelTv 6c/7YOajfY4WMq1oiQlMWcgRa62MTsTBjsZxaCh64oL68pDHHH713HGaeDR6HNcP gBDl+npfOg8V2sfitZR2Pp8qrAcfZLY= -----END CERTIFICATE-----Generated at Sun May 11 01:29:08 2025 by rpki-client