$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa File: 0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa (raw, json) Hash identifier: /xRvz/TlN3EnZ0syv+Mp/SKCKqemtnramV9nU9CCZZM= Subject key identifier: 53:E4:85:53:06:E0:18:C7:83:BF:B9:1F:49:1A:EB:88:46:0C:7F:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1A061FF326AB16D5FE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.252.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1a:06:1f:f3:26:ab:16:d5:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=30265a20-a90d-445d-8b5e-209c19a49f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:45:31:b7:64:bf:95:82:5a:e5:31:78:ad: 05:2c:ba:81:cd:43:db:15:12:e4:0d:37:38:88:a3: 95:28:6d:83:d9:53:ea:4b:a9:d7:5b:52:cc:59:67: 78:47:55:39:37:5c:9b:17:d7:10:89:e8:59:d1:f5: 92:37:7f:4c:f0:81:9f:6e:eb:93:1b:a9:ba:ca:95: 25:e5:45:83:f7:43:cd:3a:9e:42:5a:fd:79:d2:ba: 51:d3:62:bc:e8:6f:4d:f5:5a:15:41:82:0a:1c:b2: 0a:64:0a:3e:3c:89:68:97:53:26:b4:2b:1f:45:69: 9b:5f:49:d8:af:5e:73:55:d2:56:45:65:ba:8e:ce: c0:b9:13:b5:b6:d4:d3:9b:de:69:7c:56:c8:b5:6f: 4f:c9:23:da:3b:73:be:d3:e0:47:83:8a:9f:7a:0a: 86:07:59:ff:de:39:42:55:62:63:57:9f:b0:63:c9: be:71:78:75:d8:60:9b:39:ad:00:9e:6c:b7:58:58: dc:52:12:db:7e:fa:a1:cb:ef:df:6e:36:4b:eb:39: 6b:82:08:55:50:ff:a2:60:72:b1:9e:32:af:3a:87: f1:15:a0:ea:03:5c:7a:0e:c0:45:89:5c:f7:20:9d: 27:91:a2:16:a6:40:da:12:ee:5a:83:da:fc:d3:ec: 7c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E4:85:53:06:E0:18:C7:83:BF:B9:1F:49:1A:EB:88:46:0C:7F:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0f7f99ef-9928-3c17-bf5c-cccc95a09fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:53:0c:c5:e2:a6:8d:0b:a9:10:a0:f9:b9:1e:b2:3a:10:28: 12:03:e6:b0:bf:3c:8e:96:92:0a:3f:b3:dd:b2:cd:5e:d7:d3: 60:63:a3:c7:a4:97:84:80:1e:94:e5:4f:00:fb:0d:e9:9a:cb: 15:ad:c3:25:a9:72:8d:0b:a8:ac:75:7e:a3:45:69:f7:94:08: 5b:f8:c7:1a:38:59:a5:1a:c7:a0:cb:28:74:d3:96:cf:bb:e1: 77:45:12:47:15:bb:c6:d1:72:2f:23:4b:d7:67:4d:75:0b:f8: e0:f5:50:02:27:b9:05:1d:ba:87:6e:ff:08:30:00:5f:7b:8d: 8a:71:53:78:dc:d6:45:8b:d5:4f:d0:a0:e0:05:d6:65:40:1c: 02:95:e5:2b:a5:e1:f7:9c:da:f7:6a:50:da:cc:b3:53:11:8f: c5:e8:51:9b:7e:8e:31:50:ac:ce:a8:a4:a0:a5:00:19:2e:32: 60:16:69:37:4f:36:b7:04:52:dd:6d:b8:29:24:74:8d:ba:04: 68:2d:08:68:b0:b4:6f:1f:36:e2:ca:65:bd:78:38:69:b6:fe: 89:b8:c9:52:d9:c3:5c:08:57:ed:ab:6b:e8:b2:5f:0f:3e:df: 29:55:2e:c1:20:e0:1b:42:6c:53:d0:85:16:f9:3b:ca:63:3c: e1:6d:2f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShoGH/MmqxbV/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzAyNjVhMjAtYTkwZC00NDVkLThiNWUtMjA5YzE5YTQ5ZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt85FMbdkv5WCWuUxeK0FLLqBzUPbFRLkDTc4 iKOVKG2D2VPqS6nXW1LMWWd4R1U5N1ybF9cQiehZ0fWSN39M8IGfbuuTG6m6ypUl 5UWD90PNOp5CWv150rpR02K86G9N9VoVQYIKHLIKZAo+PIlol1MmtCsfRWmbX0nY r15zVdJWRWW6js7AuRO1ttTTm95pfFbItW9PySPaO3O+0+BHg4qfegqGB1n/3jlC VWJjV5+wY8m+cXh12GCbOa0Anmy3WFjcUhLbfvqhy+/fbjZL6zlrgghVUP+iYHKx njKvOofxFaDqA1x6DsBFiVz3IJ0nkaIWpkDaEu5ag9r80+x8QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPkhVMG4BjHg7+5H0ka64hGDH8RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGY3Zjk5ZWYtOTkyOC0z YzE3LWJmNWMtY2NjYzk1YTA5ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fwqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJTDMXipo0LqRCg+bkesjoQKBID5rC/PI6Wkgo/s92yzV7X02Bjo8ek l4SAHpTlTwD7DemayxWtwyWpco0LqKx1fqNFafeUCFv4xxo4WaUax6DLKHTTls+7 4XdFEkcVu8bRci8jS9dnTXUL+OD1UAInuQUduodu/wgwAF97jYpxU3jc1kWL1U/Q oOAF1mVAHAKV5Sul4fec2vdqUNrMs1MRj8XoUZt+jjFQrM6opKClABkuMmAWaTdP NrcEUt1tuCkkdI26BGgtCGiwtG8fNuLKZb14OGm2/om4yVLZw1wIV+2ra+iyXw8+ 3ylVLsEg4BtCbFPQhRb5O8pjPOFtL50= -----END CERTIFICATE-----Generated at Tue May 6 21:07:10 2025 by rpki-client