$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14635b6d-223e-32d2-b99e-7f17cbefc69d.roa File: 14635b6d-223e-32d2-b99e-7f17cbefc69d.roa (raw, json) Hash identifier: 8uMUd+EwxTftexfhIQYBMISUOi1MF7CoRIHBkcuGZT4= Subject key identifier: 86:8D:AE:9A:45:31:AA:B0:5D:41:64:BF:54:0C:D6:78:18:DC:E1:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A487FA41BF81D666B4C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14635b6d-223e-32d2-b99e-7f17cbefc69d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 11681 IP address blocks: 209.218.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:7f:a4:1b:f8:1d:66:6b:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=9292e941-c38b-418e-971e-d6192058f572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:7e:16:ae:18:f0:4a:e6:e7:05:09:16:40: 47:65:d9:c7:c5:64:5e:bf:d3:78:3c:a6:df:6f:84: ae:ef:40:4e:06:39:0d:9a:9b:46:30:0a:2c:eb:5d: 84:49:dd:bf:bd:6c:3b:65:9c:4c:0c:d1:ce:ef:6d: 44:a6:2d:23:d9:7c:d1:4d:4a:d4:53:66:b7:d7:cd: 4d:99:1d:d5:1b:e8:c5:4e:bd:00:33:33:e0:56:ed: 57:d3:99:b6:19:d1:5b:1c:1b:62:cc:ef:3e:1c:97: 37:e3:17:b1:c8:3f:43:89:df:56:86:60:d2:61:a4: ab:2a:6e:32:92:8a:a1:11:24:a5:d9:b0:fc:e0:26: 79:61:90:1c:63:41:68:46:1c:69:16:0c:96:e8:15: 98:21:05:71:9a:bd:4c:a7:fb:2f:07:7e:5e:db:e3: f1:f7:4c:b9:6a:2b:f2:da:2e:1c:ad:0c:78:16:fe: f4:c9:b6:67:ef:fd:a1:e8:96:13:9e:20:40:ab:d9: 90:33:48:01:63:04:75:ee:10:d0:14:5f:b5:95:71: d9:d2:d5:fc:d8:50:69:8d:ce:e2:03:e2:b3:de:d6: 5a:7b:85:55:a1:39:fa:6d:18:3c:e9:be:4a:34:6e: 13:29:11:0e:ae:3a:da:34:dd:45:db:a2:33:7b:14: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8D:AE:9A:45:31:AA:B0:5D:41:64:BF:54:0C:D6:78:18:DC:E1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/14635b6d-223e-32d2-b99e-7f17cbefc69d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.218.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2d:57:ea:25:68:f1:c6:1f:71:46:15:ca:f1:7c:a6:91:01: 8b:ba:bc:df:c4:cd:cf:66:15:f3:95:b6:e4:c5:e1:01:07:f7: 9d:81:ab:05:df:72:64:18:e8:6a:3a:e2:63:7c:45:ca:16:38: d4:be:24:51:c5:fb:b7:51:a3:a9:9b:22:5d:18:41:98:8c:49: 26:22:d0:5c:12:df:5c:04:2a:83:e7:75:1d:1c:f6:47:04:28: 53:5f:4e:61:d7:83:74:7f:6d:54:7b:5e:de:2c:41:ae:56:54: 2b:b0:f0:7b:0a:da:20:66:c0:63:81:52:64:82:23:df:c0:ff: 2c:83:81:dd:40:56:f2:e0:23:82:fc:68:7d:fe:1f:d7:ce:15: 44:52:72:dc:64:99:5a:ac:ed:d7:f2:1e:6a:da:ec:26:cf:ce: 84:65:ef:04:15:23:cb:c2:d3:ec:43:be:51:0b:55:f3:40:da: 93:59:13:e0:51:c6:78:f7:a7:44:47:6d:51:da:bd:26:ad:ce: bd:91:d3:d9:b5:e2:ef:fa:26:76:d5:44:b6:91:6d:08:21:4f: 3c:24:4f:7f:b9:14:3d:c0:43:bd:c8:9e:12:49:73:4c:09:e5: 17:7d:69:19:7d:d9:54:6a:7e:69:2a:7f:81:4c:df:a9:d8:d0: 9b:3a:e3:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkh/pBv4HWZrTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTI5MmU5NDEtYzM4Yi00MThlLTk3MWUtZDYxOTIwNThmNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQV+Fq4Y8Erm5wUJFkBHZdnHxWRev9N4PKbf b4Su70BOBjkNmptGMAos612ESd2/vWw7ZZxMDNHO721Epi0j2XzRTUrUU2a3181N mR3VG+jFTr0AMzPgVu1X05m2GdFbHBtizO8+HJc34xexyD9Did9WhmDSYaSrKm4y koqhESSl2bD84CZ5YZAcY0FoRhxpFgyW6BWYIQVxmr1Mp/svB35e2+Px90y5aivy 2i4crQx4Fv70ybZn7/2h6JYTniBAq9mQM0gBYwR17hDQFF+1lXHZ0tX82FBpjc7i A+Kz3tZae4VVoTn6bRg86b5KNG4TKREOrjraNN1F26IzexSA6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaNrppFMaqwXUFkv1QM1ngY3OHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTQ2MzViNmQtMjIzZS0z MmQyLWI5OWUtN2YxN2NiZWZjNjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0drQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAtV+olaPHGH3FGFcrxfKaRAYu6vN/Ezc9mFfOVtuTF4QEH952BqwXf cmQY6Go64mN8RcoWONS+JFHF+7dRo6mbIl0YQZiMSSYi0FwS31wEKoPndR0c9kcE KFNfTmHXg3R/bVR7Xt4sQa5WVCuw8HsK2iBmwGOBUmSCI9/A/yyDgd1AVvLgI4L8 aH3+H9fOFURSctxkmVqs7dfyHmra7CbPzoRl7wQVI8vC0+xDvlELVfNA2pNZE+BR xnj3p0RHbVHavSatzr2R09m14u/6JnbVRLaRbQghTzwkT3+5FD3AQ73InhJJc0wJ 5Rd9aRl92VRqfmkqf4FM36nY0Js64zc= -----END CERTIFICATE-----Generated at Sat May 10 14:51:33 2025 by rpki-client