$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2022e4d1-6392-33c6-b536-4b4dbef2cc60.roa File: 2022e4d1-6392-33c6-b536-4b4dbef2cc60.roa (raw, json) Hash identifier: O6KIaeJScj0QofHU3w2NSH0xTYdxHqIAtQ5fsPrXy2k= Subject key identifier: 98:E0:4A:B4:4D:D4:F7:B7:76:32:B0:60:8C:1B:C5:6A:34:D1:64:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB493B3EE5FFA4536F17800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2022e4d1-6392-33c6-b536-4b4dbef2cc60.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 209.252.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:93:b3:ee:5f:fa:45:36:f1:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=c08bbb52-52e9-4a83-a89e-e9e50081ed11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:00:cd:67:4d:7f:52:2f:91:5f:39:c7:a4:a4: 94:47:00:c6:e0:df:ae:3e:45:ec:09:d3:2f:85:cc: 67:d9:de:1e:32:df:59:8d:1b:ab:99:74:5c:7e:39: a6:82:c0:e3:7b:cf:20:ed:e5:82:3f:39:9d:0f:c7: 37:76:d2:6d:e1:15:ae:79:3d:2a:df:fd:c1:36:8a: 30:28:6d:7d:9b:81:44:3b:f7:4c:c2:c7:b0:04:33: e2:2d:e2:91:6e:a5:72:7e:f6:c5:7b:b6:da:74:17: 81:f4:8f:c5:1c:2b:c4:74:1b:cf:a8:80:be:29:a2: 68:de:95:f0:ac:ae:f4:b6:03:ad:73:a5:ea:3d:e0: f5:b8:ca:32:6e:ec:2b:a8:7e:d2:72:64:2f:ff:a1: 8b:a8:5f:e0:34:e5:23:ee:b9:d1:5b:44:86:e5:80: 17:73:91:22:e3:da:87:e0:cd:11:16:25:56:e5:e8: 17:86:2e:6f:8f:65:e3:1d:30:37:99:bc:52:b2:9e: d8:93:c1:99:e4:2d:11:71:10:c0:bd:02:c0:52:37: fb:3d:e2:68:8b:4c:e1:6b:33:f3:cf:31:e1:3d:a1: fb:29:4d:d5:b9:ab:e6:63:49:69:d4:ee:67:f6:07: 36:35:0e:8b:79:0b:41:d0:0f:7a:e9:f5:29:39:72: 47:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E0:4A:B4:4D:D4:F7:B7:76:32:B0:60:8C:1B:C5:6A:34:D1:64:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2022e4d1-6392-33c6-b536-4b4dbef2cc60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.252.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2a:51:57:ef:0f:fe:63:15:32:32:3d:4e:60:6b:d0:75:85: 78:07:70:d4:b6:97:13:9d:28:8e:45:a8:05:bd:71:d2:af:e3: 4c:b7:80:76:94:b0:46:08:b0:0d:b9:90:fb:6d:56:90:71:02: 26:7d:89:c8:85:8b:b7:1e:e2:1e:f2:30:a9:e9:99:ca:f6:ab: b3:13:03:c0:35:cf:53:24:18:fe:99:65:1c:60:49:cb:cc:1e: 9d:a3:53:60:bc:fa:04:df:4f:73:31:e6:3b:1a:de:d4:4a:d0: 16:de:45:65:f5:c5:b8:77:0e:a0:23:ed:51:b1:76:f2:28:3c: c5:89:90:f3:22:04:cf:43:70:41:73:4d:4b:19:58:a2:bc:46: 80:ce:10:5f:fd:90:44:db:c3:75:9f:d7:35:8d:b0:63:e0:bf: 20:5b:59:3c:ae:91:49:2a:45:c6:4c:d5:81:97:a0:07:c4:c2: 09:e9:38:82:a0:fe:21:26:b0:dd:c9:5c:9c:03:c8:72:ff:4c: f4:15:78:c8:30:6e:73:14:bf:d9:86:46:5a:54:90:85:e4:94: d5:0a:01:94:6e:44:78:ac:fb:c0:5f:92:9f:7a:bf:f9:de:d8: 23:23:16:1f:2e:0f:da:f7:43:91:81:a1:3f:1c:98:00:63:e5: e6:d4:85:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJOz7l/6RTbxeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YzA4YmJiNTItNTJlOS00YTgzLWE4OWUtZTllNTAwODFlZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiADNZ01/Ui+RXznHpKSURwDG4N+uPkXsCdMv hcxn2d4eMt9ZjRurmXRcfjmmgsDje88g7eWCPzmdD8c3dtJt4RWueT0q3/3BNoow KG19m4FEO/dMwsewBDPiLeKRbqVyfvbFe7badBeB9I/FHCvEdBvPqIC+KaJo3pXw rK70tgOtc6XqPeD1uMoybuwrqH7ScmQv/6GLqF/gNOUj7rnRW0SG5YAXc5Ei49qH 4M0RFiVW5egXhi5vj2XjHTA3mbxSsp7Yk8GZ5C0RcRDAvQLAUjf7PeJoi0zhazPz zzHhPaH7KU3VuavmY0lp1O5n9gc2NQ6LeQtB0A966fUpOXJH3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjgSrRN1Pe3djKwYIwbxWo00WSFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjAyMmU0ZDEtNjM5Mi0z M2M2LWI1MzYtNGI0ZGJlZjJjYzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0fyxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0qUVfvD/5jFTIyPU5ga9B1hXgHcNS2lxOdKI5FqAW9cdKv40y3gHaU sEYIsA25kPttVpBxAiZ9iciFi7ce4h7yMKnpmcr2q7MTA8A1z1MkGP6ZZRxgScvM Hp2jU2C8+gTfT3Mx5jsa3tRK0BbeRWX1xbh3DqAj7VGxdvIoPMWJkPMiBM9DcEFz TUsZWKK8RoDOEF/9kETbw3Wf1zWNsGPgvyBbWTyukUkqRcZM1YGXoAfEwgnpOIKg /iEmsN3JXJwDyHL/TPQVeMgwbnMUv9mGRlpUkIXklNUKAZRuRHis+8Bfkp96v/ne 2CMjFh8uD9r3Q5GBoT8cmABj5ebUhRc= -----END CERTIFICATE-----Generated at Sat May 10 19:17:24 2025 by rpki-client