$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa File: 218756c3-af8c-38b1-b072-6e0e113f26f2.roa (raw, json) Hash identifier: 2L/gAOX6oskMQ+CzVdicjaMLLYlNtvMCiNzavpdKypQ= Subject key identifier: 59:FF:80:3B:9D:F4:91:6D:94:03:D8:9C:18:84:25:3F:7B:16:6F:B4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A179C20A40A14E977E1E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 204.32.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:9c:20:a4:0a:14:e9:77:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=46d256c0-1c84-4148-8ce5-467a8339b0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:74:a0:e3:79:e9:4b:8d:2f:57:da:dd:34:29: 4f:4a:a8:ed:63:29:12:92:f5:14:59:88:35:d6:1c: dd:db:ce:4e:0f:71:83:7e:05:48:e5:72:e1:0a:05: be:89:40:d0:78:d7:c9:6f:60:d7:b6:0f:a1:81:98: 12:44:40:1c:c5:9f:26:42:c6:d4:fc:5a:c2:bb:1c: c5:38:0b:2d:6e:3b:40:6e:b3:0b:aa:b4:78:7e:a2: 2f:db:a1:0c:6f:b5:76:b7:ea:61:5c:ce:39:33:07: 93:2b:39:14:5f:b1:c7:74:c1:de:f5:fc:76:61:b3: 0e:52:f3:16:30:7b:c3:c5:a2:8e:36:fd:6b:d2:11: 6a:06:cf:bd:bf:24:13:a2:8e:fd:9e:ee:de:da:2e: 17:39:74:07:cf:c4:9a:e7:b4:95:4b:7a:a1:4d:f1: 30:47:f3:1a:f7:9e:e7:0f:7e:02:ed:08:8b:de:a1: 9a:6e:ca:7d:e5:c4:89:63:f8:22:72:8a:46:83:9b: 62:89:aa:21:37:14:7a:6d:f4:d3:4f:d7:a6:a6:f1: ee:84:a7:8a:fd:f3:00:49:27:4b:26:b5:7b:4e:ab: 6c:d2:3f:b7:4c:bb:50:99:14:82:b4:e9:83:07:b6: 48:2f:9a:a0:3d:bd:b0:ce:bb:06:8f:4d:ef:5b:b9: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FF:80:3B:9D:F4:91:6D:94:03:D8:9C:18:84:25:3F:7B:16:6F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/218756c3-af8c-38b1-b072-6e0e113f26f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 204.32.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:8d:8f:fd:76:9d:89:59:85:80:e6:23:fc:17:d1:9a:55:f7: da:a3:6a:0f:bb:85:0b:b4:da:ac:d6:59:e6:13:75:97:97:27: a0:d4:5f:12:d4:5a:07:1f:21:87:21:31:bb:bc:8a:e7:39:df: 84:9d:d8:e5:49:e5:84:9a:26:01:18:09:9d:e2:f5:0a:b0:c7: 87:9f:2c:07:00:f1:cd:be:ad:29:8a:d3:64:7b:49:a6:66:ff: fc:37:a7:88:60:8f:37:cf:f5:1e:cd:cb:39:79:f8:cb:d9:d9: 3a:51:aa:cb:17:7e:b9:b3:36:7b:4b:41:d8:b8:b8:74:c8:46: 9d:45:41:e6:5f:c9:d3:58:a0:4b:17:98:6a:5e:33:96:88:c2: d5:5c:69:c5:e3:bd:b0:1c:40:64:96:0a:c1:79:76:11:c6:32: 0e:cc:c2:67:10:5f:32:ad:17:90:3e:76:3d:58:b9:2e:c8:f8: a6:b2:71:28:fb:40:45:b9:29:bd:05:f7:87:9a:b4:06:a4:e1: dd:79:63:d2:e1:46:2f:4f:25:3c:dc:cb:51:8f:ad:fe:f9:f7: 28:b7:0c:b5:b2:af:8d:16:c5:61:a7:aa:d8:44:a1:8a:78:46: 19:5c:e8:de:8d:c5:23:98:71:17:5c:57:5c:b9:3b:63:b4:f7: d7:f0:18:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShecIKQKFOl34eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDZkMjU2YzAtMWM4NC00MTQ4LThjZTUtNDY3YTgzMzliMGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3Sg43npS40vV9rdNClPSqjtYykSkvUUWYg1 1hzd285OD3GDfgVI5XLhCgW+iUDQeNfJb2DXtg+hgZgSREAcxZ8mQsbU/FrCuxzF OAstbjtAbrMLqrR4fqIv26EMb7V2t+phXM45MweTKzkUX7HHdMHe9fx2YbMOUvMW MHvDxaKONv1r0hFqBs+9vyQToo79nu7e2i4XOXQHz8Sa57SVS3qhTfEwR/Ma957n D34C7QiL3qGabsp95cSJY/gicopGg5tiiaohNxR6bfTTT9empvHuhKeK/fMASSdL JrV7Tqts0j+3TLtQmRSCtOmDB7ZIL5qgPb2wzrsGj03vW7n8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn/gDud9JFtlAPYnBiEJT97Fm+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjE4NzU2YzMtYWY4Yy0z OGIxLWIwNzItNmUwZTExM2YyNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACONj/12nYlZhYDmI/wX0ZpV99qjag+7hQu02qzWWeYTdZeXJ6DUXxLU WgcfIYchMbu8iuc534Sd2OVJ5YSaJgEYCZ3i9Qqwx4efLAcA8c2+rSmK02R7SaZm //w3p4hgjzfP9R7Nyzl5+MvZ2TpRqssXfrmzNntLQdi4uHTIRp1FQeZfydNYoEsX mGpeM5aIwtVcacXjvbAcQGSWCsF5dhHGMg7MwmcQXzKtF5A+dj1YuS7I+KaycSj7 QEW5Kb0F94eatAak4d15Y9LhRi9PJTzcy1GPrf759yi3DLWyr40WxWGnqthEoYp4 Rhlc6N6NxSOYcRdcV1y5O2O099fwGEw= -----END CERTIFICATE-----Generated at Fri May 9 08:04:14 2025 by rpki-client