$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a7153-bac8-30e0-ae13-90ac101522d1.roa File: 241a7153-bac8-30e0-ae13-90ac101522d1.roa (raw, json) Hash identifier: DCvTqQBnFXDwVth2ANPQMXPN/cbtMLwNm+GUMkIIHrg= Subject key identifier: 6A:8D:03:D9:F4:F5:69:81:ED:5C:01:52:9D:73:1D:62:B8:2D:C5:41 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A43F216B398E8BCD3D668 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a7153-bac8-30e0-ae13-90ac101522d1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.92.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:43:f2:16:b3:98:e8:bc:d3:d6:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7f8bdbfa-aa16-4a7e-aa89-eaa187bc57d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:34:89:de:c4:00:b2:b2:14:93:3a:33:b6:46: 71:f5:c2:bd:5a:b4:62:c4:b7:bf:75:f8:0b:c1:b7: 3b:e7:ad:2b:0b:be:76:b8:73:15:e6:14:71:a5:67: f3:4b:f7:c0:ba:8e:9e:91:09:72:bb:a1:5e:59:76: 65:b3:4d:93:97:cb:91:64:c7:9b:51:f1:ec:ed:d0: 0c:0f:86:bc:a3:30:fe:56:7d:a1:37:0c:c5:d2:11: 9b:e3:9c:2d:6b:05:5a:b3:2d:9a:f2:d0:96:85:32: 98:ab:8d:ac:eb:05:e0:eb:81:e3:65:02:82:63:da: a1:b9:53:d5:a7:69:1f:cb:a2:fb:fe:a1:7a:39:16: d1:7d:ac:b0:69:41:81:f0:a0:0e:ad:b3:05:67:c9: 95:bf:d5:74:5a:5e:cf:81:87:2a:86:9c:46:15:d3: 1a:a7:92:c3:67:b1:34:16:c6:dd:23:00:44:c1:ba: 27:5c:a5:b1:9b:32:45:9d:e3:c3:ab:ae:96:5e:39: 3f:7d:14:ad:5e:80:a2:2e:6e:46:2b:64:8f:12:0a: db:ba:b5:44:9d:10:aa:17:c3:28:23:5b:d3:31:fa: ab:9c:a3:17:bf:b2:c8:b1:48:5f:18:71:2a:c2:e6: 11:04:a9:c4:6e:c7:98:9d:ec:a8:41:5b:25:6e:ef: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:8D:03:D9:F4:F5:69:81:ED:5C:01:52:9D:73:1D:62:B8:2D:C5:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/241a7153-bac8-30e0-ae13-90ac101522d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5d:9e:50:9e:11:85:a0:ad:23:4f:07:eb:b7:3c:87:b5:f6: 32:84:7c:a9:1f:e9:10:56:b0:2e:1d:86:80:94:cc:7d:ab:c8: 1c:e1:8f:88:2e:33:56:66:84:03:e4:7c:09:89:2e:ec:3d:fa: 5a:dc:ce:fc:76:40:98:af:9e:ac:57:69:c5:da:b7:67:85:31: e1:3f:8c:04:48:f3:94:91:3a:e0:a2:de:3f:ce:4f:f0:8e:b5: d8:19:a3:1c:38:f7:ab:04:c9:33:21:6a:64:cd:4f:53:49:94: 6e:98:3e:18:fc:29:17:c7:38:d7:e3:c8:42:ac:db:11:fe:c4: 6c:77:89:5b:68:93:73:b4:6e:49:5f:ff:7f:3c:86:b9:68:85: 3d:4c:7d:86:85:87:9f:c7:a7:5a:6a:a4:8e:15:d2:45:63:fa: ac:de:7d:29:a2:de:c7:11:00:57:8c:07:51:d9:e6:0a:55:fb: 25:38:16:bb:a5:92:b9:36:a4:19:39:69:8b:b7:96:69:a9:ad: 6b:1a:d8:51:2d:26:7d:4b:95:d5:48:17:f5:b6:8e:54:45:09: b4:3b:28:9a:81:5f:26:ff:e6:95:77:dc:df:df:66:16:98:eb: 5b:74:90:0e:40:c8:3b:7e:ce:d3:4c:eb:20:e4:ed:d2:86:e0: 4d:6a:86:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkPyFrOY6LzT1mgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2Y4YmRiZmEtYWExNi00YTdlLWFhODktZWFhMTg3YmM1N2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDSJ3sQAsrIUkzoztkZx9cK9WrRixLe/dfgL wbc7560rC752uHMV5hRxpWfzS/fAuo6ekQlyu6FeWXZls02Tl8uRZMebUfHs7dAM D4a8ozD+Vn2hNwzF0hGb45wtawVasy2a8tCWhTKYq42s6wXg64HjZQKCY9qhuVPV p2kfy6L7/qF6ORbRfaywaUGB8KAOrbMFZ8mVv9V0Wl7PgYcqhpxGFdMap5LDZ7E0 FsbdIwBEwbonXKWxmzJFnePDq66WXjk/fRStXoCiLm5GK2SPEgrburVEnRCqF8Mo I1vTMfqrnKMXv7LIsUhfGHEqwuYRBKnEbseYneyoQVslbu8PgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqNA9n09WmB7VwBUp1zHWK4LcVBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjQxYTcxNTMtYmFjOC0z MGUwLWFlMTMtOTBhYzEwMTUyMmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0VzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1dnlCeEYWgrSNPB+u3PIe19jKEfKkf6RBWsC4dhoCUzH2ryBzhj4gu M1ZmhAPkfAmJLuw9+lrczvx2QJivnqxXacXat2eFMeE/jARI85SROuCi3j/OT/CO tdgZoxw496sEyTMhamTNT1NJlG6YPhj8KRfHONfjyEKs2xH+xGx3iVtok3O0bklf /388hrlohT1MfYaFh5/Hp1pqpI4V0kVj+qzefSmi3scRAFeMB1HZ5gpV+yU4Frul krk2pBk5aYu3lmmprWsa2FEtJn1LldVIF/W2jlRFCbQ7KJqBXyb/5pV33N/fZhaY 61t0kA5AyDt+ztNM6yDk7dKG4E1qhgY= -----END CERTIFICATE-----Generated at Sun May 11 09:32:00 2025 by rpki-client