$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36d6678b-ec38-3968-82da-f9325bbe2f0f.roa File: 36d6678b-ec38-3968-82da-f9325bbe2f0f.roa (raw, json) Hash identifier: l8gZI8y3Q7/AOkuhM2L3FGUuz+oj2n3++3gPZ4eOBCM= Subject key identifier: BD:65:F6:D2:D1:56:0E:9E:8D:D3:29:B1:4F:39:FE:3E:78:35:96:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A20FC07EA6C481D786200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36d6678b-ec38-3968-82da-f9325bbe2f0f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7252 IP address blocks: 199.195.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:20:fc:07:ea:6c:48:1d:78:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=336cc226-0373-4425-acbe-0d6e45dbc1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:bc:36:8c:ea:99:3b:6e:9c:39:02:b5:a1:08: 4f:f6:cf:1f:e9:04:6b:be:ec:82:54:7c:af:ce:88: 17:0c:95:f7:0f:ff:a6:f3:3e:13:58:fd:f3:d1:65: 6d:cc:14:4d:a7:ec:45:9f:ac:cd:13:5a:70:e0:2b: cd:d7:af:62:09:b9:b8:a9:7e:10:13:75:04:06:d3: f6:91:93:63:8a:82:e0:90:96:4f:57:83:99:11:e5: df:da:6b:e9:9b:a8:5b:1e:72:7a:37:f5:32:71:b3: dc:7d:5e:3b:ac:31:9b:a3:71:b3:1f:32:75:36:00: b3:6e:35:1a:6b:fd:9e:12:3d:a7:c6:5b:98:0e:e6: ac:b6:5d:6f:d4:e5:c1:58:0b:b2:26:42:dd:4f:80: 4f:e7:4c:f8:41:47:63:93:21:fd:1f:95:91:4e:35: 95:af:63:10:91:00:71:43:0d:fd:8a:42:dd:ec:bd: 53:0f:c1:e6:54:4c:94:1d:c1:09:5e:bd:b1:6b:f7: ff:75:12:23:76:86:93:b8:1e:73:71:0d:9e:91:38: 3b:90:04:60:f0:91:61:0e:6d:ab:2f:ad:38:62:e9: e3:33:2d:df:80:be:ca:dc:3d:2e:3d:2c:e1:51:69: 10:df:a8:96:fc:22:3b:24:a7:cd:98:42:69:cb:7d: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:65:F6:D2:D1:56:0E:9E:8D:D3:29:B1:4F:39:FE:3E:78:35:96:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/36d6678b-ec38-3968-82da-f9325bbe2f0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 199.195.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:b0:b4:73:fb:9b:b8:ec:dd:52:44:b9:f5:3c:02:07:61:8b: 25:0d:8c:9b:76:3c:36:48:b0:e4:54:a2:17:c2:83:24:e8:0c: 81:8a:e1:3e:c3:f5:9b:92:3a:6f:d4:c5:33:d5:70:7b:6a:60: 61:e4:7c:f0:2b:d5:4a:ad:83:ec:b1:3a:1a:72:73:73:a7:03: 22:eb:7f:45:2b:4a:83:dd:fa:46:fa:de:83:95:6f:9a:f3:d9: 36:46:42:e8:33:a7:72:4f:31:08:93:f2:f9:63:9d:5b:6d:ca: ef:09:e8:ae:7d:d9:3e:04:58:f3:2a:35:77:b5:c9:c2:bb:45: 12:25:e8:94:c9:0d:6b:fa:ed:29:f5:69:cc:42:ee:b6:82:03: a4:12:51:80:b3:c7:d5:26:06:3f:b3:24:a9:a7:2c:63:08:93: 72:0d:01:7e:fa:46:81:27:8e:8e:99:cd:cb:34:e1:c8:f2:f4: 86:a9:5f:84:f0:b6:97:5e:22:72:60:1b:7b:85:d6:2d:fe:2b: 92:8c:4b:30:4f:02:fb:fb:b8:c7:c4:be:16:dd:36:a2:f8:2c: 8c:f0:93:0b:37:9e:32:7c:4f:d4:a3:bf:d1:f3:04:e7:70:7b: c6:c3:4d:25:3c:68:08:9d:dd:db:8a:fd:8b:03:ed:2a:d6:58: 61:45:71:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiD8B+psSB14YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzM2Y2MyMjYtMDM3My00NDI1LWFjYmUtMGQ2ZTQ1ZGJjMWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibw2jOqZO26cOQK1oQhP9s8f6QRrvuyCVHyv zogXDJX3D/+m8z4TWP3z0WVtzBRNp+xFn6zNE1pw4CvN169iCbm4qX4QE3UEBtP2 kZNjioLgkJZPV4OZEeXf2mvpm6hbHnJ6N/UycbPcfV47rDGbo3GzHzJ1NgCzbjUa a/2eEj2nxluYDuastl1v1OXBWAuyJkLdT4BP50z4QUdjkyH9H5WRTjWVr2MQkQBx Qw39ikLd7L1TD8HmVEyUHcEJXr2xa/f/dRIjdoaTuB5zcQ2ekTg7kARg8JFhDm2r L604YunjMy3fgL7K3D0uPSzhUWkQ36iW/CI7JKfNmEJpy32QAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1l9tLRVg6ejdMpsU85/j54NZZRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzZkNjY3OGItZWMzOC0z OTY4LTgyZGEtZjkzMjViYmUyZjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx8PzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+wtHP7m7js3VJEufU8AgdhiyUNjJt2PDZIsORUohfCgyToDIGK4T7D 9ZuSOm/UxTPVcHtqYGHkfPAr1Uqtg+yxOhpyc3OnAyLrf0UrSoPd+kb63oOVb5rz 2TZGQugzp3JPMQiT8vljnVttyu8J6K592T4EWPMqNXe1ycK7RRIl6JTJDWv67Sn1 acxC7raCA6QSUYCzx9UmBj+zJKmnLGMIk3INAX76RoEnjo6Zzcs04cjy9IapX4Tw tpdeInJgG3uF1i3+K5KMSzBPAvv7uMfEvhbdNqL4LIzwkws3njJ8T9Sjv9HzBOdw e8bDTSU8aAid3duK/YsD7SrWWGFFcUI= -----END CERTIFICATE-----Generated at Sat May 10 13:35:59 2025 by rpki-client