$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa File: 39a32451-9a04-30e0-93d2-78eeb318af4d.roa (raw, json) Hash identifier: F5wZ9C2lbygEhz31OIqxbmPt3dhQqhYM6WKWE0/PrWY= Subject key identifier: 16:B5:70:B7:D5:5B:F4:29:86:19:13:73:1A:04:8D:46:99:58:05:27 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3AFB670E343A6B370940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 65.23.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:fb:67:0e:34:3a:6b:37:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=dc535a3f-e524-4564-b17f-e66efe725ffd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c8:dc:dd:9d:e3:b9:fb:ee:30:ea:b7:72:a2: 63:ab:e9:b6:a8:18:25:b6:7e:fd:10:6f:8b:39:8d: e5:c2:7e:68:3c:7b:6d:98:b8:73:fb:99:29:41:6c: c5:b1:b3:9c:cf:df:15:6e:b2:f2:d3:80:41:e5:8a: a2:d6:59:bc:34:d5:e9:26:f4:cc:4f:f7:67:ae:11: bf:1a:39:63:05:5f:4c:91:c9:4e:78:1d:d5:36:ea: 26:45:b8:75:d7:bd:63:61:c6:64:ed:29:65:c9:74: 32:93:07:02:20:54:f5:30:8d:cd:eb:33:02:08:9e: dc:0d:e8:ed:79:21:76:76:3c:47:83:73:39:7a:e0: 5c:6d:46:fe:69:14:a3:b2:e6:81:c4:69:55:89:33: a9:86:db:a6:85:68:76:9e:3f:1a:fd:f3:e6:a3:a4: 10:93:e1:a6:ef:2c:3d:90:52:48:c1:b9:17:15:d8: 14:e2:30:d3:fa:5f:b4:63:d3:a9:7a:fb:63:0c:62: 6d:de:0c:f3:dd:76:d4:62:6e:48:44:63:86:0f:d9: 77:c7:60:4b:83:0c:2d:97:ad:fa:12:a1:f0:60:47: 22:63:08:d0:2d:2f:10:27:b2:05:ed:97:c2:dc:6a: ea:d7:8a:96:bc:c6:01:3f:17:dc:43:ba:e3:4d:0e: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:70:B7:D5:5B:F4:29:86:19:13:73:1A:04:8D:46:99:58:05:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39a32451-9a04-30e0-93d2-78eeb318af4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 65.23.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:68:b2:63:81:7e:0d:63:56:bb:af:25:e8:0b:90:c6:c4:73: 05:a0:4c:bb:d1:80:8e:11:8a:c1:35:b1:70:2b:c6:b3:d7:92: b1:84:3e:09:7f:b5:f3:c6:67:01:47:94:a7:02:b9:f1:e4:ac: 37:f2:62:ed:88:0e:57:0c:4a:b8:bc:35:84:1a:ab:f0:e1:57: 1d:32:68:5f:57:b9:3f:d8:c0:2d:6f:7f:df:36:4e:4c:95:ae: fa:73:c2:b6:15:63:52:16:93:28:0f:e6:09:d0:80:9c:4e:90: 09:a9:06:0e:8a:fb:ef:ef:8a:8b:b5:92:78:4a:62:38:6f:cf: a7:0a:1a:17:0d:ce:e6:85:b5:f4:41:4b:e0:21:91:7b:07:0b: 7f:8e:e9:55:ca:7d:bf:69:4d:03:00:51:12:3c:d9:b3:a6:11: e2:c2:2c:68:f4:02:fe:2b:c4:d1:d1:44:cd:45:85:ed:9e:e0: 84:10:ee:96:cf:1d:1c:da:15:c9:14:ac:29:f5:6e:51:ef:6b: 69:c2:15:ed:19:ff:96:f8:1e:ae:df:92:c5:97:b7:13:82:2f: d5:c4:42:46:dd:18:1e:ed:86:6e:b9:9d:be:c6:c1:2e:93:1e: 12:2a:b8:0c:c2:14:bd:48:99:76:9c:1b:33:68:cb:6e:2d:ac: 77:78:7f:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjr7Zw40Oms3CUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZGM1MzVhM2YtZTUyNC00NTY0LWIxN2YtZTY2ZWZlNzI1ZmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcjc3Z3jufvuMOq3cqJjq+m2qBgltn79EG+L OY3lwn5oPHttmLhz+5kpQWzFsbOcz98VbrLy04BB5Yqi1lm8NNXpJvTMT/dnrhG/ GjljBV9MkclOeB3VNuomRbh1171jYcZk7SllyXQykwcCIFT1MI3N6zMCCJ7cDejt eSF2djxHg3M5euBcbUb+aRSjsuaBxGlViTOphtumhWh2nj8a/fPmo6QQk+Gm7yw9 kFJIwbkXFdgU4jDT+l+0Y9OpevtjDGJt3gzz3XbUYm5IRGOGD9l3x2BLgwwtl636 EqHwYEciYwjQLS8QJ7IF7ZfC3Grq14qWvMYBPxfcQ7rjTQ5beQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBa1cLfVW/QphhkTcxoEjUaZWAUnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzlhMzI0NTEtOWEwNC0z MGUwLTkzZDItNzhlZWIzMThhZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQRcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAposmOBfg1jVruvJegLkMbEcwWgTLvRgI4RisE1sXArxrPXkrGEPgl/ tfPGZwFHlKcCufHkrDfyYu2IDlcMSri8NYQaq/DhVx0yaF9XuT/YwC1vf982TkyV rvpzwrYVY1IWkygP5gnQgJxOkAmpBg6K++/viou1knhKYjhvz6cKGhcNzuaFtfRB S+AhkXsHC3+O6VXKfb9pTQMAURI82bOmEeLCLGj0Av4rxNHRRM1Fhe2e4IQQ7pbP HRzaFckUrCn1blHva2nCFe0Z/5b4Hq7fksWXtxOCL9XEQkbdGB7thm65nb7GwS6T HhIquAzCFL1ImXacGzNoy24trHd4fy8= -----END CERTIFICATE-----Generated at Mon May 12 06:43:16 2025 by rpki-client