$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa File: 3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa (raw, json) Hash identifier: csPS9UkyIJeR0oCapvj/tNgI06slqym8JL83HLvT5E4= Subject key identifier: CD:D9:AA:8D:56:1E:EE:CA:BA:32:F2:6A:7B:DD:75:51:F8:3B:86:8B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A48CB8C6E7F08B6813600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 19389 IP address blocks: 63.138.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:cb:8c:6e:7f:08:b6:81:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2eb35798-c66a-4571-9ae7-95d46a826585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:76:de:68:3d:17:60:00:b8:ff:03:75:07: 76:04:7d:49:84:68:04:cd:21:4e:e0:d6:06:85:cd: 05:04:39:2b:90:aa:39:bb:31:92:a0:0e:13:15:bc: f2:45:eb:4e:b7:eb:79:9f:8e:c8:f7:e5:d7:a8:6d: 7e:a5:f0:c8:45:81:2d:bd:85:8b:c0:b5:9f:73:49: fc:82:4d:3b:3e:d6:0d:c6:92:e3:88:89:21:e5:8e: 26:87:3b:60:63:6e:7f:58:cf:b3:18:45:65:0a:a9: 4a:32:96:2a:f2:b9:2d:c3:62:a8:4e:32:d4:5b:7a: e6:59:0a:a2:e1:83:f2:64:67:88:ee:e0:0b:6e:f5: 3e:7b:32:1e:5f:f0:06:32:8d:ef:08:d2:57:56:20: a9:e1:b6:4c:3d:1d:0b:cf:79:17:06:fe:39:78:e1: 85:62:d4:a3:11:b5:50:99:28:02:c8:1c:7b:c2:84: 52:c3:6c:ac:a1:74:72:99:16:1a:6b:42:d0:12:cb: 82:1d:cf:86:07:79:7c:9d:3d:8b:b5:91:31:c5:3e: 44:e9:8d:e6:36:00:4f:75:9f:5e:e5:8f:77:06:46: 65:6f:35:b5:71:46:b7:1b:7e:74:94:b5:58:d8:12: fb:ab:37:b6:28:bb:1d:1c:c8:5a:89:37:84:d2:f7: 79:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D9:AA:8D:56:1E:EE:CA:BA:32:F2:6A:7B:DD:75:51:F8:3B:86:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3b1b5a88-e7ef-3953-a90e-6aec787fab04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:4f:f0:c3:eb:ea:e2:a5:b4:d1:f9:f2:c4:88:61:01:f5:6b: 84:41:c9:80:59:03:12:1a:60:99:f8:a2:ea:f1:6f:a9:02:10: 7e:41:b0:02:e4:07:1d:eb:fa:e9:dd:e4:a8:fb:80:1f:30:9d: 06:f1:ef:73:74:06:48:90:c2:4d:38:e7:58:b8:2e:87:e7:28: ab:42:5d:38:9a:cd:16:31:b5:3c:62:3e:8f:69:33:e5:69:32: e9:70:29:51:84:79:5e:8f:5c:b9:a3:6f:40:53:a3:fd:dd:85: 8c:73:f5:d9:d3:46:df:26:0a:05:a4:3a:5d:22:76:f7:c9:95: 81:62:22:06:b8:1a:19:1b:71:b0:33:d1:31:e5:81:1c:59:d7: 84:cb:75:c1:0f:84:a3:8e:a8:bb:91:54:ed:f5:6d:a8:53:ea: ca:67:6f:ca:b8:76:16:76:95:f1:33:ef:c6:c0:87:c4:68:a2: 95:7a:e5:d5:5d:01:65:b9:89:de:02:e0:a5:30:08:cc:dc:c9: 82:63:b6:e4:c5:bc:91:b6:f8:4a:f7:66:1d:76:a9:3f:d8:3b: e9:51:53:47:ec:87:94:f1:a7:84:ea:6d:d3:75:a5:57:9f:d2: d9:32:f2:6e:0d:a6:2b:f6:0f:15:ba:7e:be:74:1a:0c:2e:5c: 35:9b:45:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkjLjG5/CLaBNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmViMzU3OTgtYzY2YS00NTcxLTlhZTctOTVkNDZhODI2NTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEV23mg9F2AAuP8DdQd2BH1JhGgEzSFO4NYG hc0FBDkrkKo5uzGSoA4TFbzyRetOt+t5n47I9+XXqG1+pfDIRYEtvYWLwLWfc0n8 gk07PtYNxpLjiIkh5Y4mhztgY25/WM+zGEVlCqlKMpYq8rktw2KoTjLUW3rmWQqi 4YPyZGeI7uALbvU+ezIeX/AGMo3vCNJXViCp4bZMPR0Lz3kXBv45eOGFYtSjEbVQ mSgCyBx7woRSw2ysoXRymRYaa0LQEsuCHc+GB3l8nT2LtZExxT5E6Y3mNgBPdZ9e 5Y93BkZlbzW1cUa3G350lLVY2BL7qze2KLsdHMhaiTeE0vd5BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3Zqo1WHu7KujLyanvddVH4O4aLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2IxYjVhODgtZTdlZi0z OTUzLWE5MGUtNmFlYzc4N2ZhYjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4peMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFP8MPr6uKltNH58sSIYQH1a4RByYBZAxIaYJn4ourxb6kCEH5BsALk Bx3r+und5Kj7gB8wnQbx73N0BkiQwk0451i4LofnKKtCXTiazRYxtTxiPo9pM+Vp MulwKVGEeV6PXLmjb0BTo/3dhYxz9dnTRt8mCgWkOl0idvfJlYFiIga4GhkbcbAz 0THlgRxZ14TLdcEPhKOOqLuRVO31bahT6spnb8q4dhZ2lfEz78bAh8RoopV65dVd AWW5id4C4KUwCMzcyYJjtuTFvJG2+Er3Zh12qT/YO+lRU0fsh5Txp4TqbdN1pVef 0tky8m4Npiv2DxW6fr50GgwuXDWbRUo= -----END CERTIFICATE-----Generated at Sun May 11 01:36:01 2025 by rpki-client