$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa File: 3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa (raw, json) Hash identifier: gRN+W5GsXFtYQ28Z1AFX/ndplRJ37v0rDtZ2CcVRcXo= Subject key identifier: 14:94:E5:EF:9F:98:10:50:9E:C0:1B:53:B7:DC:3A:0B:97:A9:A6:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A15A96AD3F6B0942CDD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 139.55.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:15:a9:6a:d3:f6:b0:94:2c:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fab2ce48-3d38-455d-8a49-9cecfae5893d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3d:20:c5:62:2f:86:7f:73:4b:ac:6d:15:b2: 77:0d:8d:3f:a1:9c:e8:17:f5:02:df:d6:97:39:b1: 0a:2a:fa:00:92:e7:ee:23:88:e8:00:b2:21:02:75: be:76:03:05:2e:26:e8:8e:5f:c5:6f:0a:90:91:9b: 71:ca:bb:0e:9e:77:55:cb:a1:2e:c2:19:d1:f4:15: bb:76:98:ac:3a:45:d5:75:d9:cd:de:ca:03:4a:3e: de:7a:04:c3:a8:2d:0d:5c:0a:cc:44:3e:39:35:ee: 62:39:4f:31:83:6c:cf:9e:17:83:58:42:4f:be:3f: f5:43:77:b1:41:11:75:ca:72:d1:a9:ee:fb:d6:ba: b5:39:aa:af:60:dc:52:aa:70:2d:fe:61:3f:73:d9: 87:34:12:ab:1c:43:ab:a7:fd:cc:a7:55:65:bd:f2: d6:c3:5d:08:22:3c:05:a6:1e:c0:ac:67:14:45:e5: 76:f2:fb:60:0c:ad:31:50:5a:a3:be:4e:f7:21:99: 7e:7a:53:76:2a:f5:71:8e:fc:d9:94:a0:bb:63:b3: 61:b8:85:0b:b7:2c:a2:e5:92:cd:00:bd:fd:bf:53: 91:1a:52:56:72:e6:8e:6a:5b:13:c4:96:59:9d:71: 4c:e1:4b:bd:8b:06:50:95:27:95:7d:a9:7e:c2:e0: 43:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:94:E5:EF:9F:98:10:50:9E:C0:1B:53:B7:DC:3A:0B:97:A9:A6:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3bfe83f2-c885-35f1-b7e2-f90cf77fad87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:87:da:c1:5b:db:4b:29:39:5f:1b:0e:b9:d5:04:cd:5b:33: 7e:67:0d:74:e2:bf:8e:a9:46:06:15:63:04:7f:4a:b7:10:65: 27:91:ac:e2:ca:9f:7c:f2:41:36:6d:3a:2c:15:2d:dd:5b:3d: c8:f7:8a:75:8c:a1:a8:c7:51:ad:41:cb:61:03:64:34:df:30: 87:34:85:d1:de:9f:c2:3a:9b:7c:0e:99:95:1c:d9:d9:52:b0: 59:74:00:51:30:77:d2:98:e7:b4:91:e5:ca:5f:b9:0a:84:be: 16:41:3d:08:e1:27:28:f9:77:64:e7:61:c1:3b:39:b5:f3:a7: 89:c4:6d:e1:a2:2e:36:db:e5:cb:5c:ca:75:b8:0d:d2:36:97: 72:24:6d:96:2f:31:25:c1:fa:84:42:13:a5:eb:0d:30:45:82: d6:38:2e:58:b4:06:9d:3d:8a:7a:8f:f9:e8:75:7d:af:4d:b5: a0:f9:77:00:af:08:15:9a:d7:fb:7d:bc:5c:f4:95:27:d5:06: df:09:c0:a0:d5:0e:40:27:7c:d8:a3:4a:3c:44:84:ca:b4:52: d2:c5:c3:a2:e1:b9:f6:83:28:03:cc:e3:14:0f:1d:82:c9:7c: 74:87:ee:ac:59:49:8e:f6:57:93:1c:f9:31:b4:8e:0f:ef:3c: a1:c9:95:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShWpatP2sJQs3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmFiMmNlNDgtM2QzOC00NTVkLThhNDktOWNlY2ZhZTU4OTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjT0gxWIvhn9zS6xtFbJ3DY0/oZzoF/UC39aX ObEKKvoAkufuI4joALIhAnW+dgMFLibojl/FbwqQkZtxyrsOnndVy6EuwhnR9BW7 dpisOkXVddnN3soDSj7eegTDqC0NXArMRD45Ne5iOU8xg2zPnheDWEJPvj/1Q3ex QRF1ynLRqe771rq1OaqvYNxSqnAt/mE/c9mHNBKrHEOrp/3Mp1VlvfLWw10IIjwF ph7ArGcUReV28vtgDK0xUFqjvk73IZl+elN2KvVxjvzZlKC7Y7NhuIULtyyi5ZLN AL39v1ORGlJWcuaOalsTxJZZnXFM4Uu9iwZQlSeVfal+wuBDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSU5e+fmBBQnsAbU7fcOguXqaZgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2JmZTgzZjItYzg4NS0z NWYxLWI3ZTItZjkwY2Y3N2ZhZDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCizfoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGH2sFb20spOV8bDrnVBM1bM35nDXTiv46pRgYVYwR/SrcQZSeRrOLK n3zyQTZtOiwVLd1bPcj3inWMoajHUa1By2EDZDTfMIc0hdHen8I6m3wOmZUc2dlS sFl0AFEwd9KY57SR5cpfuQqEvhZBPQjhJyj5d2TnYcE7ObXzp4nEbeGiLjbb5ctc ynW4DdI2l3IkbZYvMSXB+oRCE6XrDTBFgtY4Lli0Bp09inqP+eh1fa9NtaD5dwCv CBWa1/t9vFz0lSfVBt8JwKDVDkAnfNijSjxEhMq0UtLFw6LhufaDKAPM4xQPHYLJ fHSH7qxZSY72V5Mc+TG0jg/vPKHJlVU= -----END CERTIFICATE-----Generated at Sat May 10 19:31:50 2025 by rpki-client