$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa File: 41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa (raw, json) Hash identifier: m4zluTQRfQ3UEpPFqriEaRk397wbKb4X6ZqGGgzhfG8= Subject key identifier: 7A:8C:6C:A4:2B:A1:9F:D0:DF:6F:E7:75:1F:6E:CE:8F:79:C3:C4:C2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A2627D6CEA8B9CA2BBFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 32019 IP address blocks: 205.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:26:27:d6:ce:a8:b9:ca:2b:bf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d2ad5b8d-851f-4294-bf14-ef949f3bdabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7b:53:02:f2:f9:45:16:97:1f:73:9f:85:f9: e7:58:fb:4c:56:28:5a:70:5e:e3:80:91:ad:86:28: b1:b1:23:43:d5:19:fd:26:dd:02:17:35:ea:81:37: a2:03:02:df:ae:53:58:31:e4:a5:fe:00:df:2a:d5: bb:18:06:0a:3c:66:09:3d:16:e3:93:94:6d:31:62: ba:d1:28:88:b5:23:ef:16:23:7d:a5:6f:92:77:eb: c0:80:ae:a5:9e:92:2b:8f:ed:dd:a9:74:9b:b1:09: 54:3e:1f:a2:0f:0b:30:4b:ef:19:65:b2:a5:ac:22: c6:bd:6f:9f:ec:63:92:0d:ac:5b:3a:03:8c:eb:4f: b2:ce:48:1b:e0:43:12:4e:22:5c:30:e9:34:5c:7e: 9a:be:5d:9c:50:f2:30:f3:c0:17:14:e0:a6:d9:0c: bc:ca:9e:e8:34:6b:80:7c:60:e8:6f:2e:aa:3b:d5: 64:3a:e2:e4:9a:aa:8a:d0:9b:03:9e:82:50:80:55: a9:f3:23:11:5d:83:e5:03:a2:ba:76:28:d4:a0:00: af:7c:b0:f5:85:7c:2c:6a:65:b3:14:8e:61:d5:e2: 12:d6:15:23:68:3b:d3:c8:92:56:4d:21:08:aa:dd: 9f:d2:73:28:95:14:c8:f8:52:68:8e:a5:33:bd:f1: c0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:8C:6C:A4:2B:A1:9F:D0:DF:6F:E7:75:1F:6E:CE:8F:79:C3:C4:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/41e9880a-2ae9-3a4b-a7b5-e56afc99c017.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.232.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c1:aa:35:79:ac:ec:20:3d:d3:0a:ce:7d:04:14:f3:90:02: c8:a3:63:30:67:c4:79:26:a0:b9:40:14:24:97:d3:31:63:74: 8b:86:0b:15:d3:ff:09:c1:71:29:f0:df:85:cb:44:28:e5:fe: a8:7b:58:2e:d2:b4:f5:f4:e6:cf:53:2d:35:55:9c:0c:2a:62: da:66:2b:7f:b3:61:7c:59:26:5f:83:74:8f:6a:cd:b0:9b:ed: f0:36:26:93:c2:2f:09:ef:68:6f:c4:04:b4:f5:e6:26:a4:67: d1:e2:43:78:3b:67:01:76:04:a5:4a:a8:ed:46:35:d5:53:23: de:e1:8a:a0:15:69:f2:aa:19:d1:87:26:db:9f:a6:22:27:f7: 81:c9:99:a4:0b:d0:7a:69:80:28:74:84:54:26:eb:8b:c4:c5: 23:90:6a:5c:ae:45:7b:24:9d:8f:b6:d2:91:b7:00:47:a0:a3: e5:3c:7a:13:c1:68:52:82:ea:44:45:21:12:c0:47:d8:2f:e8: cc:f6:02:e2:8f:2a:8b:4b:41:a6:0e:d5:12:b0:08:bd:6f:a2: a6:e8:c7:a1:b0:30:18:9b:3f:03:72:68:bc:0a:d5:4a:3a:cd: 77:56:db:f4:b1:93:37:e3:ac:f8:66:80:ee:3b:a6:d5:37:3e: cf:6f:20:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiYn1s6oucorv8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDJhZDViOGQtODUxZi00Mjk0LWJmMTQtZWY5NDlmM2JkYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXtTAvL5RRaXH3OfhfnnWPtMVihacF7jgJGt hiixsSND1Rn9Jt0CFzXqgTeiAwLfrlNYMeSl/gDfKtW7GAYKPGYJPRbjk5RtMWK6 0SiItSPvFiN9pW+Sd+vAgK6lnpIrj+3dqXSbsQlUPh+iDwswS+8ZZbKlrCLGvW+f 7GOSDaxbOgOM60+yzkgb4EMSTiJcMOk0XH6avl2cUPIw88AXFOCm2Qy8yp7oNGuA fGDoby6qO9VkOuLkmqqK0JsDnoJQgFWp8yMRXYPlA6K6dijUoACvfLD1hXwsamWz FI5h1eIS1hUjaDvTyJJWTSEIqt2f0nMolRTI+FJojqUzvfHAlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqMbKQroZ/Q32/ndR9uzo95w8TCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDFlOTg4MGEtMmFlOS0z YTRiLWE3YjUtZTU2YWZjOTljMDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzegmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDBqjV5rOwgPdMKzn0EFPOQAsijYzBnxHkmoLlAFCSX0zFjdIuGCxXT /wnBcSnw34XLRCjl/qh7WC7StPX05s9TLTVVnAwqYtpmK3+zYXxZJl+DdI9qzbCb 7fA2JpPCLwnvaG/EBLT15iakZ9HiQ3g7ZwF2BKVKqO1GNdVTI97hiqAVafKqGdGH JtufpiIn94HJmaQL0HppgCh0hFQm64vExSOQalyuRXsknY+20pG3AEego+U8ehPB aFKC6kRFIRLAR9gv6Mz2AuKPKotLQaYO1RKwCL1voqbox6GwMBibPwNyaLwK1Uo6 zXdW2/SxkzfjrPhmgO47ptU3Ps9vIMY= -----END CERTIFICATE-----Generated at Sat May 10 11:45:34 2025 by rpki-client