$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa File: 5681d306-27a9-32cc-a97a-f708d3e413c7.roa (raw, json) Hash identifier: Zzs5hNDr3ROPCV5hYusEiUobkLF4pGz2372jrmW2/6w= Subject key identifier: C1:3B:95:94:F5:6C:04:4D:A6:39:21:DB:C2:E1:BC:46:5A:B9:90:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849BF3F8E5930DA1A5312190680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 7029 IP address blocks: 209.255.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:8e:59:30:da:1a:53:12:19:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=19491666-de4e-4bea-9b62-40192d109c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:62:82:4e:65:93:02:44:9f:75:20:72:af: c6:cf:6d:b2:9c:7c:8c:55:89:51:bf:95:6b:1a:73: 0d:28:e4:64:38:27:99:68:88:ef:21:69:cf:53:84: aa:a0:16:07:fc:f5:8e:66:c9:bd:0d:d6:8d:6a:ff: 2c:a4:55:8a:a6:cb:30:46:11:56:8d:eb:4f:67:8f: 15:0c:aa:69:af:61:f2:6e:45:4a:f0:47:f1:24:06: 87:51:8f:e1:d9:9c:54:1e:66:82:f2:46:f6:a7:68: a8:80:c5:86:f6:77:14:4a:fd:5c:b5:9f:52:d7:ca: a9:c6:33:a4:7b:b5:de:16:94:ac:19:e7:69:68:33: 37:75:9a:e4:84:d4:c4:6b:58:27:18:d8:16:f6:28: e7:90:db:a5:7c:2e:14:20:4f:45:6d:9b:30:dd:42: 77:b7:9a:c9:e9:d8:9d:aa:69:85:e5:36:92:54:fe: 6e:b4:61:78:9c:3e:58:62:af:e7:52:d2:b9:b4:3a: 50:7b:00:21:38:9a:2a:3b:33:ae:a6:6e:a1:cd:b1: 0f:d3:b4:06:e2:da:5a:76:f6:91:ff:07:d2:11:80: 4a:48:5d:ab:fd:88:c3:a6:b5:a5:d4:a8:fb:a6:70: 3c:80:10:cf:66:ab:d6:fd:40:c5:cb:7d:18:8b:48: 1d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3B:95:94:F5:6C:04:4D:A6:39:21:DB:C2:E1:BC:46:5A:B9:90:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5681d306-27a9-32cc-a97a-f708d3e413c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:19:0e:20:7c:b0:9d:69:f6:ea:3f:7c:5d:27:eb:49:d4:45: 9d:8e:fe:a7:5d:e6:30:e5:9f:1f:f2:9e:91:17:a0:14:37:5e: 9f:30:cb:6f:ec:68:38:d9:e5:35:2e:af:09:c2:ac:90:cd:2f: de:e5:ec:78:5c:5f:c5:59:fb:bc:e7:79:62:3a:13:19:ca:f4: c5:2b:2f:ca:d7:79:55:33:07:74:36:8e:42:0b:b2:9a:dc:bc: af:8c:ac:fa:e4:13:52:3f:1b:ad:41:d1:b2:51:cb:ff:7c:fa: 8a:3d:a7:7b:a2:78:0f:fa:21:45:3c:c2:8c:10:b8:d9:11:1d: 26:ad:2b:39:ee:c9:9a:67:b7:4d:37:7a:c0:b3:16:6a:b3:7b: 51:66:03:42:77:2c:83:b1:d5:f1:b6:d3:db:e9:35:f9:de:3f: c2:7a:35:7d:5d:db:82:7d:22:48:69:45:a2:68:e7:b2:bf:3a: d6:b7:31:6f:06:33:55:f4:9b:ef:90:c5:37:5e:4a:74:e8:a1: 33:d7:65:2d:65:c7:ed:f8:cb:27:25:a5:03:b0:14:8b:f4:91: 9e:00:82:8d:2d:cb:99:c9:5e:36:42:58:bd:ce:13:fe:60:8a: f8:3d:53:6e:49:84:35:f0:64:79:2d:b5:32:a6:dd:3b:a6:f4: 1e:ad:44:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P45ZMNoaUxIZBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk MTk0OTE2NjYtZGU0ZS00YmVhLTliNjItNDAxOTJkMTA5Yzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhBigk5lkwJEn3Ugcq/Gz22ynHyMVYlRv5Vr GnMNKORkOCeZaIjvIWnPU4SqoBYH/PWOZsm9DdaNav8spFWKpsswRhFWjetPZ48V DKppr2HybkVK8EfxJAaHUY/h2ZxUHmaC8kb2p2iogMWG9ncUSv1ctZ9S18qpxjOk e7XeFpSsGedpaDM3dZrkhNTEa1gnGNgW9ijnkNulfC4UIE9FbZsw3UJ3t5rJ6did qmmF5TaSVP5utGF4nD5YYq/nUtK5tDpQewAhOJoqOzOupm6hzbEP07QG4tpadvaR /wfSEYBKSF2r/YjDprWl1Kj7pnA8gBDPZqvW/UDFy30Yi0gdUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFME7lZT1bARNpjkh28LhvEZauZDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY4MWQzMDYtMjdhOS0z MmNjLWE5N2EtZjcwOGQzZTQxM2M3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f/NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAZDiB8sJ1p9uo/fF0n60nURZ2O/qdd5jDlnx/ynpEXoBQ3Xp8wy2/s aDjZ5TUurwnCrJDNL97l7HhcX8VZ+7zneWI6ExnK9MUrL8rXeVUzB3Q2jkILsprc vK+MrPrkE1I/G61B0bJRy/98+oo9p3uieA/6IUU8wowQuNkRHSatKznuyZpnt003 esCzFmqze1FmA0J3LIOx1fG209vpNfneP8J6NX1d24J9IkhpRaJo57K/Ota3MW8G M1X0m++QxTdeSnTooTPXZS1lx+34yyclpQOwFIv0kZ4Ago0ty5nJXjZCWL3OE/5g ivg9U25JhDXwZHkttTKm3Tum9B6tRE4= -----END CERTIFICATE-----Generated at Sat May 10 13:14:30 2025 by rpki-client