$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587be61b-8463-381f-9048-589a744cd92a.roa File: 587be61b-8463-381f-9048-589a744cd92a.roa (raw, json) Hash identifier: veD1hIp3vh3HhhWH8CbnH933D1dFZC/QyNN0TmiPLUo= Subject key identifier: F9:4A:F0:8F:64:7B:AB:38:96:1E:A7:51:82:56:88:2C:CB:0A:2C:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1AB53D193188D5931C80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587be61b-8463-381f-9048-589a744cd92a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.116.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1a:b5:3d:19:31:88:d5:93:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c78b2e6d-ca57-4b5a-a512-aff46282aaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:12:9d:93:0a:d6:c0:d5:80:d1:2a:0c:7a:f3: 51:4c:60:7a:7a:4e:a8:e5:92:db:7e:2f:14:06:a4: f6:09:2c:22:e0:30:c3:66:f4:f7:bd:0c:bd:f5:4a: 1f:b4:5b:fc:4f:d5:2c:de:8a:2a:61:b2:64:48:1b: b8:ae:3c:bb:84:f1:ac:70:21:e8:34:46:df:2d:18: a8:30:1f:78:57:b5:1d:f9:61:80:17:bc:b9:c3:b3: 45:17:e3:54:53:d2:e7:ae:13:d0:92:44:e5:98:a6: 42:98:ac:3d:7b:0e:15:74:e3:5f:d5:50:2e:34:2f: 92:f5:b0:68:ed:3b:04:81:9d:63:1b:c3:94:af:30: a6:d3:cf:69:67:fc:ef:85:87:f3:30:34:00:a6:74: 30:be:d0:a4:4d:60:7b:4d:95:1b:f1:3e:43:14:e0: fa:3e:15:8f:68:03:57:ef:10:7f:94:43:ba:05:d3: c9:e1:05:0d:76:6f:28:fa:97:e5:76:e5:c4:bf:34: 59:2c:7f:9a:ab:08:1f:db:1b:61:c0:cc:1e:7d:dd: 7b:36:8d:70:91:72:0a:83:9f:3c:ed:9a:d5:61:c6: 3b:61:6e:3e:d3:3f:b1:e8:9e:2a:d2:5f:1e:11:e2: 9c:4b:ed:ad:83:6e:6e:a7:3a:fa:53:4a:a9:bd:f0: cd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4A:F0:8F:64:7B:AB:38:96:1E:A7:51:82:56:88:2C:CB:0A:2C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/587be61b-8463-381f-9048-589a744cd92a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.116.160.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4e:d2:27:26:52:f0:a8:14:e2:7a:d8:27:99:40:a9:fe:2b: 9c:e5:af:cf:cc:3f:1f:1e:d6:d3:1a:da:2a:d7:2c:cc:4f:fe: ca:ec:bd:41:8b:13:cc:c2:03:f7:12:ed:30:7a:b4:81:f2:fe: 94:41:e9:01:99:31:fa:20:bc:aa:cd:29:b7:6a:c8:e9:b1:a9: 88:71:43:b5:8b:bf:24:37:aa:1e:4f:34:7a:6e:84:c1:0d:a8: 90:7f:e7:9b:91:dd:03:1d:be:6a:c0:6a:72:01:eb:55:0a:ea: e7:ec:6e:c3:00:3d:61:83:19:3e:59:aa:b0:f6:af:d3:77:ec: 12:9c:dc:b0:14:51:db:ee:3a:48:13:10:7a:7e:e0:bc:99:7b: ad:17:d1:8e:98:24:52:b6:0e:25:c5:b7:ac:43:d9:ea:ad:ea: 13:30:30:fb:4a:e8:af:ff:c8:70:3a:20:67:a2:66:59:9d:e3: c1:42:2c:4d:40:09:de:13:28:c7:56:a2:6a:e4:90:5e:e1:b0: d6:78:15:ad:4e:27:3b:1b:d8:ef:ab:9b:40:66:c1:b5:42:ec: c8:c9:00:31:e7:eb:6d:4c:ea:be:7a:78:83:84:68:03:c2:b8: 88:8c:0e:6a:c9:b4:6a:7e:46:b5:08:8e:60:57:96:43:79:2c: 3e:2d:0a:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShq1PRkxiNWTHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Yzc4YjJlNmQtY2E1Ny00YjVhLWE1MTItYWZmNDYyODJhYWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxKdkwrWwNWA0SoMevNRTGB6ek6o5ZLbfi8U BqT2CSwi4DDDZvT3vQy99UoftFv8T9Us3ooqYbJkSBu4rjy7hPGscCHoNEbfLRio MB94V7Ud+WGAF7y5w7NFF+NUU9LnrhPQkkTlmKZCmKw9ew4VdONf1VAuNC+S9bBo 7TsEgZ1jG8OUrzCm089pZ/zvhYfzMDQApnQwvtCkTWB7TZUb8T5DFOD6PhWPaANX 7xB/lEO6BdPJ4QUNdm8o+pflduXEvzRZLH+aqwgf2xthwMwefd17No1wkXIKg588 7ZrVYcY7YW4+0z+x6J4q0l8eEeKcS+2tg25upzr6U0qpvfDN+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlK8I9ke6s4lh6nUYJWiCzLCiw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTg3YmU2MWItODQ2My0z ODFmLTkwNDgtNTg5YTc0NGNkOTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2HSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlO0icmUvCoFOJ62CeZQKn+K5zlr8/MPx8e1tMa2irXLMxP/srsvUGL E8zCA/cS7TB6tIHy/pRB6QGZMfogvKrNKbdqyOmxqYhxQ7WLvyQ3qh5PNHpuhMEN qJB/55uR3QMdvmrAanIB61UK6ufsbsMAPWGDGT5ZqrD2r9N37BKc3LAUUdvuOkgT EHp+4LyZe60X0Y6YJFK2DiXFt6xD2eqt6hMwMPtK6K//yHA6IGeiZlmd48FCLE1A Cd4TKMdWomrkkF7hsNZ4Fa1OJzsb2O+rm0BmwbVC7MjJADHn621M6r56eIOEaAPC uIiMDmrJtGp+RrUIjmBXlkN5LD4tClY= -----END CERTIFICATE-----Generated at Sun May 11 15:05:47 2025 by rpki-client