$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa File: 5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa (raw, json) Hash identifier: wHMZed4Y/8k74jlX8TPULAKFV7uxcq+Vcl8t2XjQg3M= Subject key identifier: 15:B7:29:C7:92:F3:30:D5:8D:A3:E7:B3:AC:2A:F9:4A:22:9A:20:85 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4D0B891F003CAEC9BB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 397560 IP address blocks: 74.11.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4d:0b:89:1f:00:3c:ae:c9:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=04987aa0-5ee7-4266-b5f9-20fa69ce5886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:15:9b:c2:48:cd:43:4b:90:8f:47:d1:58: f8:72:87:93:9a:2a:43:c9:51:bc:c6:b0:e4:b0:f4: 23:69:eb:ab:17:ee:0a:7a:7b:cc:62:e3:07:3f:1c: 13:f0:6d:d3:fe:79:fa:ad:27:2c:c7:dc:ab:6f:32: d2:ad:a1:82:63:8d:c2:6e:3f:1a:1d:87:78:c9:79: 67:07:ff:d4:cd:eb:b7:9f:e0:97:a6:79:25:13:fa: e4:51:38:9d:62:41:ce:98:0f:c2:eb:3d:7e:a5:71: 0f:f1:7b:f9:3d:79:1f:29:b2:d2:a4:08:e1:20:2d: fc:a7:de:f3:73:b4:db:49:7c:69:8d:6d:4e:69:6b: a1:35:49:59:50:14:00:70:0a:03:57:d9:c4:bd:13: 85:bc:cb:86:23:97:d0:66:83:3a:3a:96:2c:3e:8c: ba:a5:8b:21:4e:e4:34:51:b2:e5:71:00:51:56:d9: f0:35:a2:f6:55:ce:20:75:06:fc:ae:c6:62:34:ee: 93:8d:ed:74:c8:f0:82:9d:d9:12:7b:27:a4:04:c4: 4d:08:a9:93:5e:4d:78:ba:b0:4b:ac:61:5b:3d:c2: 15:10:4d:ad:05:c4:ef:8c:57:06:53:6c:f4:6b:38: c1:3f:4c:2a:19:f1:dd:0f:14:23:de:bf:e2:38:b0: 4e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B7:29:C7:92:F3:30:D5:8D:A3:E7:B3:AC:2A:F9:4A:22:9A:20:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5fd98b44-2ed2-3550-b5d0-5b84a512f7d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.11.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:29:2b:6b:4c:e7:f6:91:7f:3a:2b:31:0c:ce:65:c4:e9:65: 76:40:cf:68:0f:48:54:a7:4c:2f:e0:e5:f1:c5:04:79:e9:0b: 8a:66:f3:a8:4a:a9:90:00:14:37:8a:52:da:0d:2a:86:72:1c: 1e:3b:47:5a:69:15:12:54:4e:dd:b0:73:b9:45:cd:6f:db:eb: bb:c3:a4:dd:90:55:f5:cb:ad:1f:3a:dd:34:f2:57:da:87:bc: a0:f7:4a:6c:7c:de:67:8d:fb:cf:d4:09:e7:22:9d:c1:d9:3d: b5:59:03:6a:5b:3c:3d:21:f1:52:a7:92:98:5c:9c:67:dc:77: 59:8a:73:61:ea:67:f0:5d:58:cf:5d:81:a9:f7:cd:73:82:b5: e6:2e:95:51:8b:8c:f5:12:27:e7:02:9b:2b:65:6d:c1:8c:e4: ce:31:45:7b:c8:30:b3:ce:2d:24:32:ee:35:8e:3e:37:eb:49: 95:1b:9a:ff:0c:67:f4:fb:27:9a:22:e1:2e:5f:3f:8c:08:9b: e9:d4:3d:da:4e:92:bd:c2:4d:a3:94:6b:2c:2e:cb:0e:fa:4c: f9:10:0b:aa:8c:e5:34:0f:6f:c6:d1:84:6d:8b:d4:28:66:0f: 0d:69:2b:6a:41:16:2e:af:63:1f:85:ea:c5:63:fe:8d:4c:f8: 0d:b1:03:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSk0LiR8APK7Ju4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDQ5ODdhYTAtNWVlNy00MjY2LWI1ZjktMjBmYTY5Y2U1ODg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozwVm8JIzUNLkI9H0Vj4coeTmipDyVG8xrDk sPQjaeurF+4KenvMYuMHPxwT8G3T/nn6rScsx9yrbzLSraGCY43Cbj8aHYd4yXln B//Uzeu3n+CXpnklE/rkUTidYkHOmA/C6z1+pXEP8Xv5PXkfKbLSpAjhIC38p97z c7TbSXxpjW1OaWuhNUlZUBQAcAoDV9nEvROFvMuGI5fQZoM6OpYsPoy6pYshTuQ0 UbLlcQBRVtnwNaL2Vc4gdQb8rsZiNO6Tje10yPCCndkSeyekBMRNCKmTXk14urBL rGFbPcIVEE2tBcTvjFcGU2z0azjBP0wqGfHdDxQj3r/iOLBOkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBW3KceS8zDVjaPns6wq+UoimiCFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNWZkOThiNDQtMmVkMi0z NTUwLWI1ZDAtNWI4NGE1MTJmN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSgv8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkpK2tM5/aRfzorMQzOZcTpZXZAz2gPSFSnTC/g5fHFBHnpC4pm86hK qZAAFDeKUtoNKoZyHB47R1ppFRJUTt2wc7lFzW/b67vDpN2QVfXLrR863TTyV9qH vKD3Smx83meN+8/UCecincHZPbVZA2pbPD0h8VKnkphcnGfcd1mKc2HqZ/BdWM9d gan3zXOCteYulVGLjPUSJ+cCmytlbcGM5M4xRXvIMLPOLSQy7jWOPjfrSZUbmv8M Z/T7J5oi4S5fP4wIm+nUPdpOkr3CTaOUaywuyw76TPkQC6qM5TQPb8bRhG2L1Chm Dw1pK2pBFi6vYx+F6sVj/o1M+A2xA8E= -----END CERTIFICATE-----Generated at Sat May 10 13:38:10 2025 by rpki-client