$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6843534b-1a43-3625-8e71-418959811e16.roa File: 6843534b-1a43-3625-8e71-418959811e16.roa (raw, json) Hash identifier: 2LkeiVHYgmJWL2tmJPwkr6xlaAsWrdJgS7Hsn3MPvCY= Subject key identifier: B7:0C:F1:BB:4A:00:67:93:7D:DC:A8:3E:6D:08:ED:32:6E:09:50:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A23D52B0441266B313680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6843534b-1a43-3625-8e71-418959811e16.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 20458 IP address blocks: 216.204.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:23:d5:2b:04:41:26:6b:31:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8bd69f98-c1b5-4453-9f73-1bb8bfdac421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:96:bc:cc:43:1a:c8:4f:ef:fc:22:0f:81:f3: 74:44:a3:d0:16:86:59:4c:c5:fe:28:e3:57:20:14: d8:e6:52:1f:92:c7:4b:27:90:8d:d4:ee:23:38:71: 9a:ac:bd:d4:6d:4b:44:31:65:96:f2:0a:67:4d:b0: 09:3e:8a:f8:56:a6:bd:1d:cc:a7:67:c2:57:2b:46: 20:af:8e:a1:c5:e5:02:99:97:51:fc:ba:bb:0c:f7: cc:a2:1d:36:8d:0f:94:04:22:99:d2:75:73:a7:ef: 8d:19:0c:11:dd:0d:aa:d9:45:23:ef:b2:71:cd:8d: 36:7e:11:2e:c7:ac:03:b6:df:cc:b5:ae:d4:fb:58: f8:29:49:5f:94:ae:ba:34:24:34:16:b1:31:94:58: 73:b2:25:a6:1a:ef:dd:b0:bd:be:b2:c2:f2:c1:8b: 18:b5:28:7d:34:de:0a:3c:ab:e8:7e:a8:73:03:57: aa:85:78:a2:05:08:33:5a:62:a8:f6:37:62:0e:0c: 4d:63:bc:28:a6:c0:af:45:53:63:c2:8f:92:75:5e: 96:84:06:a6:d7:1f:1e:8c:ee:1e:f9:45:0f:aa:c8: b3:a4:39:77:7f:d9:f8:b3:98:99:43:55:2d:2c:33: 5b:a4:5f:55:5e:e8:f9:56:84:ef:33:40:f1:54:7a: db:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0C:F1:BB:4A:00:67:93:7D:DC:A8:3E:6D:08:ED:32:6E:09:50:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/6843534b-1a43-3625-8e71-418959811e16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.204.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:72:fd:46:7d:da:ac:d6:35:cb:51:da:42:04:67:02:54:18: 9b:73:b7:85:d5:48:40:f6:b9:94:95:53:5a:a5:c7:b7:8a:ea: 0d:8b:5a:c8:b7:18:84:1e:8a:6c:75:cf:a4:68:26:63:83:4b: 72:0e:1a:17:1b:d2:48:be:a9:86:43:49:ef:50:26:08:36:f3: 09:e6:22:58:bd:3d:f9:f1:20:95:2e:0a:55:99:53:01:94:14: d7:28:0b:bd:92:b0:55:d4:33:92:f9:8b:fd:d1:c4:8b:c4:ca: 5c:d9:eb:72:8e:55:0f:6d:31:ed:6a:f5:95:d8:15:75:b0:b8: 8f:e8:be:c9:d0:32:65:a5:55:22:fa:82:7d:6d:a4:8d:37:a7: 7a:71:8b:1e:6d:7e:91:65:d7:94:31:be:04:64:af:5f:37:90: e5:14:71:5c:f7:1f:fc:6b:3b:37:8c:94:79:c4:37:8b:6a:cf: 13:f3:c7:e8:08:27:95:4a:de:e3:9d:2f:33:d6:4d:b5:82:b0: af:77:da:71:14:93:d9:df:f3:06:3d:b5:ce:0a:8e:19:96:ee: 44:5a:d2:ef:d4:60:b5:0f:d6:21:f8:a6:b3:b0:01:01:36:af: 7e:63:56:0d:40:3b:19:e0:e5:31:98:a2:ef:1e:18:a0:ee:3d: ef:a8:6d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiPVKwRBJmsxNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OGJkNjlmOTgtYzFiNS00NDUzLTlmNzMtMWJiOGJmZGFjNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZa8zEMayE/v/CIPgfN0RKPQFoZZTMX+KONX IBTY5lIfksdLJ5CN1O4jOHGarL3UbUtEMWWW8gpnTbAJPor4Vqa9HcynZ8JXK0Yg r46hxeUCmZdR/Lq7DPfMoh02jQ+UBCKZ0nVzp++NGQwR3Q2q2UUj77JxzY02fhEu x6wDtt/Mta7U+1j4KUlflK66NCQ0FrExlFhzsiWmGu/dsL2+ssLywYsYtSh9NN4K PKvofqhzA1eqhXiiBQgzWmKo9jdiDgxNY7wopsCvRVNjwo+SdV6WhAam1x8ejO4e +UUPqsizpDl3f9n4s5iZQ1UtLDNbpF9VXuj5VoTvM0DxVHrbSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLcM8btKAGeTfdyoPm0I7TJuCVCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjg0MzUzNGItMWE0My0z NjI1LThlNzEtNDE4OTU5ODExZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdy/UZ92qzWNctR2kIEZwJUGJtzt4XVSED2uZSVU1qlx7eK6g2LWsi3 GIQeimx1z6RoJmODS3IOGhcb0ki+qYZDSe9QJgg28wnmIli9PfnxIJUuClWZUwGU FNcoC72SsFXUM5L5i/3RxIvEylzZ63KOVQ9tMe1q9ZXYFXWwuI/ovsnQMmWlVSL6 gn1tpI03p3pxix5tfpFl15QxvgRkr183kOUUcVz3H/xrOzeMlHnEN4tqzxPzx+gI J5VK3uOdLzPWTbWCsK932nEUk9nf8wY9tc4KjhmW7kRa0u/UYLUP1iH4prOwAQE2 r35jVg1AOxng5TGYou8eGKDuPe+obSE= -----END CERTIFICATE-----Generated at Mon May 12 07:17:26 2025 by rpki-client