$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73f034b6-2a56-3ab5-a591-3aa2f4340150.roa File: 73f034b6-2a56-3ab5-a591-3aa2f4340150.roa (raw, json) Hash identifier: sxrHDNyB+tRg60S+njf7trn/3FtAdahoyzN5AKdbUh8= Subject key identifier: C1:9B:EF:D0:93:4C:E7:8F:DC:9B:50:44:49:BD:63:52:FC:25:63:CE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A2588FDB1585400925280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73f034b6-2a56-3ab5-a591-3aa2f4340150.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27482 IP address blocks: 63.250.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:25:88:fd:b1:58:54:00:92:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d5b6b800-a53e-40f8-8799-d2780ec551f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c9:c4:70:5f:75:6b:c8:c3:a0:dd:79:ba:8b: ca:74:42:e5:10:7b:a1:74:f1:df:09:69:6e:98:33: e5:65:7b:b3:26:5e:c4:4d:8a:c7:c9:86:7a:cf:9c: fa:ea:f3:73:b0:9b:cd:02:c7:47:49:a8:a8:d9:51: 5e:03:a3:5f:63:67:6b:73:64:9f:79:dc:5f:d9:98: d8:16:32:ce:62:c2:75:d0:12:34:37:29:30:c4:f1: 4c:36:39:92:60:6f:8e:8d:e9:70:02:08:04:46:ff: c4:a2:56:ea:4d:9a:b0:79:e5:a7:89:8d:5b:5e:f0: d7:0c:87:8a:94:39:63:ee:51:ac:f6:37:6f:de:c9: 66:25:15:e9:6f:0b:a2:fb:17:9d:9b:d5:36:18:51: a0:43:8c:b6:90:3c:c4:8a:49:58:78:aa:29:e4:fd: ff:e9:19:b9:d5:06:34:b3:39:a8:9f:11:ac:72:fc: 62:98:44:48:f2:fe:4a:c5:98:58:35:99:dc:8c:1c: 9d:89:62:f1:83:d3:ba:30:70:1a:e9:3b:10:35:86: 1f:79:2e:5a:b9:bb:ae:b4:cd:27:2b:ab:e5:a8:54: c0:9d:a0:fd:66:3d:cc:93:c1:e5:59:d2:ca:b2:96: a8:a5:10:7b:2e:59:d0:cf:6b:f2:af:51:2e:b7:28: a2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9B:EF:D0:93:4C:E7:8F:DC:9B:50:44:49:BD:63:52:FC:25:63:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73f034b6-2a56-3ab5-a591-3aa2f4340150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.250.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c9:1c:0f:c2:a5:80:c9:21:1f:61:0d:ef:9d:64:29:81:e8: c4:f2:ea:41:0b:37:7c:32:89:c7:ff:e8:86:b8:3f:9d:9d:92: 4d:4b:60:38:10:a7:d8:ec:68:18:73:5f:8c:5e:e1:6a:d0:e2: 47:19:42:5b:f8:7c:ba:7e:51:c8:33:e2:27:e7:3a:e0:e7:99: 68:97:cb:95:a9:f8:c9:28:48:4e:f8:ce:22:98:03:3b:a0:29: be:34:17:3c:e5:8a:59:c6:9e:22:1b:1c:56:ac:09:8f:26:7f: 2c:a7:ab:e3:2a:32:a5:15:4c:4b:02:23:45:08:17:8c:af:61: d4:a1:4b:d7:43:bb:6e:53:f4:22:a9:f4:e6:f3:40:6f:9e:43: 93:73:36:a1:41:18:b0:7a:48:20:11:30:57:c8:8f:48:36:fc: 3e:8e:b1:04:30:90:7a:16:2f:e0:fe:0d:ed:1b:6d:f4:b9:a6: e1:50:66:e5:15:f5:80:dc:d7:20:de:05:23:27:95:09:a2:a9: 84:b9:4a:24:b0:78:42:cc:6d:57:ed:a5:16:eb:95:e8:bf:c7: 78:fb:87:c6:90:6d:e7:af:60:37:a1:96:a0:a4:e6:9b:ff:07: 7f:d8:ca:51:8c:4c:fb:ae:3a:94:9f:44:85:46:5a:5e:45:10: 5d:fb:7d:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiWI/bFYVACSUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDViNmI4MDAtYTUzZS00MGY4LTg3OTktZDI3ODBlYzU1MWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksnEcF91a8jDoN15uovKdELlEHuhdPHfCWlu mDPlZXuzJl7ETYrHyYZ6z5z66vNzsJvNAsdHSaio2VFeA6NfY2drc2Sfedxf2ZjY FjLOYsJ10BI0NykwxPFMNjmSYG+OjelwAggERv/EolbqTZqweeWniY1bXvDXDIeK lDlj7lGs9jdv3slmJRXpbwui+xedm9U2GFGgQ4y2kDzEiklYeKop5P3/6Rm51QY0 szmonxGscvximERI8v5KxZhYNZncjBydiWLxg9O6MHAa6TsQNYYfeS5aubuutM0n K6vlqFTAnaD9Zj3Mk8HlWdLKspaopRB7LlnQz2vyr1EutyiiFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGb79CTTOeP3JtQREm9Y1L8JWPOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzNmMDM0YjYtMmE1Ni0z YWI1LWE1OTEtM2FhMmY0MzQwMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/r8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzJHA/CpYDJIR9hDe+dZCmB6MTy6kELN3wyicf/6Ia4P52dkk1LYDgQ p9jsaBhzX4xe4WrQ4kcZQlv4fLp+Ucgz4ifnOuDnmWiXy5Wp+MkoSE74ziKYAzug Kb40FzzlilnGniIbHFasCY8mfyynq+MqMqUVTEsCI0UIF4yvYdShS9dDu25T9CKp 9ObzQG+eQ5NzNqFBGLB6SCARMFfIj0g2/D6OsQQwkHoWL+D+De0bbfS5puFQZuUV 9YDc1yDeBSMnlQmiqYS5SiSweELMbVftpRbrlei/x3j7h8aQbeevYDehlqCk5pv/ B3/YylGMTPuuOpSfRIVGWl5FEF37fRA= -----END CERTIFICATE-----Generated at Sat May 10 12:25:06 2025 by rpki-client