$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7965c439-f573-377f-accd-eda8acc358ef.roa File: 7965c439-f573-377f-accd-eda8acc358ef.roa (raw, json) Hash identifier: x1XHluvCKCTWdQtqYtA/jiw9QeCaedHmIhWRKRU8Ws4= Subject key identifier: 4C:07:17:09:2C:38:DF:27:B9:67:8A:99:4F:53:1F:5C:D7:C8:EF:2D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A0FF3E220EB62B67AC158 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7965c439-f573-377f-accd-eda8acc358ef.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14 IP address blocks: 209.2.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:0f:f3:e2:20:eb:62:b6:7a:c1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1c591602-2bb6-4121-89f0-14c439091af7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4f:a2:c4:dd:5a:c5:e9:0c:c7:20:6a:a6:41: 51:34:56:b6:e2:d9:16:ba:65:30:e9:42:09:e3:25: 4c:48:f4:82:b7:5f:f1:52:14:b6:57:6f:68:85:93: 3c:8e:8c:a8:7b:f1:6b:30:7e:0a:65:bd:c3:8f:8c: 34:47:34:00:2d:64:39:dc:d2:03:55:11:70:4b:4a: 3c:12:41:5d:ad:55:76:c7:da:8e:2d:9f:7f:a9:25: 72:f4:3c:1e:92:90:4d:ad:9c:e2:06:f9:c1:c0:78: b6:27:94:af:9f:5b:e7:ad:34:52:05:94:08:b8:ae: 78:11:8b:14:97:f1:e1:3f:fe:a8:a1:88:52:29:5f: 1f:cd:f3:75:c1:e9:a0:c6:94:b7:76:75:1f:ea:dc: e3:18:9f:01:2e:30:71:21:9c:0e:45:76:cb:e5:4b: 4b:f2:2d:40:17:d8:c8:30:e8:9d:7f:01:2f:6e:75: 73:2a:ab:41:0f:49:52:81:25:9f:25:7f:fb:e1:df: a9:e7:b3:86:a0:0c:ae:7f:41:42:0a:e7:53:be:4e: bc:da:87:c5:ba:c7:34:46:c4:77:f7:8e:df:40:3e: 83:ba:7a:03:e1:b4:5d:85:03:05:ea:5b:84:71:0c: 42:dd:0e:38:c0:48:6d:19:92:04:22:f9:d7:f4:03: b8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:07:17:09:2C:38:DF:27:B9:67:8A:99:4F:53:1F:5C:D7:C8:EF:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7965c439-f573-377f-accd-eda8acc358ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:2e:ed:65:5c:11:21:6a:5d:88:15:dc:fb:f9:e9:6f:20:67: 01:d1:22:55:76:17:f0:61:d2:85:3f:c5:36:f4:7e:f4:b5:7a: f7:99:98:aa:56:26:f6:5d:53:0f:78:f4:dd:69:1f:f7:ac:40: 05:44:aa:59:7a:2f:ce:0e:2e:0b:f1:8a:b8:b5:7b:bb:0a:03: 36:0f:bf:ef:e7:86:a7:d0:eb:80:2c:e2:71:74:15:9d:f1:05: 08:d5:93:e7:4b:63:33:53:df:c8:e8:d7:32:60:9e:bc:90:a0: c0:1e:f0:01:69:91:20:03:9e:62:dd:fd:29:f5:e8:d2:d9:4c: d8:fe:e5:c1:7a:e9:16:e2:1e:75:b8:ab:63:59:b0:da:24:76: 13:e0:6d:ce:04:68:77:ef:1f:4e:76:d3:9a:8a:f0:59:95:0d: ba:3e:06:79:92:88:82:7b:e1:81:44:5c:03:7a:40:f8:be:21: 12:ba:2a:66:b0:9d:23:93:71:f8:b3:e0:00:a4:60:f0:01:a3: 1a:3f:0f:cb:3a:29:8b:87:8b:21:77:82:c8:74:3b:78:a4:37: 1d:c7:1f:3a:63:56:eb:67:00:0a:af:5d:f7:6a:fa:61:6d:42: e5:56:9c:0b:b5:13:88:7d:d6:ef:c6:1b:b5:28:e7:03:1f:80: 7b:aa:66:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSg/z4iDrYrZ6wVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWM1OTE2MDItMmJiNi00MTIxLTg5ZjAtMTRjNDM5MDkxYWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0+ixN1axekMxyBqpkFRNFa24tkWumUw6UIJ 4yVMSPSCt1/xUhS2V29ohZM8joyoe/FrMH4KZb3Dj4w0RzQALWQ53NIDVRFwS0o8 EkFdrVV2x9qOLZ9/qSVy9DwekpBNrZziBvnBwHi2J5Svn1vnrTRSBZQIuK54EYsU l/HhP/6ooYhSKV8fzfN1wemgxpS3dnUf6tzjGJ8BLjBxIZwORXbL5UtL8i1AF9jI MOidfwEvbnVzKqtBD0lSgSWfJX/74d+p57OGoAyuf0FCCudTvk682ofFusc0RsR3 947fQD6DunoD4bRdhQMF6luEcQxC3Q44wEhtGZIEIvnX9AO4iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwHFwksON8nuWeKmU9TH1zXyO8tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzk2NWM0MzktZjU3My0z NzdmLWFjY2QtZWRhOGFjYzM1OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0QLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwu7WVcESFqXYgV3Pv56W8gZwHRIlV2F/Bh0oU/xTb0fvS1eveZmKpW JvZdUw949N1pH/esQAVEqll6L84OLgvxiri1e7sKAzYPv+/nhqfQ64As4nF0FZ3x BQjVk+dLYzNT38jo1zJgnryQoMAe8AFpkSADnmLd/Sn16NLZTNj+5cF66RbiHnW4 q2NZsNokdhPgbc4EaHfvH05205qK8FmVDbo+BnmSiIJ74YFEXAN6QPi+IRK6Kmaw nSOTcfiz4ACkYPABoxo/D8s6KYuHiyF3gsh0O3ikNx3HHzpjVutnAAqvXfdq+mFt QuVWnAu1E4h91u/GG7Uo5wMfgHuqZis= -----END CERTIFICATE-----Generated at Sun May 11 16:59:00 2025 by rpki-client