$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e6fa2a-d7d3-3196-b430-199a0ece9e2e.roa File: 81e6fa2a-d7d3-3196-b430-199a0ece9e2e.roa (raw, json) Hash identifier: YcjJPLP9vj6pb+erQuzyL4I3fjeL4akWNe8KA9B8ytY= Subject key identifier: C1:E5:30:88:07:33:2F:3A:14:E3:CF:27:FA:8A:29:D9:46:99:B0:09 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A19D66F499B180D115640 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e6fa2a-d7d3-3196-b430-199a0ece9e2e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.248.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:19:d6:6f:49:9b:18:0d:11:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=be80b0f7-61fe-4a96-af0d-9517c21513d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f6:7d:bf:12:9b:6d:17:ae:21:01:99:c9:f4: 92:ae:fa:dd:a9:e6:0f:77:d9:29:cb:c0:3a:68:63: a0:90:f0:36:7e:c4:ae:7a:3f:bc:c2:7d:69:94:d2: b6:f7:d8:2a:fa:e7:76:e8:2e:09:6d:ed:39:b5:b4: 2e:01:8e:e6:b5:67:85:99:dc:a1:d9:7d:2a:2e:47: 32:f0:ad:fa:d9:1a:33:dc:29:05:6a:32:02:88:48: d2:8a:c9:e0:89:32:e5:04:1a:df:48:8a:a0:5a:25: 97:08:7b:98:1c:16:5f:10:b6:2f:4b:56:dd:89:78: 5d:d0:39:bb:5b:a2:1b:8b:55:c9:d6:ea:85:9b:80: 3b:76:4e:56:d0:ab:e6:f9:77:3e:e4:12:47:0e:c9: 4f:d5:f0:d5:dc:1e:51:42:fa:86:51:63:ac:4a:0f: 20:b3:f7:97:18:90:41:e4:51:09:11:3c:e9:76:e1: 6a:2d:19:ad:66:c3:7b:b1:01:58:9e:1d:95:da:67: 0a:31:a6:16:87:2e:10:2c:0d:f6:1e:21:e8:ba:ca: 05:3e:e7:55:39:66:f4:b3:e1:c5:bd:02:23:7b:a5: d8:72:36:e6:5a:93:e2:88:2a:ba:ab:8e:e0:c9:37: 0a:c7:0c:c0:dc:29:7c:39:eb:96:d6:be:42:75:e2: b9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E5:30:88:07:33:2F:3A:14:E3:CF:27:FA:8A:29:D9:46:99:B0:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/81e6fa2a-d7d3-3196-b430-199a0ece9e2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.248.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:79:8e:30:29:24:c6:4d:ec:73:d3:12:5d:dc:09:39:8f:2c: d5:20:37:cc:9b:46:bc:7d:c0:9b:77:be:8e:e7:86:f6:97:85: 9c:27:18:1b:6c:16:f3:8b:2f:36:d5:88:07:4a:4e:aa:e1:b3: b6:93:6b:53:95:39:28:71:bc:a7:bd:59:45:01:62:14:ea:31: 8d:81:f1:f4:72:60:ee:92:be:e7:cb:d6:9b:6a:10:78:3f:db: 83:53:3c:a2:f2:76:30:13:bd:23:fb:f7:0d:80:14:a9:44:0f: ee:f2:26:66:2f:ec:2b:c6:a3:c3:d9:ae:ca:f6:3d:cf:ed:2c: 74:2d:66:89:91:83:4c:5a:51:70:b8:28:01:38:fd:d4:bc:88: b4:f0:6e:23:6e:76:33:07:1b:61:dc:ee:00:10:9e:b0:a5:10: 12:e9:6f:4d:10:cf:07:00:ba:78:46:8e:03:eb:ec:e3:60:5b: bf:5b:47:ba:bb:4c:5e:b7:1a:b9:70:01:83:b6:09:9e:fb:e5: bc:ee:8c:ca:d4:bc:b1:e4:c1:36:e7:48:14:d1:b3:fa:ff:34: 97:19:98:6c:68:9f:02:ab:40:85:74:73:f2:2e:09:75:3a:95: e2:af:b7:85:0c:5e:95:fd:4e:1b:41:02:65:fd:1f:47:aa:40: d8:98:3d:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShnWb0mbGA0RVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmU4MGIwZjctNjFmZS00YTk2LWFmMGQtOTUxN2MyMTUxM2QxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPZ9vxKbbReuIQGZyfSSrvrdqeYPd9kpy8A6 aGOgkPA2fsSuej+8wn1plNK299gq+ud26C4Jbe05tbQuAY7mtWeFmdyh2X0qLkcy 8K362Roz3CkFajICiEjSisngiTLlBBrfSIqgWiWXCHuYHBZfELYvS1bdiXhd0Dm7 W6Ibi1XJ1uqFm4A7dk5W0Kvm+Xc+5BJHDslP1fDV3B5RQvqGUWOsSg8gs/eXGJBB 5FEJETzpduFqLRmtZsN7sQFYnh2V2mcKMaYWhy4QLA32HiHousoFPudVOWb0s+HF vQIje6XYcjbmWpPiiCq6q47gyTcKxwzA3Cl8OeuW1r5CdeK5YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMHlMIgHMy86FOPPJ/qKKdlGmbAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODFlNmZhMmEtZDdkMy0z MTk2LWI0MzAtMTk5YTBlY2U5ZTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0fgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIF5jjApJMZN7HPTEl3cCTmPLNUgN8ybRrx9wJt3vo7nhvaXhZwnGBts FvOLLzbViAdKTqrhs7aTa1OVOShxvKe9WUUBYhTqMY2B8fRyYO6SvufL1ptqEHg/ 24NTPKLydjATvSP79w2AFKlED+7yJmYv7CvGo8PZrsr2Pc/tLHQtZomRg0xaUXC4 KAE4/dS8iLTwbiNudjMHG2Hc7gAQnrClEBLpb00QzwcAunhGjgPr7ONgW79bR7q7 TF63GrlwAYO2CZ775bzujMrUvLHkwTbnSBTRs/r/NJcZmGxonwKrQIV0c/IuCXU6 leKvt4UMXpX9ThtBAmX9H0eqQNiYPfo= -----END CERTIFICATE-----Generated at Fri May 9 23:48:35 2025 by rpki-client