$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90dd0959-a5ac-313c-a527-ae3f7c433137.roa File: 90dd0959-a5ac-313c-a527-ae3f7c433137.roa (raw, json) Hash identifier: OU9YhScBjjh018iU3jmc3Pm6MBamUclJ+EYuiC68nVc= Subject key identifier: 5B:98:66:5D:38:B1:D6:FE:C4:4B:99:7F:1F:9E:46:1F:04:0C:32:E3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A27D755255AF99A7FF3C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90dd0959-a5ac-313c-a527-ae3f7c433137.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 53610 IP address blocks: 63.252.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:27:d7:55:25:5a:f9:9a:7f:f3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8ad43eb3-c090-4d5f-bb79-3151c088d5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:52:82:5d:89:0e:67:4a:19:a1:7e:41:c9: 7e:c2:8c:67:2f:e0:39:37:d8:1b:e5:b1:3a:35:d3: fb:3b:13:52:dc:94:5c:c1:d8:eb:d8:62:c7:f1:5a: 16:6a:d3:7b:94:90:cd:4a:d7:c4:8d:10:29:6d:97: 62:f9:9d:87:24:46:3b:2c:4e:64:99:c9:05:a9:75: 7e:ef:ff:79:fe:7f:d4:cf:b6:8b:3e:4b:0d:bd:20: fe:cd:98:02:62:ef:6f:7b:b9:4f:b1:a5:4f:ab:d4: 10:bf:1f:a0:53:49:92:f4:41:f9:e0:f7:f0:a7:6b: f2:c6:7e:7c:6c:0d:a6:19:93:4c:df:44:69:16:f6: a5:48:68:d6:a2:1f:46:db:40:c2:1a:54:70:ed:43: 41:0d:44:95:f3:29:5d:9f:02:a4:0c:04:72:49:ba: 56:01:76:1c:df:d7:91:f1:ef:3f:b8:41:15:90:f2: 1e:9e:2c:69:57:63:d8:0c:d3:51:86:4f:5c:98:2b: 82:ac:06:6d:b2:89:f6:4d:d3:94:0b:a8:70:b6:6f: 88:8d:20:37:9b:6c:90:7c:7f:00:29:92:48:78:93: 60:d9:10:03:97:9d:60:df:4d:55:8c:2a:45:88:72: 11:eb:32:74:d5:3e:09:02:09:fc:8f:13:68:7b:1b: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:98:66:5D:38:B1:D6:FE:C4:4B:99:7F:1F:9E:46:1F:04:0C:32:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/90dd0959-a5ac-313c-a527-ae3f7c433137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.252.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:99:19:e3:e8:6a:49:d6:35:39:4a:be:de:fd:fa:07:6b:4f: 8d:67:3e:b8:ed:ed:70:5f:81:f2:84:04:4a:88:75:96:e7:53: 7f:e0:88:3c:58:e6:9c:b2:cd:fb:e4:ef:6c:87:43:0b:b8:45: 12:b8:d5:6d:95:05:4b:cf:95:53:e4:20:1f:e7:93:a0:11:fa: ac:e0:0e:fe:ec:92:69:f8:02:ac:ce:a2:57:49:64:a0:0c:43: a6:39:24:29:14:67:bb:81:57:41:ff:bb:4f:d0:48:29:5c:2d: 98:de:42:30:b9:c1:b8:57:e1:90:91:f5:ca:66:c9:76:a4:9f: ef:a3:b3:f9:ab:35:6a:48:38:65:74:76:d4:b4:ac:b0:f2:21: ab:69:5d:2a:45:2a:5d:88:a9:51:4d:ae:ff:55:d8:93:02:aa: b9:96:43:53:ec:02:87:9e:bd:a4:21:df:ff:e8:df:46:c4:31: c0:a0:1d:c1:a6:6e:5e:6b:7c:7e:c2:d2:08:c6:ab:bd:96:ed: 86:70:ea:d4:63:65:39:4c:5a:74:07:8e:e8:c5:6e:4c:87:2f: 1b:91:07:41:01:a3:50:37:20:32:13:d1:e3:ad:06:38:58:90: 4c:76:95:63:b3:9f:e5:6b:7f:df:2f:97:4c:3a:39:b0:94:6d: 7a:e9:08:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSifXVSVa+Zp/88AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OGFkNDNlYjMtYzA5MC00ZDVmLWJiNzktMzE1MWMwODhkNWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArN5Sgl2JDmdKGaF+Qcl+woxnL+A5N9gb5bE6 NdP7OxNS3JRcwdjr2GLH8VoWatN7lJDNStfEjRApbZdi+Z2HJEY7LE5kmckFqXV+ 7/95/n/Uz7aLPksNvSD+zZgCYu9ve7lPsaVPq9QQvx+gU0mS9EH54Pfwp2vyxn58 bA2mGZNM30RpFvalSGjWoh9G20DCGlRw7UNBDUSV8yldnwKkDARySbpWAXYc39eR 8e8/uEEVkPIenixpV2PYDNNRhk9cmCuCrAZtson2TdOUC6hwtm+IjSA3m2yQfH8A KZJIeJNg2RADl51g301VjCpFiHIR6zJ01T4JAgn8jxNoextGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuYZl04sdb+xEuZfx+eRh8EDDLjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTBkZDA5NTktYTVhYy0z MTNjLWE1MjctYWUzZjdjNDMzMTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDP/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqZGePoaknWNTlKvt79+gdrT41nPrjt7XBfgfKEBEqIdZbnU3/giDxY 5pyyzfvk72yHQwu4RRK41W2VBUvPlVPkIB/nk6AR+qzgDv7skmn4AqzOoldJZKAM Q6Y5JCkUZ7uBV0H/u0/QSClcLZjeQjC5wbhX4ZCR9cpmyXakn++js/mrNWpIOGV0 dtS0rLDyIatpXSpFKl2IqVFNrv9V2JMCqrmWQ1PsAoeevaQh3//o30bEMcCgHcGm bl5rfH7C0gjGq72W7YZw6tRjZTlMWnQHjujFbkyHLxuRB0EBo1A3IDIT0eOtBjhY kEx2lWOzn+Vrf98vl0w6ObCUbXrpCCk= -----END CERTIFICATE-----Generated at Sat May 10 13:43:08 2025 by rpki-client