$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91753f48-5d15-3fb2-8141-ec2054ef41e6.roa File: 91753f48-5d15-3fb2-8141-ec2054ef41e6.roa (raw, json) Hash identifier: bQCEqJktU2aAT/KuZh7heXD7j1YMqDGKyvuuUFekqTw= Subject key identifier: 9D:15:49:F1:F3:5F:1D:38:22:15:1A:0E:17:49:34:B8:FE:B3:30:F3 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A397B9142EB173F85C8E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91753f48-5d15-3fb2-8141-ec2054ef41e6.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 63.254.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:39:7b:91:42:eb:17:3f:85:c8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a0194253-7197-4fd3-9f64-2cd7f1ec2743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e4:50:ba:84:4d:4c:63:6b:11:ab:53:7a:41: bd:7b:74:09:17:c1:3d:2b:eb:d3:2a:16:45:04:13: 1a:12:0a:8f:e6:e3:da:c7:cd:6a:a7:d8:2e:c5:fe: 6c:33:7f:04:4b:cf:9f:74:b9:06:d6:d3:68:0e:4e: 5f:a1:12:75:8d:44:3d:cd:48:74:39:22:b3:54:19: 6e:06:b6:26:f4:4c:48:65:25:1b:7a:20:fa:30:89: 9a:ed:53:2e:d5:bb:e0:5f:a0:4f:6a:84:de:46:60: 5a:78:39:dc:f1:ae:95:df:18:7c:b9:1d:84:c4:48: 8f:80:c9:6e:d2:da:62:0c:36:60:18:8f:dd:0f:b9: 50:94:9c:db:11:ed:73:5b:13:4d:2a:78:8b:b4:42: 18:53:e9:87:c9:30:45:ee:b9:fb:73:8a:18:98:f1: db:63:39:26:b6:cc:c2:cf:3b:f6:2b:30:c9:07:ad: 06:1a:1f:55:5c:8c:1a:e4:bc:d1:51:d5:f3:d9:91: bc:ae:34:26:98:03:1d:98:7d:c2:6e:6c:a9:f9:58: 1f:cc:5e:82:6f:a7:3f:ec:52:d8:88:03:05:f6:e4: 76:df:36:9d:95:d5:37:a0:67:03:cb:fa:ca:1f:31: ca:1a:3b:4e:f9:fa:c3:bc:f8:bf:94:55:0e:fd:a7: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:15:49:F1:F3:5F:1D:38:22:15:1A:0E:17:49:34:B8:FE:B3:30:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91753f48-5d15-3fb2-8141-ec2054ef41e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:56:c8:bc:11:5c:7e:56:60:66:01:e7:a8:a2:40:23:f2:6c: 6f:68:c9:e6:96:20:6c:3b:18:f7:11:f9:d9:19:db:42:4c:52: bb:25:a1:8e:d8:50:e6:15:4b:b6:1d:32:a1:a1:27:2c:e8:55: 84:85:bd:16:bd:ff:76:12:85:36:52:8a:d7:94:37:50:b1:db: 08:d9:f5:b6:c2:7b:1c:66:33:99:45:08:79:0e:a6:5c:30:f8: 72:7b:75:b2:0b:66:23:60:93:ca:72:da:82:56:5f:38:6a:c1: f6:ff:b0:98:03:a8:df:3e:c4:89:59:ab:b3:dd:a9:7f:3f:10: 44:79:0a:db:0f:f6:9b:08:46:28:89:67:42:62:42:76:06:ae: a2:cf:50:52:57:d8:04:77:76:ff:28:72:6b:73:8e:76:07:f5: 2f:dc:6b:62:2e:83:fc:6f:33:15:61:f6:df:b1:c4:fb:54:69: 5b:c3:76:f9:d3:e7:47:ce:ea:16:1c:a1:48:33:a5:6c:60:48: d1:51:c8:28:c0:eb:94:9c:82:4c:1f:0f:40:63:09:be:21:3a: 3e:18:26:8c:89:3e:8b:bd:a2:0c:a0:60:ee:d2:e2:42:0c:4f: 5f:29:3f:cc:bf:a5:85:6d:e5:27:7d:c1:13:ac:9e:64:7f:93: 1e:89:cc:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjl7kULrFz+FyOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTAxOTQyNTMtNzE5Ny00ZmQzLTlmNjQtMmNkN2YxZWMyNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnORQuoRNTGNrEatTekG9e3QJF8E9K+vTKhZF BBMaEgqP5uPax81qp9guxf5sM38ES8+fdLkG1tNoDk5foRJ1jUQ9zUh0OSKzVBlu BrYm9ExIZSUbeiD6MIma7VMu1bvgX6BPaoTeRmBaeDnc8a6V3xh8uR2ExEiPgMlu 0tpiDDZgGI/dD7lQlJzbEe1zWxNNKniLtEIYU+mHyTBF7rn7c4oYmPHbYzkmtszC zzv2KzDJB60GGh9VXIwa5LzRUdXz2ZG8rjQmmAMdmH3Cbmyp+VgfzF6Cb6c/7FLY iAMF9uR23zadldU3oGcDy/rKHzHKGjtO+frDvPi/lFUO/af23wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0VSfHzXx04IhUaDhdJNLj+szDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTE3NTNmNDgtNWQxNS0z ZmIyLTgxNDEtZWMyMDU0ZWY0MWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHP/4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVWyLwRXH5WYGYB56iiQCPybG9oyeaWIGw7GPcR+dkZ20JMUrsloY7Y UOYVS7YdMqGhJyzoVYSFvRa9/3YShTZSiteUN1Cx2wjZ9bbCexxmM5lFCHkOplww +HJ7dbILZiNgk8py2oJWXzhqwfb/sJgDqN8+xIlZq7PdqX8/EER5CtsP9psIRiiJ Z0JiQnYGrqLPUFJX2AR3dv8ocmtzjnYH9S/ca2Iug/xvMxVh9t+xxPtUaVvDdvnT 50fO6hYcoUgzpWxgSNFRyCjA65ScgkwfD0BjCb4hOj4YJoyJPou9ogygYO7S4kIM T18pP8y/pYVt5Sd9wROsnmR/kx6JzPY= -----END CERTIFICATE-----Generated at Sat May 10 13:33:34 2025 by rpki-client