$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa File: 91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa (raw, json) Hash identifier: bnA68CZOa99pWjD46y3Bbzjf/wGc+Lbig6JDRjeM+fs= Subject key identifier: 43:85:39:2F:D3:72:9D:59:1B:E1:8C:27:D4:FA:7A:98:E7:C4:7D:2A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A281F7978BAA50BFFF900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 394183 IP address blocks: 64.199.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:28:1f:79:78:ba:a5:0b:ff:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=86728fc2-89ff-42bb-985a-806fc23c7877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6a:1b:a7:94:05:a2:79:c0:15:cd:b4:84:70: 87:4d:2a:ea:7f:d5:de:67:96:fb:e0:d8:da:9c:d8: 2f:2b:dd:27:80:c5:2b:0e:4d:0e:18:2d:dc:f0:69: 99:c4:20:56:62:a2:90:94:5d:84:6f:f2:7f:37:d0: 69:17:89:46:3e:d6:8e:e0:a6:2e:ab:56:db:a8:16: d1:07:c6:73:cd:35:fc:19:7a:09:cd:4b:a7:61:08: 87:db:81:9e:40:17:d2:ff:2a:14:54:d9:18:c2:bb: d4:46:d7:6a:e2:d7:1c:c6:1d:a9:45:f3:f6:a0:da: f4:74:c5:03:44:0d:05:31:44:ca:8f:55:62:d7:4f: ef:4a:b6:bb:c6:4a:77:ee:95:1d:3a:5d:60:0a:c4: fa:9d:a4:3f:06:4d:13:6b:3b:e7:f9:19:9a:7e:76: 8d:0a:e6:01:7d:ac:63:96:97:92:04:a3:d5:df:14: 01:ef:63:a6:7e:a9:7a:aa:ed:d7:0c:7a:af:45:72: 21:9c:a3:dc:f5:02:43:54:a0:a6:7d:65:ce:dc:09: 28:30:48:00:02:b5:62:47:c9:30:e1:23:6a:a2:9c: b9:04:b0:fb:81:96:00:c6:92:7f:5f:ba:10:62:5b: c1:43:a3:d5:f4:2b:ca:2f:34:dc:a9:0a:62:0c:46: 10:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:85:39:2F:D3:72:9D:59:1B:E1:8C:27:D4:FA:7A:98:E7:C4:7D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/91f80cf0-bcf9-3eed-8a7e-fad09c4c6648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.199.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ed:f5:f4:e3:6e:f1:47:85:c8:49:5b:9e:c7:cf:18:8c:af: 6e:0b:a4:9f:37:2b:ff:9e:c6:aa:e8:de:78:ed:e1:32:57:de: 3c:e2:15:d3:09:43:d8:0e:e4:52:49:2e:eb:5b:ce:ea:14:db: 72:97:17:d5:41:83:73:98:28:d1:c1:bf:5f:e4:d2:71:80:fa: 14:eb:3e:64:40:c9:4a:75:70:36:d3:83:a9:54:9b:91:d5:06: 61:d4:00:8b:67:86:f7:b8:c9:d8:d4:ba:27:37:33:10:35:cf: 57:e5:15:46:96:f3:9b:ce:42:1d:33:69:b6:3c:f5:36:9a:c3: 65:43:e8:65:a1:f4:b0:7c:9a:17:42:b5:96:43:8c:62:e3:ea: 7b:61:c4:70:e9:45:25:d8:43:f0:15:a7:50:d4:91:f5:7c:63: 64:01:22:7f:86:03:b6:e9:03:ee:b6:c4:d1:1c:be:2e:e9:02: 28:69:6b:b6:3c:2a:44:c9:d2:6e:39:26:ab:23:46:82:4f:8e: 75:64:30:68:dd:91:87:84:4c:f3:8e:4d:c6:5e:c2:1f:3a:8d: 32:79:e0:c7:4c:0a:cf:ec:b3:9b:c0:9d:00:37:fd:75:7d:77: 5b:20:37:2f:f3:06:a3:98:33:e7:c5:41:10:a9:99:37:9d:b0: ee:f8:33:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSigfeXi6pQv/+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODY3MjhmYzItODlmZi00MmJiLTk4NWEtODA2ZmMyM2M3ODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmobp5QFonnAFc20hHCHTSrqf9XeZ5b74Nja nNgvK90ngMUrDk0OGC3c8GmZxCBWYqKQlF2Eb/J/N9BpF4lGPtaO4KYuq1bbqBbR B8ZzzTX8GXoJzUunYQiH24GeQBfS/yoUVNkYwrvURtdq4tccxh2pRfP2oNr0dMUD RA0FMUTKj1Vi10/vSra7xkp37pUdOl1gCsT6naQ/Bk0Tazvn+RmafnaNCuYBfaxj lpeSBKPV3xQB72Omfql6qu3XDHqvRXIhnKPc9QJDVKCmfWXO3AkoMEgAArViR8kw 4SNqopy5BLD7gZYAxpJ/X7oQYlvBQ6PV9CvKLzTcqQpiDEYQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOFOS/Tcp1ZG+GMJ9T6epjnxH0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTFmODBjZjAtYmNmOS0z ZWVkLThhN2UtZmFkMDljNGM2NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQMf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELt9fTjbvFHhchJW57HzxiMr24LpJ83K/+exqro3njt4TJX3jziFdMJ Q9gO5FJJLutbzuoU23KXF9VBg3OYKNHBv1/k0nGA+hTrPmRAyUp1cDbTg6lUm5HV BmHUAItnhve4ydjUuic3MxA1z1flFUaW85vOQh0zabY89Taaw2VD6GWh9LB8mhdC tZZDjGLj6nthxHDpRSXYQ/AVp1DUkfV8Y2QBIn+GA7bpA+62xNEcvi7pAihpa7Y8 KkTJ0m45JqsjRoJPjnVkMGjdkYeETPOOTcZewh86jTJ54MdMCs/ss5vAnQA3/XV9 d1sgNy/zBqOYM+fFQRCpmTedsO74M+s= -----END CERTIFICATE-----Generated at Sun May 11 04:00:11 2025 by rpki-client