$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa File: 9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa (raw, json) Hash identifier: VvEnsuaQSCL1ieBG8DIA7xN2sZ6KameRjXJ/bORN2kg= Subject key identifier: 3E:61:5C:48:86:59:2D:3E:BF:F5:38:69:04:A7:81:53:58:A8:BB:AE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A196CB61D85FEB1110B60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.165.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:19:6c:b6:1d:85:fe:b1:11:0b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1702de2f-7445-4e3c-9b95-0a663f07b57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:8c:32:58:bf:0f:ae:1f:ad:a8:e5:72:79: fe:5b:85:a9:63:55:dd:bc:85:06:84:81:bb:ef:39: 4d:21:00:90:4c:11:7e:2f:7a:f7:9a:30:cf:24:2a: 9e:c2:ae:28:41:89:a8:7e:89:1e:9f:fb:57:36:a5: f0:47:e8:ae:a0:77:a3:e6:03:ec:6a:b7:a7:ae:5e: 51:dc:01:26:54:8b:31:06:d9:fb:fa:38:6c:63:8c: 24:26:e8:52:b6:6a:4a:47:8e:78:37:ab:f6:4d:b1: f3:a0:96:1f:ba:b7:d8:f5:c7:e7:3a:e5:d6:05:3e: 5a:78:b6:3a:6b:59:1c:bd:bc:65:ee:d8:38:f3:ce: 96:76:e4:ca:92:2b:ff:38:c8:31:6a:f0:b7:ad:28: ff:ec:7d:bd:f2:34:49:8f:3b:a4:7a:50:96:68:f2: 35:65:07:74:65:0e:73:3b:86:c6:41:81:9d:90:25: 63:e3:42:d3:35:ad:ee:f0:33:6d:81:bc:d4:80:11: 8d:2a:c9:e9:2f:c4:80:32:a0:59:56:3f:3e:fc:6e: 16:3e:0f:94:44:89:f5:46:72:b5:78:3f:13:6f:d6: e1:81:71:80:5f:43:f4:32:f3:8c:1a:1f:93:d5:c0: d0:58:90:06:07:b1:3c:4a:3b:d4:aa:c1:33:f2:da: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:61:5C:48:86:59:2D:3E:BF:F5:38:69:04:A7:81:53:58:A8:BB:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ba6d7d2-c75a-3636-a5c5-2e757fcaa28b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.165.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8a:0d:8e:b6:e0:8e:6f:3a:40:3d:ee:db:82:25:48:3e:83: 50:7c:c1:12:5f:fe:14:03:af:ec:a1:29:0f:d1:2d:d2:8d:23: 3b:16:e0:45:0b:00:4d:8e:a8:d0:98:01:5a:80:ff:b4:ab:63: 69:aa:e6:9c:95:f5:90:7b:36:0f:b2:61:bd:5f:01:12:4f:d7: 2b:cb:a8:fe:37:11:0b:de:94:5d:b5:36:bf:ec:5a:08:d5:74: 36:01:c6:37:fd:6b:91:2d:da:42:da:be:51:63:7c:64:ca:3e: eb:77:51:37:78:24:64:9c:4e:0f:cd:cb:5b:bb:91:7e:8e:2c: 70:a2:5b:12:88:8b:2d:94:dd:a7:be:23:58:26:c4:cc:ac:5d: 48:2b:83:c1:46:09:a4:30:4f:39:cd:3b:40:6e:8f:43:0e:4f: 9a:24:10:74:98:c3:91:4f:38:60:df:91:b3:3f:f2:21:24:e9: ef:79:84:49:b4:f2:4f:da:3c:a7:cb:fc:d7:93:49:42:64:7b: b7:41:2a:a2:f8:0a:79:c4:02:a9:5e:b1:c2:24:2e:39:28:b2: 36:b1:07:7c:8a:fc:55:cf:98:70:e5:d6:c8:9f:97:45:2f:c1: 20:f5:0e:25:85:f1:a3:57:dc:32:f4:65:e1:7f:be:93:6b:50: fb:94:9e:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShlsth2F/rERC2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MTcwMmRlMmYtNzQ0NS00ZTNjLTliOTUtMGE2NjNmMDdiNTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYKMMli/D64frajlcnn+W4WpY1XdvIUGhIG7 7zlNIQCQTBF+L3r3mjDPJCqewq4oQYmofoken/tXNqXwR+iuoHej5gPsarenrl5R 3AEmVIsxBtn7+jhsY4wkJuhStmpKR454N6v2TbHzoJYfurfY9cfnOuXWBT5aeLY6 a1kcvbxl7tg4886WduTKkiv/OMgxavC3rSj/7H298jRJjzukelCWaPI1ZQd0ZQ5z O4bGQYGdkCVj40LTNa3u8DNtgbzUgBGNKsnpL8SAMqBZVj8+/G4WPg+URIn1RnK1 eD8Tb9bhgXGAX0P0MvOMGh+T1cDQWJAGB7E8SjvUqsEz8tqLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5hXEiGWS0+v/U4aQSngVNYqLuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWJhNmQ3ZDItYzc1YS0z NjM2LWE1YzUtMmU3NTdmY2FhMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaKDY624I5vOkA97tuCJUg+g1B8wRJf/hQDr+yhKQ/RLdKNIzsW4EUL AE2OqNCYAVqA/7SrY2mq5pyV9ZB7Ng+yYb1fARJP1yvLqP43EQvelF21Nr/sWgjV dDYBxjf9a5Et2kLavlFjfGTKPut3UTd4JGScTg/Ny1u7kX6OLHCiWxKIiy2U3ae+ I1gmxMysXUgrg8FGCaQwTznNO0Buj0MOT5okEHSYw5FPOGDfkbM/8iEk6e95hEm0 8k/aPKfL/NeTSUJke7dBKqL4CnnEAqlescIkLjkosjaxB3yK/FXPmHDl1sifl0Uv wSD1DiWF8aNX3DL0ZeF/vpNrUPuUnmI= -----END CERTIFICATE-----Generated at Thu May 8 12:37:06 2025 by rpki-client