$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa File: 9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa (raw, json) Hash identifier: ovfBqE15y6Pc+Vb+LGNDgPi0r3SJhVUYncAJak6lARo= Subject key identifier: 40:79:90:73:39:90:47:D0:2E:7C:B8:BF:A1:59:55:86:01:DB:A6:52 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A278D0DF8C2E604301280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 53271 IP address blocks: 209.192.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:27:8d:0d:f8:c2:e6:04:30:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=774721d7-5e04-4e87-a5b7-3790aa74dbb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:73:97:58:7b:21:5b:05:e0:f5:b7:2e:e2:52: 41:22:0b:57:52:80:c7:65:73:30:d1:6f:c2:69:a6: 2c:5b:98:18:9e:20:34:41:1a:94:5a:d2:d5:1a:d2: e1:b2:9c:b5:4e:22:db:b1:2c:0e:70:de:3a:92:74: d9:41:8f:2c:c5:ed:6c:10:25:4e:76:e4:f1:06:d9: a5:38:b1:42:db:27:5d:56:5e:14:55:3c:cd:ff:a4: e7:b8:b3:73:e2:cb:30:72:53:28:6b:86:ad:10:fe: 20:22:b9:bb:04:02:f8:47:37:32:36:f2:af:ef:6b: 48:f5:c3:b7:ae:8b:32:4e:96:71:bc:1f:87:5f:ac: ca:dd:45:0b:39:97:43:fe:f7:1a:22:38:a2:1d:de: e3:a1:3b:6b:cd:69:ad:dc:63:d1:03:89:3b:b8:7f: 6e:56:00:fc:4d:a0:9d:54:4d:64:e4:1e:4b:d8:3e: 05:39:64:73:ab:51:af:d1:be:56:cb:75:48:d5:b3: 96:5a:e7:0c:a3:d0:52:e8:d8:15:44:0f:8f:ec:2c: 1c:90:e5:7a:b1:da:69:e6:6c:7c:a3:fd:28:84:2d: f6:e8:1b:36:dd:42:8b:5d:ab:68:ab:55:45:e1:d2: e9:60:67:97:bf:70:29:ec:4d:17:67:82:07:74:6d: b8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:79:90:73:39:90:47:D0:2E:7C:B8:BF:A1:59:55:86:01:DB:A6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9ef003e6-a09a-3b97-9fb6-df545c48d97a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:af:a0:61:30:f4:7b:c8:d0:8b:da:58:e4:fe:1b:3b:ba:aa: b0:c9:38:ef:56:66:f3:36:9c:b8:a5:ae:ab:aa:12:41:7a:e6: 2b:64:35:37:18:e5:ec:d5:bc:2c:1e:81:ca:f3:aa:9f:e7:98: 76:67:69:3e:11:82:15:f2:19:91:48:70:b2:f5:5f:3e:c2:f2: 8d:6e:95:18:28:2a:6d:9c:77:83:78:a0:2b:cd:36:50:0d:e5: 43:95:d2:e3:a7:5f:78:22:34:3b:d8:e2:2b:03:5d:c1:da:ee: bf:09:af:89:ac:59:6f:97:10:5d:80:4f:ff:46:4f:c0:f6:34: 25:96:87:a2:4d:7b:4a:38:e4:75:42:44:cd:c1:5f:0c:5b:ee: dd:d9:5d:db:b4:e4:ba:2d:1f:e1:c5:04:ae:b5:cf:f8:1b:ad: 33:6e:32:bb:1a:72:93:28:8a:30:ce:e2:ac:76:49:f1:36:a5: cc:f3:36:7f:0c:89:79:5f:db:61:51:17:33:85:27:86:e1:fe: 1c:07:00:c0:fb:2a:24:95:cc:85:81:a3:42:aa:18:24:13:e9: e2:e7:94:d9:59:43:0c:a0:f9:46:d8:d7:92:b8:63:45:1b:1e: 0a:1d:ba:e1:e2:aa:77:08:c6:47:21:ce:af:08:ab:ad:8f:67: 31:b3:a0:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSieNDfjC5gQwEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Nzc0NzIxZDctNWUwNC00ZTg3LWE1YjctMzc5MGFhNzRkYmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHOXWHshWwXg9bcu4lJBIgtXUoDHZXMw0W/C aaYsW5gYniA0QRqUWtLVGtLhspy1TiLbsSwOcN46knTZQY8sxe1sECVOduTxBtml OLFC2yddVl4UVTzN/6TnuLNz4sswclMoa4atEP4gIrm7BAL4RzcyNvKv72tI9cO3 rosyTpZxvB+HX6zK3UULOZdD/vcaIjiiHd7joTtrzWmt3GPRA4k7uH9uVgD8TaCd VE1k5B5L2D4FOWRzq1Gv0b5Wy3VI1bOWWucMo9BS6NgVRA+P7CwckOV6sdpp5mx8 o/0ohC326Bs23UKLXatoq1VF4dLpYGeXv3Ap7E0XZ4IHdG24lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB5kHM5kEfQLny4v6FZVYYB26ZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWVmMDAzZTYtYTA5YS0z Yjk3LTlmYjYtZGY1NDVjNDhkOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cANMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIavoGEw9HvI0IvaWOT+Gzu6qrDJOO9WZvM2nLilrquqEkF65itkNTcY 5ezVvCwegcrzqp/nmHZnaT4RghXyGZFIcLL1Xz7C8o1ulRgoKm2cd4N4oCvNNlAN 5UOV0uOnX3giNDvY4isDXcHa7r8Jr4msWW+XEF2AT/9GT8D2NCWWh6JNe0o45HVC RM3BXwxb7t3ZXdu05LotH+HFBK61z/gbrTNuMrsacpMoijDO4qx2SfE2pczzNn8M iXlf22FRFzOFJ4bh/hwHAMD7KiSVzIWBo0KqGCQT6eLnlNlZQwyg+UbY15K4Y0Ub HgoduuHiqncIxkchzq8Iq62PZzGzoN8= -----END CERTIFICATE-----Generated at Fri May 9 03:41:46 2025 by rpki-client