$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa File: a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa (raw, json) Hash identifier: NbY6R+R005oAo0y9baACl7ajR/EMdVTcnJhC3TFUQsI= Subject key identifier: A5:21:61:39:95:63:0B:06:33:71:DE:99:FC:D7:F0:9A:7A:56:80:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1B1E6367BC51A095ADE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.176.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1b:1e:63:67:bc:51:a0:95:ad:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2308ba9d-24c9-4d33-90da-72961ece047d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:1c:4e:e0:19:33:58:82:1c:d1:5c:1a:dd:d4: 38:19:7e:35:7d:6d:f0:05:98:6a:ff:0b:94:12:a3: ba:0a:15:7d:ff:a9:5c:b4:18:78:52:ba:e2:2e:84: e6:e7:64:f4:9d:bc:dc:b0:7b:bc:49:70:69:00:1b: f2:52:d3:4e:47:13:09:f1:92:df:09:5b:01:30:4e: 3d:d4:14:cd:a7:ba:fc:79:b1:9b:ca:d5:e6:ba:64: 7d:98:f3:c4:65:1a:b4:8e:23:bf:12:62:97:2f:a2: c3:33:15:c6:58:93:52:68:83:49:29:d6:d3:77:96: 20:4e:1c:72:86:7d:6d:76:a2:74:34:ae:8a:2c:86: 08:8e:15:2f:e3:7f:b9:bd:39:7f:40:73:93:b8:94: 2c:55:49:72:80:6c:df:fd:fa:36:c1:44:40:54:75: bb:bc:6d:58:0f:fc:97:ae:f3:9a:0e:41:e4:8f:cd: 36:da:11:52:bb:ac:37:e3:3f:05:00:84:7b:49:40: eb:63:f0:b5:83:f3:ad:29:90:3e:e6:99:1d:fc:14: 3e:a1:da:57:6f:31:cc:d4:86:aa:f2:37:1c:30:1c: 83:23:b7:88:31:92:3f:a5:38:a7:52:92:13:a4:fc: 50:12:b0:bf:b1:91:d1:04:34:28:84:19:a4:e9:f6: dc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:21:61:39:95:63:0B:06:33:71:DE:99:FC:D7:F0:9A:7A:56:80:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a87d8463-137e-3a43-a39b-5b5abfd08d8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.176.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:1d:75:01:fc:16:1e:a8:a7:51:ac:66:9b:83:02:c2:e7:21: 9c:05:0c:ca:7c:f2:a7:8c:c8:3c:9d:81:1e:f8:af:2c:e5:f4: 87:74:12:bd:11:50:cc:2a:09:a2:55:d4:48:4c:16:6b:f2:5a: 8c:92:1b:05:5e:e6:c5:9b:03:36:b9:6e:41:a5:42:09:c3:04: 62:c7:57:9e:7f:5d:82:41:0f:0d:3a:ca:75:13:d5:91:c6:7a: fa:5f:fc:44:8c:81:5e:a1:ea:27:87:69:1b:d3:2e:6b:8d:a2: 2e:c0:a1:4c:28:0f:4f:be:cd:6d:e2:63:91:de:de:dc:76:ae: 62:df:32:90:cc:a6:00:ef:0d:27:e3:7d:70:7e:f0:49:1f:e8: 09:74:3c:23:a7:84:de:cf:6f:39:f4:87:fb:e8:e4:04:57:de: 82:c3:80:d9:85:fd:9b:60:3e:34:1f:38:e2:b6:98:9c:64:4a: 3a:a1:2d:4e:d0:55:7c:00:37:49:99:2b:3b:03:02:9b:c5:0b: 06:e8:a2:27:5d:8e:0b:83:9b:b1:2c:2f:ed:58:12:d2:27:37: 45:0f:be:c3:50:f7:0f:23:3b:76:0f:47:7a:69:54:06:13:6f: 4b:dd:b7:d0:8a:ee:3c:07:aa:cf:b2:e4:03:f0:bd:1f:19:07: 2d:a3:33:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShseY2e8UaCVreAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjMwOGJhOWQtMjRjOS00ZDMzLTkwZGEtNzI5NjFlY2UwNDdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhxO4BkzWIIc0Vwa3dQ4GX41fW3wBZhq/wuU EqO6ChV9/6lctBh4UrriLoTm52T0nbzcsHu8SXBpABvyUtNORxMJ8ZLfCVsBME49 1BTNp7r8ebGbytXmumR9mPPEZRq0jiO/EmKXL6LDMxXGWJNSaINJKdbTd5YgThxy hn1tdqJ0NK6KLIYIjhUv43+5vTl/QHOTuJQsVUlygGzf/fo2wURAVHW7vG1YD/yX rvOaDkHkj8022hFSu6w34z8FAIR7SUDrY/C1g/OtKZA+5pkd/BQ+odpXbzHM1Iaq 8jccMByDI7eIMZI/pTinUpITpPxQErC/sZHRBDQohBmk6fbccwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUhYTmVYwsGM3HemfzX8Jp6VoAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTg3ZDg0NjMtMTM3ZS0z YTQzLWEzOWItNWI1YWJmZDA4ZDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2LDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQddQH8Fh6op1GsZpuDAsLnIZwFDMp88qeMyDydgR74ryzl9Id0Er0R UMwqCaJV1EhMFmvyWoySGwVe5sWbAza5bkGlQgnDBGLHV55/XYJBDw06ynUT1ZHG evpf/ESMgV6h6ieHaRvTLmuNoi7AoUwoD0++zW3iY5He3tx2rmLfMpDMpgDvDSfj fXB+8Ekf6Al0PCOnhN7Pbzn0h/vo5ARX3oLDgNmF/ZtgPjQfOOK2mJxkSjqhLU7Q VXwAN0mZKzsDApvFCwbooiddjguDm7EsL+1YEtInN0UPvsNQ9w8jO3YPR3ppVAYT b0vdt9CK7jwHqs+y5APwvR8ZBy2jM20= -----END CERTIFICATE-----Generated at Wed May 7 11:39:12 2025 by rpki-client