$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa File: acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa (raw, json) Hash identifier: AD//3ahZ97LUH5HdD/CeX98v7WJJy6Oct288jQfTnOM= Subject key identifier: F2:17:D7:03:C8:32:02:94:CE:29:CE:EE:8C:54:8B:41:71:54:3B:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1188562563AFDE754F00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.196.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:11:88:56:25:63:af:de:75:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=306c8e8e-6f44-43d5-ad6d-ddec2020efb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d6:b6:04:a7:50:0b:a2:b1:57:ae:be:45:1b: a9:7e:42:db:b8:7c:1f:41:63:f8:d8:28:66:2f:5e: 96:6c:cd:b6:e3:a2:35:72:1f:a9:4f:d4:9e:7b:ce: e5:71:df:61:6f:aa:a5:77:01:61:f4:c5:20:8a:25: 5b:ee:4d:f3:c1:77:f2:1a:7c:da:28:2e:07:94:58: 3b:c8:73:02:fe:59:e3:07:5e:50:d7:93:d4:f6:a2: 2a:72:45:44:7c:87:ec:6c:e5:30:55:15:a6:d4:6c: 00:37:ce:cf:67:e1:ad:47:e3:a0:a0:89:1f:cd:58: 01:fa:a2:fc:9f:42:fd:09:9b:2e:a3:35:96:c0:b6: 69:d4:9a:f7:fb:59:cd:94:b2:bd:78:27:10:93:f2: f2:18:dd:b9:d1:10:3c:d0:55:0c:c0:e1:44:47:1f: ab:ff:03:39:32:a7:f6:03:14:f3:fa:6e:e2:15:ab: d2:ff:46:36:b3:37:a5:39:68:28:a8:9d:0d:09:27: c0:73:68:d5:90:2c:6c:9e:e9:12:ad:4b:38:20:69: ba:ff:62:ae:54:fb:62:f8:54:ba:1b:90:89:ee:5e: 18:a1:b0:02:9a:1a:dc:38:de:e4:6b:ef:8d:1c:5d: e7:74:5a:07:c2:23:3f:54:e3:1d:94:00:d5:0c:75: 22:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:17:D7:03:C8:32:02:94:CE:29:CE:EE:8C:54:8B:41:71:54:3B:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/acc98a9d-f047-3806-b8a4-f122b0c49d7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.196.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:6f:6e:fc:55:65:79:c1:5f:9b:86:bc:5e:5d:70:3d:27:bc: d4:77:01:73:99:ca:bd:dc:e7:7b:eb:4f:df:94:76:83:aa:b4: b5:45:a1:44:91:78:05:ba:50:d6:9b:0b:0c:e1:bc:68:98:40: 08:d8:0b:3e:ea:6e:bc:c0:d6:56:7d:4f:59:4b:05:36:27:da: c4:1b:72:b6:c3:c7:1d:fa:3e:73:13:d4:c0:c3:42:3f:ca:8f: 60:c2:06:9d:23:a5:4f:e8:64:1a:62:02:ce:7d:a2:79:81:f4: c1:d6:df:ab:b9:90:9c:fd:e0:2e:e6:62:92:27:06:08:24:66: 61:a8:1a:73:83:87:fe:5c:ff:a6:8b:56:e5:84:a6:6c:25:67: 7a:b2:cf:26:99:aa:11:21:46:40:1f:d8:ee:2c:9a:9e:9d:cf: 9c:2a:71:8a:0d:4a:9b:44:6f:48:c2:2a:5c:04:7d:c8:9d:96: bc:03:84:6f:d6:03:ab:bc:ea:cb:34:b6:98:4b:32:fb:5c:32: 29:e9:42:fc:94:64:5c:54:8c:5f:0d:91:31:2e:4a:6d:d0:de: 77:a9:b8:d4:c9:1d:b5:98:42:60:fb:cb:29:16:bc:4a:62:a6: 8f:48:42:aa:bd:f0:fe:3a:64:0e:8d:60:5b:6b:ef:d9:2b:51: 5f:fb:8c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShGIViVjr951TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzA2YzhlOGUtNmY0NC00M2Q1LWFkNmQtZGRlYzIwMjBlZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNa2BKdQC6KxV66+RRupfkLbuHwfQWP42Chm L16WbM2246I1ch+pT9See87lcd9hb6qldwFh9MUgiiVb7k3zwXfyGnzaKC4HlFg7 yHMC/lnjB15Q15PU9qIqckVEfIfsbOUwVRWm1GwAN87PZ+GtR+OgoIkfzVgB+qL8 n0L9CZsuozWWwLZp1Jr3+1nNlLK9eCcQk/LyGN250RA80FUMwOFERx+r/wM5Mqf2 AxTz+m7iFavS/0Y2szelOWgoqJ0NCSfAc2jVkCxsnukSrUs4IGm6/2KuVPti+FS6 G5CJ7l4YobACmhrcON7ka++NHF3ndFoHwiM/VOMdlADVDHUipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIX1wPIMgKUzinO7oxUi0FxVDvGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWNjOThhOWQtZjA0Ny0z ODA2LWI4YTQtZjEyMmIwYzQ5ZDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQMTHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtvbvxVZXnBX5uGvF5dcD0nvNR3AXOZyr3c53vrT9+UdoOqtLVFoUSR eAW6UNabCwzhvGiYQAjYCz7qbrzA1lZ9T1lLBTYn2sQbcrbDxx36PnMT1MDDQj/K j2DCBp0jpU/oZBpiAs59onmB9MHW36u5kJz94C7mYpInBggkZmGoGnODh/5c/6aL VuWEpmwlZ3qyzyaZqhEhRkAf2O4smp6dz5wqcYoNSptEb0jCKlwEfcidlrwDhG/W A6u86ss0tphLMvtcMinpQvyUZFxUjF8NkTEuSm3Q3nepuNTJHbWYQmD7yykWvEpi po9IQqq98P46ZA6NYFtr79krUV/7jHY= -----END CERTIFICATE-----Generated at Sat May 10 04:56:03 2025 by rpki-client