$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa File: b508d8e4-48c2-34a6-8dec-287de9c363f1.roa (raw, json) Hash identifier: 0tTf1N4Dm0CfhgzuBgYkvsnR/sC4wPIBze6dfeR2bTQ= Subject key identifier: F9:1E:01:38:DA:0A:BA:98:49:CA:F8:5F:AB:7B:7D:7B:FE:D4:EC:11 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A251D23E35E9747FEB680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27338 IP address blocks: 209.192.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:25:1d:23:e3:5e:97:47:fe:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1c088641-0e73-4de5-9f68-4469e9bd37bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:4c:98:77:36:cf:35:e6:8b:76:4f:d7:7a: f2:da:b5:c0:31:83:c7:a1:fe:04:65:42:e9:b1:70: 24:a6:8f:3a:3f:48:45:66:56:19:dd:d8:fb:2d:0e: ea:fd:7a:6f:bc:91:3c:ba:9b:ef:b3:00:cb:4e:fe: 3c:5d:ac:53:93:b8:7b:75:43:2c:fd:23:68:e4:7f: 91:da:11:20:80:84:5e:e0:0a:79:60:7a:b7:16:bb: 50:08:39:10:21:1b:a7:b2:78:be:b6:7c:af:8e:48: 59:36:70:2f:71:3e:40:1c:de:48:00:39:0d:97:b1: d4:4f:ae:1d:88:09:4b:40:b0:92:c9:fc:8f:b0:8c: f7:b0:e0:c7:cf:23:5e:6c:22:32:66:37:f9:fd:a7: f3:8e:31:1c:96:f2:af:63:83:3a:aa:f5:5c:14:27: 1d:9b:88:0f:4f:02:27:21:4a:76:36:2e:dd:27:fa: a6:ab:eb:68:7a:6d:18:c6:ae:6e:53:fa:83:86:25: bf:69:59:01:e1:fc:42:67:1c:d5:50:d7:e7:c3:74: d7:76:c1:8e:f9:41:01:c7:b2:c2:6c:1b:24:f7:cc: 49:c4:a6:75:73:c2:82:0b:9b:c6:6e:48:67:43:cc: 32:a1:99:59:3b:16:17:57:3f:b2:09:61:2f:da:f6: 4b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:1E:01:38:DA:0A:BA:98:49:CA:F8:5F:AB:7B:7D:7B:FE:D4:EC:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b508d8e4-48c2-34a6-8dec-287de9c363f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:f1:ee:fe:37:8f:42:dc:7c:ed:8d:99:b9:54:e0:73:cd:eb: 0e:7c:e8:2e:ad:19:b6:18:bd:c1:7e:50:2c:a9:00:c6:73:77: f1:90:bf:a8:a7:d1:ec:f5:9c:3a:d9:1a:e7:a8:89:4a:94:6b: 54:bf:eb:d0:97:8e:b5:3f:fb:b5:c4:83:a9:84:1a:57:f8:95: b8:a1:15:4c:1b:6d:4d:56:93:53:71:b4:c9:a0:b2:bb:77:70: 43:4f:47:d5:39:3a:14:e7:1f:fa:93:ff:c4:fc:d2:38:ec:44: 4d:64:c0:db:aa:da:f2:de:07:a7:6c:de:a5:c2:98:5b:9b:31: d7:96:ec:79:ff:9a:85:57:c0:ac:17:61:c0:6d:2f:d9:f4:aa: b6:68:c9:dc:92:0e:52:30:8e:d6:f8:dd:ec:49:9f:09:e6:33: 3f:20:56:5c:52:5f:ef:f5:54:75:0e:4d:90:d3:c2:e8:ad:3d: f1:ab:57:80:71:83:75:d5:32:c3:35:75:75:06:ab:e4:e9:00: de:49:8e:f6:e9:ba:d8:32:2d:f8:85:10:74:9e:1c:f4:c8:66: 01:94:91:31:d7:ea:a5:f4:72:a0:06:1f:13:b1:ef:b4:35:5b: 01:8d:66:09:79:b9:ae:eb:e3:2d:00:47:38:97:92:5f:9c:04: a5:80:e1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiUdI+Nel0f+toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWMwODg2NDEtMGU3My00ZGU1LTlmNjgtNDQ2OWU5YmQzN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCtMmHc2zzXmi3ZP13ry2rXAMYPHof4EZULp sXAkpo86P0hFZlYZ3dj7LQ7q/XpvvJE8upvvswDLTv48XaxTk7h7dUMs/SNo5H+R 2hEggIRe4Ap5YHq3FrtQCDkQIRunsni+tnyvjkhZNnAvcT5AHN5IADkNl7HUT64d iAlLQLCSyfyPsIz3sODHzyNebCIyZjf5/afzjjEclvKvY4M6qvVcFCcdm4gPTwIn IUp2Ni7dJ/qmq+toem0Yxq5uU/qDhiW/aVkB4fxCZxzVUNfnw3TXdsGO+UEBx7LC bBsk98xJxKZ1c8KCC5vGbkhnQ8wyoZlZOxYXVz+yCWEv2vZL4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkeATjaCrqYScr4X6t7fXv+1OwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjUwOGQ4ZTQtNDhjMi0z NGE2LThkZWMtMjg3ZGU5YzM2M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cAnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzx7v43j0LcfO2NmblU4HPN6w586C6tGbYYvcF+UCypAMZzd/GQv6in 0ez1nDrZGueoiUqUa1S/69CXjrU/+7XEg6mEGlf4lbihFUwbbU1Wk1NxtMmgsrt3 cENPR9U5OhTnH/qT/8T80jjsRE1kwNuq2vLeB6ds3qXCmFubMdeW7Hn/moVXwKwX YcBtL9n0qrZoydySDlIwjtb43exJnwnmMz8gVlxSX+/1VHUOTZDTwuitPfGrV4Bx g3XVMsM1dXUGq+TpAN5JjvbputgyLfiFEHSeHPTIZgGUkTHX6qX0cqAGHxOx77Q1 WwGNZgl5ua7r4y0ARziXkl+cBKWA4Yc= -----END CERTIFICATE-----Generated at Sat May 10 15:02:19 2025 by rpki-client