$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7bc4ed2-66ec-37e5-9f5f-1c81d9cff3de.roa File: b7bc4ed2-66ec-37e5-9f5f-1c81d9cff3de.roa (raw, json) Hash identifier: CMz1X6ZjsByrwV3aec/io2RSyDTn1y9jGUsXL4o+BEg= Subject key identifier: 84:53:0A:A0:52:7C:6B:B3:6C:09:E2:C6:D1:16:E6:96:5B:16:A6:6C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB48EEFA1A016326C802C60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7bc4ed2-66ec-37e5-9f5f-1c81d9cff3de.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 151.213.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:8e:ef:a1:a0:16:32:6c:80:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=4e85dcc4-44d0-4843-ba6b-83ce2d9cd90b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:82:28:d0:79:b3:47:ac:0d:98:d3:ea:88:e9: ac:8f:82:25:dd:d4:b3:3b:cf:3b:d7:ad:c8:10:94: 22:ef:e2:61:1d:eb:1b:ce:0b:1a:70:50:2f:1d:d2: b8:2d:6b:d8:c8:99:8c:ce:eb:79:9b:5d:82:b3:57: 2b:7a:d1:e6:7f:6a:b1:4a:d6:a7:7a:b2:73:13:16: a0:f7:7e:23:5e:c9:7e:05:5c:fb:9a:80:72:f9:28: aa:12:c3:65:72:c4:23:8b:f2:f0:ca:e6:cd:6a:3f: 59:8c:e1:9c:39:e1:03:a9:25:31:5b:bc:60:64:a6: ee:c4:79:00:5e:ae:a8:23:7a:dd:1a:b8:10:f1:58: d5:3f:3c:42:86:6b:9c:1b:d1:8a:fc:d8:3a:fc:f1: a7:a9:2b:77:2a:17:47:8d:35:d0:74:cf:92:22:7b: f5:31:e6:3e:c2:86:4e:6c:e4:ea:7b:35:98:6e:7c: ba:92:ed:a5:08:22:98:a7:c0:03:7f:94:a9:77:20: 94:56:34:a5:32:ac:a8:28:eb:de:72:89:49:f8:39: 99:22:1a:30:c8:38:32:74:4a:27:51:71:f5:69:45: 56:03:4b:d4:89:74:2b:71:b1:85:eb:da:98:94:fa: 21:b0:13:93:97:1d:12:c8:0c:1c:d2:73:30:db:22: 4b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:53:0A:A0:52:7C:6B:B3:6C:09:E2:C6:D1:16:E6:96:5B:16:A6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b7bc4ed2-66ec-37e5-9f5f-1c81d9cff3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b3:18:67:be:d0:95:53:62:4c:56:69:3f:14:57:c6:f9:88: c5:e7:e3:0b:6e:7d:98:a5:09:59:ca:05:a2:eb:6d:60:61:ed: 6c:3d:03:bf:16:da:32:2a:19:95:ac:55:2a:34:e1:d1:85:1b: e8:c6:27:24:35:35:d5:f0:18:f1:1d:52:4b:09:82:2e:13:fe: 20:9a:63:1d:ec:6b:f2:4e:71:d6:d6:b0:a8:09:07:16:aa:1c: e5:0f:ed:d0:47:ff:06:c6:c1:a5:0b:7e:28:1d:d1:d3:d5:71: 09:4b:62:02:45:da:9f:a4:23:98:3c:85:e8:1a:3c:bd:ae:76: 47:b4:ac:c1:5f:1e:50:c6:51:4c:b8:34:6a:5e:6e:ad:e0:d6: f2:b7:6c:c6:1a:82:32:e7:4d:b8:10:2b:82:22:94:bb:9e:ba: 59:c7:70:ae:af:34:40:50:a4:9b:e5:b0:3f:38:23:19:85:ab: 45:b2:9e:a1:97:50:2f:15:ca:a0:48:67:b4:5f:bf:69:d3:0f: 6e:cc:eb:ad:39:e1:8e:a8:f4:5e:d6:57:0e:b5:32:d4:9d:6b: 56:22:19:76:94:1a:39:75:19:4b:c3:ad:b1:10:e0:d0:f9:64: 9f:9d:9b:b8:cf:96:36:21:3f:57:1d:15:d1:e9:15:8e:f9:39: 43:10:2b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtI7voaAWMmyALGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NGU4NWRjYzQtNDRkMC00ODQzLWJhNmItODNjZTJkOWNkOTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIIo0HmzR6wNmNPqiOmsj4Il3dSzO887163I EJQi7+JhHesbzgsacFAvHdK4LWvYyJmMzut5m12Cs1cretHmf2qxStanerJzExag 934jXsl+BVz7moBy+SiqEsNlcsQji/LwyubNaj9ZjOGcOeEDqSUxW7xgZKbuxHkA Xq6oI3rdGrgQ8VjVPzxChmucG9GK/Ng6/PGnqSt3KhdHjTXQdM+SInv1MeY+woZO bOTqezWYbny6ku2lCCKYp8ADf5SpdyCUVjSlMqyoKOvecolJ+DmZIhowyDgydEon UXH1aUVWA0vUiXQrcbGF69qYlPohsBOTlx0SyAwc0nMw2yJL+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRTCqBSfGuzbAnixtEW5pZbFqZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjdiYzRlZDItNjZlYy0z N2U1LTlmNWYtMWM4MWQ5Y2ZmM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl9UwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2zGGe+0JVTYkxWaT8UV8b5iMXn4wtufZilCVnKBaLrbWBh7Ww9A78W 2jIqGZWsVSo04dGFG+jGJyQ1NdXwGPEdUksJgi4T/iCaYx3sa/JOcdbWsKgJBxaq HOUP7dBH/wbGwaULfigd0dPVcQlLYgJF2p+kI5g8hegaPL2udke0rMFfHlDGUUy4 NGpebq3g1vK3bMYagjLnTbgQK4IilLueulnHcK6vNEBQpJvlsD84IxmFq0WynqGX UC8VyqBIZ7Rfv2nTD27M66054Y6o9F7WVw61MtSda1YiGXaUGjl1GUvDrbEQ4ND5 ZJ+dm7jPljYhP1cdFdHpFY75OUMQK5A= -----END CERTIFICATE-----Generated at Thu May 8 16:45:50 2025 by rpki-client