$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa File: bb391dc9-1f19-3e65-be6c-947a5db5500a.roa (raw, json) Hash identifier: lWnI6zXBa7q0UuaB9+74qjVOFyJUSLPjilfF7peWkvU= Subject key identifier: DD:01:EA:AA:9F:1E:94:5F:C5:37:74:BD:AE:57:64:9A:8C:A2:BE:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4A2BDEEC9822A3F8EFC0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27338 IP address blocks: 209.192.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4a:2b:de:ec:98:22:a3:f8:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=fe9b844b-18fc-4e3c-ba0a-15ea17f42f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e6:fd:27:7a:bb:17:b4:bf:cc:9a:06:ae:55: d6:c4:83:52:a7:4b:7b:e5:51:6a:78:0a:7f:59:33: bf:ca:a5:c2:d6:36:d8:81:14:18:7b:b8:ef:8e:c7: 2c:c6:e1:13:ce:3f:4f:df:0b:67:db:0e:a6:ec:21: 74:5f:b1:e0:cf:c1:de:f1:1c:d5:bd:67:50:78:af: 44:8a:7d:51:9c:59:65:f1:44:7c:82:61:dc:46:83: c8:bb:49:21:b1:2b:fe:5e:bd:fd:1d:f0:24:73:30: 3c:21:9b:aa:18:dd:7f:44:10:64:99:27:75:d5:a1: e6:32:bd:1f:eb:03:6e:14:6b:67:a6:bc:79:6d:fe: 10:71:51:b0:8e:47:ed:0e:e4:be:7f:04:5b:e8:f1: 30:fe:32:86:28:fd:b7:54:c3:d6:89:16:1a:7e:c6: c9:b5:ca:58:ef:70:d0:9a:73:ec:58:78:6a:a5:91: 6a:1b:3b:f6:4e:a0:d6:dd:c8:9e:70:cc:e9:54:73: 1f:ee:cb:06:ed:12:c8:9e:1b:f8:ed:f1:94:46:5f: 6e:4c:0c:14:00:8c:af:47:5f:83:c2:f8:b1:e1:c7: 47:4b:5d:b7:b1:1c:47:7c:fb:69:ee:71:25:31:3b: e5:fe:05:d6:fa:4c:92:3f:b8:17:2e:4e:f6:81:63: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:01:EA:AA:9F:1E:94:5F:C5:37:74:BD:AE:57:64:9A:8C:A2:BE:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bb391dc9-1f19-3e65-be6c-947a5db5500a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:59:ad:67:73:48:88:68:0b:f5:47:43:8b:f4:de:13:ce:f8: eb:59:9b:33:4c:ae:0c:dd:79:d4:87:7c:63:fa:a3:9c:e8:9d: 7a:5e:a3:89:f4:67:b8:06:b2:e7:c2:ab:fd:32:02:35:ff:62: 37:57:8b:43:f6:8d:c5:9b:ee:11:a2:39:5f:f0:f8:de:60:de: 44:7e:6c:10:a2:bb:74:99:45:d0:ec:fb:4b:16:d2:60:ab:a5: 0f:4b:fa:ff:73:81:1a:ed:f1:65:b2:41:7c:bd:27:d7:b6:55: 71:77:63:c6:82:70:93:ca:aa:35:70:9a:16:c2:9b:b6:44:f4: 5d:b7:fd:9e:d7:c6:65:e7:3e:60:7c:20:e5:d4:92:61:cb:92: 29:66:a3:36:47:fb:ba:c8:37:bc:4a:fc:bd:52:91:07:1d:58: e7:67:ca:a8:d9:cf:7c:d1:33:73:7e:b6:ad:22:9e:ed:64:dd: 6e:ae:46:62:b9:0f:65:78:5b:09:ec:7e:b3:df:81:13:ee:87: d2:eb:3e:d4:0d:13:63:0d:98:f6:dc:56:c1:b2:95:4f:3b:9b: 6d:23:4f:28:27:82:65:dd:84:22:e6:00:3d:b8:63:0a:63:bf: 31:23:e7:32:09:8b:68:96:a4:cf:5c:f1:46:8d:fd:5d:ce:40: db:0a:8e:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkor3uyYIqP478AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmU5Yjg0NGItMThmYy00ZTNjLWJhMGEtMTVlYTE3ZjQyZjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeb9J3q7F7S/zJoGrlXWxINSp0t75VFqeAp/ WTO/yqXC1jbYgRQYe7jvjscsxuETzj9P3wtn2w6m7CF0X7Hgz8He8RzVvWdQeK9E in1RnFll8UR8gmHcRoPIu0khsSv+Xr39HfAkczA8IZuqGN1/RBBkmSd11aHmMr0f 6wNuFGtnprx5bf4QcVGwjkftDuS+fwRb6PEw/jKGKP23VMPWiRYafsbJtcpY73DQ mnPsWHhqpZFqGzv2TqDW3ciecMzpVHMf7ssG7RLInhv47fGURl9uTAwUAIyvR1+D wvix4cdHS123sRxHfPtp7nElMTvl/gXW+kySP7gXLk72gWN+rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0B6qqfHpRfxTd0va5XZJqMor6HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmIzOTFkYzktMWYxOS0z ZTY1LWJlNmMtOTQ3YTVkYjU1MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxZrWdzSIhoC/VHQ4v03hPO+OtZmzNMrgzdedSHfGP6o5zonXpeo4n0 Z7gGsufCq/0yAjX/YjdXi0P2jcWb7hGiOV/w+N5g3kR+bBCiu3SZRdDs+0sW0mCr pQ9L+v9zgRrt8WWyQXy9J9e2VXF3Y8aCcJPKqjVwmhbCm7ZE9F23/Z7XxmXnPmB8 IOXUkmHLkilmozZH+7rIN7xK/L1SkQcdWOdnyqjZz3zRM3N+tq0inu1k3W6uRmK5 D2V4WwnsfrPfgRPuh9LrPtQNE2MNmPbcVsGylU87m20jTygngmXdhCLmAD24Ywpj vzEj5zIJi2iWpM9c8UaN/V3OQNsKjv4= -----END CERTIFICATE-----Generated at Sat May 10 14:52:24 2025 by rpki-client