$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa File: c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa (raw, json) Hash identifier: zAVCvZVbyGApJTMITtpGxN8JJJTV3BONeiINIJ1sGcc= Subject key identifier: 27:B1:55:11:47:6F:92:3E:D9:A9:FC:9C:12:1D:4F:FE:38:0C:7D:AC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1A4A764C59FFBEB93600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.23.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1a:4a:76:4c:59:ff:be:b9:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=8108a59f-57b5-4525-8d7c-439fed71fe16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:7e:a5:d3:4a:74:b9:ab:fa:77:dc:d5:4d: d0:26:19:57:13:73:4c:b0:01:51:a7:af:9b:ff:f7: e4:f1:8f:ca:04:01:78:e2:0a:f0:24:5e:2c:7a:61: 8a:c4:cb:e4:ba:b0:28:10:a3:82:38:4b:6e:53:37: f2:00:c2:23:81:5a:5f:aa:4d:53:65:60:ee:92:5f: 15:3d:96:6b:95:ef:5a:73:e9:c2:16:a7:e8:13:d5: 21:ab:89:e2:47:24:95:32:38:17:7a:8a:95:42:03: f0:1e:b4:cc:cf:2b:23:5e:48:c1:cb:9e:e9:d2:57: ad:d2:0d:2f:2a:83:f4:8e:51:43:07:b0:e9:6f:f1: 31:5d:10:3f:69:ba:0b:43:81:c9:b1:1a:25:ed:3c: b1:42:6a:fb:39:9e:4d:89:9f:74:62:f2:d0:24:44: 2e:20:93:5b:2d:e8:a3:a1:95:cc:fe:16:a9:6c:e2: 65:4e:27:dc:b6:ac:1f:6f:39:fa:f2:0b:9e:47:57: 55:c9:47:eb:cd:2c:3e:f4:95:75:23:8b:e2:a0:1e: 6e:ff:59:a2:1a:eb:ff:fe:e5:05:78:08:37:c9:8b: 15:70:b3:fb:da:70:84:f6:2f:2a:f6:93:a8:78:4d: dc:fe:ea:1a:6d:1f:3a:b6:d5:3c:45:24:67:b9:14: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:B1:55:11:47:6F:92:3E:D9:A9:FC:9C:12:1D:4F:FE:38:0C:7D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c654f3ad-4e82-3334-a1b5-ac9cc32da31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.23.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cb:ff:7e:5c:2a:07:9a:42:41:53:1b:d7:35:16:47:20:4b: fa:93:38:24:14:81:b1:87:8d:6e:6f:75:62:d9:70:cc:a3:5b: 28:e5:40:b3:a8:67:39:c6:5e:db:30:46:a1:d2:d7:9c:2a:23: 7b:23:3a:39:b2:45:6c:b9:d8:f3:a2:70:ec:93:b1:5e:34:bb: 9a:ed:33:2f:41:2d:2f:2e:17:ae:86:29:01:34:7c:84:de:c4: 31:da:5c:0e:d4:a5:56:f0:20:fa:d8:df:f7:d1:11:ca:c6:c6: cf:86:13:a3:d7:d2:5a:57:bd:32:eb:e9:0a:b0:ad:ca:71:99: c5:24:59:4e:ec:df:2d:61:e3:f1:0c:26:e3:3a:17:66:71:b6: dc:b0:43:9e:17:34:d8:9b:f7:6c:eb:ed:11:d7:c0:e0:21:39: 83:e8:4b:26:08:49:cc:69:87:a0:fe:1d:20:0c:fa:c3:a7:7a: 81:a8:5d:cb:c2:3e:d4:fe:d2:1b:05:49:9a:f3:81:e2:07:d7: 68:08:8c:3e:c7:aa:a8:d2:ac:7b:1f:1c:32:3c:38:a9:fa:af: e7:2d:48:5b:4a:ff:4f:87:75:82:08:4a:fa:25:3d:70:ec:30: 7c:be:be:47:c2:61:0e:75:c2:40:3e:3c:c0:6b:2f:de:f7:89: 8c:18:0a:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShpKdkxZ/765NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ODEwOGE1OWYtNTdiNS00NTI1LThkN2MtNDM5ZmVkNzFmZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9B+pdNKdLmr+nfc1U3QJhlXE3NMsAFRp6+b //fk8Y/KBAF44grwJF4semGKxMvkurAoEKOCOEtuUzfyAMIjgVpfqk1TZWDukl8V PZZrle9ac+nCFqfoE9Uhq4niRySVMjgXeoqVQgPwHrTMzysjXkjBy57p0let0g0v KoP0jlFDB7Dpb/ExXRA/aboLQ4HJsRol7TyxQmr7OZ5NiZ90YvLQJEQuIJNbLeij oZXM/hapbOJlTifctqwfbzn68gueR1dVyUfrzSw+9JV1I4vioB5u/1miGuv//uUF eAg3yYsVcLP72nCE9i8q9pOoeE3c/uoabR86ttU8RSRnuRTP5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCexVRFHb5I+2an8nBIdT/44DH2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzY1NGYzYWQtNGU4Mi0z MzM0LWExYjUtYWM5Y2MzMmRhMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2BcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErL/35cKgeaQkFTG9c1FkcgS/qTOCQUgbGHjW5vdWLZcMyjWyjlQLOo ZznGXtswRqHS15wqI3sjOjmyRWy52POicOyTsV40u5rtMy9BLS8uF66GKQE0fITe xDHaXA7UpVbwIPrY3/fREcrGxs+GE6PX0lpXvTLr6QqwrcpxmcUkWU7s3y1h4/EM JuM6F2ZxttywQ54XNNib92zr7RHXwOAhOYPoSyYIScxph6D+HSAM+sOneoGoXcvC PtT+0hsFSZrzgeIH12gIjD7HqqjSrHsfHDI8OKn6r+ctSFtK/0+HdYIISvolPXDs MHy+vkfCYQ51wkA+PMBrL973iYwYCls= -----END CERTIFICATE-----Generated at Wed May 7 09:19:32 2025 by rpki-client