$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa File: c70f49b6-5761-3442-a40c-5a838f9fd894.roa (raw, json) Hash identifier: nIeBzrfqBxqqvsm+AVzOKaQeKlsZ0YF6gFGCh1Da6Ls= Subject key identifier: 3E:1C:94:5E:10:C3:49:86:76:3D:30:85:7A:A8:9A:E1:78:8F:CC:3F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858497F09A167B218DBB8F1B057A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa Signing time: Sat 12 Apr 2025 01:00:48 +0000 ROA not before: Sat 12 Apr 2025 01:00:48 +0000 ROA not after: Fri 11 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 216.96.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7f:09:a1:67:b2:18:db:b8:f1:b0:57:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 12 01:00:48 2025 GMT Not After : Jul 11 01:00:48 2025 GMT Subject: CN=3a887bd2-e19e-4fe6-ac81-ef5047635f35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ac:f1:03:09:1f:02:f4:24:48:c6:cc:78:95: 61:a5:38:80:5d:e2:29:28:aa:dc:38:93:63:ac:77: e0:7f:3c:5c:00:ca:69:7a:52:0b:e1:64:f1:63:9d: ae:05:02:18:74:14:2d:4a:1e:01:20:bd:af:cc:75: 2a:c6:30:fb:e6:6d:f4:31:a1:b4:eb:79:3b:01:9e: c0:1f:57:66:aa:9a:3d:b8:9d:62:58:7a:6f:84:d8: 9c:f7:9d:16:81:03:0a:26:4a:14:d0:4c:0a:5d:6d: 7f:d7:fd:e4:85:3a:f6:a2:85:ce:21:8a:71:99:87: 23:18:f2:3e:94:a0:33:d7:33:2e:32:83:37:c6:a9: 41:af:53:3b:f0:6f:02:a0:95:18:71:f8:06:fb:db: 57:87:8e:78:3f:41:bf:70:35:d3:64:7a:21:3a:3b: d6:32:4a:1a:a7:26:07:08:ca:08:ac:3a:d5:36:37: ed:26:ae:69:3b:94:0c:b0:c9:21:e3:fe:6e:7c:dc: 14:da:f2:43:10:f5:57:d1:ee:b1:03:f1:34:4a:07: 53:69:41:5c:9e:5e:35:a4:8b:03:3e:77:4c:83:28: db:b6:a4:95:a7:cc:71:86:40:d8:15:07:5b:1c:f9: e5:f8:c5:75:d8:9d:cc:44:aa:14:03:4d:39:fe:88: 0f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1C:94:5E:10:C3:49:86:76:3D:30:85:7A:A8:9A:E1:78:8F:CC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c70f49b6-5761-3442-a40c-5a838f9fd894.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b3:38:85:6b:89:08:cc:eb:68:ca:38:ef:ba:b7:14:d7:3a: e2:81:3f:14:34:73:a2:5c:3a:46:37:34:1b:71:f0:8d:ad:d9: 61:18:51:b5:c6:b9:f2:8d:b2:7e:ac:9c:6c:b7:fd:c2:14:20: b2:31:67:e6:c9:46:3c:fa:54:f8:05:04:6b:7b:dd:ae:3d:22: 2f:18:5e:7a:9e:e0:87:5c:6e:46:4e:d3:87:26:e0:08:53:24: bf:d3:0a:f5:34:f0:58:f0:58:0b:77:46:0c:86:84:5e:ec:46: 90:a5:e1:86:8e:05:83:f9:61:4c:82:28:23:c8:03:d2:5f:5b: 20:32:6c:37:e9:6f:3a:d4:a8:08:69:1e:eb:9c:a3:55:77:df: fe:9c:7e:80:89:81:06:80:a9:44:df:2d:10:f5:74:42:89:63: 66:bb:b9:3e:9f:44:cb:22:f2:65:2f:e2:3c:76:41:99:a7:91: be:2c:e8:2e:71:01:14:b6:da:c4:23:f0:44:08:62:ef:3f:f3: a3:72:27:5f:04:9d:1e:91:c1:57:3a:71:f4:06:d2:1f:f5:41: 61:e2:c4:07:32:97:48:97:2a:79:50:09:5e:c6:0c:aa:9a:cc: 60:0a:29:94:ff:ed:37:de:43:04:4c:40:0a:2f:70:d6:76:97: f6:69:ff:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl/CaFnshjbuPGwV6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQxMjAxMDA0OFoXDTI1MDcxMTAxMDA0OFowLzEtMCsGA1UEAxMk M2E4ODdiZDItZTE5ZS00ZmU2LWFjODEtZWY1MDQ3NjM1ZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKzxAwkfAvQkSMbMeJVhpTiAXeIpKKrcOJNj rHfgfzxcAMppelIL4WTxY52uBQIYdBQtSh4BIL2vzHUqxjD75m30MaG063k7AZ7A H1dmqpo9uJ1iWHpvhNic950WgQMKJkoU0EwKXW1/1/3khTr2ooXOIYpxmYcjGPI+ lKAz1zMuMoM3xqlBr1M78G8CoJUYcfgG+9tXh454P0G/cDXTZHohOjvWMkoapyYH CMoIrDrVNjftJq5pO5QMsMkh4/5ufNwU2vJDEPVX0e6xA/E0SgdTaUFcnl41pIsD PndMgyjbtqSVp8xxhkDYFQdbHPnl+MV12J3MRKoUA005/ogPQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4clF4Qw0mGdj0whXqomuF4j8w/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzcwZjQ5YjYtNTc2MS0z NDQyLWE0MGMtNWE4MzhmOWZkODk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2GAeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABazOIVriQjM62jKOO+6txTXOuKBPxQ0c6JcOkY3NBtx8I2t2WEYUbXG ufKNsn6snGy3/cIUILIxZ+bJRjz6VPgFBGt73a49Ii8YXnqe4IdcbkZO04cm4AhT JL/TCvU08FjwWAt3RgyGhF7sRpCl4YaOBYP5YUyCKCPIA9JfWyAybDfpbzrUqAhp Huuco1V33/6cfoCJgQaAqUTfLRD1dEKJY2a7uT6fRMsi8mUv4jx2QZmnkb4s6C5x ARS22sQj8EQIYu8/86NyJ18EnR6RwVc6cfQG0h/1QWHixAcyl0iXKnlQCV7GDKqa zGAKKZT/7TfeQwRMQAovcNZ2l/Zp/+4= -----END CERTIFICATE-----Generated at Thu May 8 04:34:16 2025 by rpki-client