$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa File: ca680b6f-d40e-316c-b986-e0c0fb556767.roa (raw, json) Hash identifier: 42JW1Y+Am0chAFURTdgJ8SmbKw4KdwuFy/zv75G0l4U= Subject key identifier: 72:10:93:B0:F0:AA:AA:ED:DD:05:7E:4A:73:73:71:CC:99:88:88:DF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849CE9A340C034831151B252400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 216.96.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:34:0c:03:48:31:15:1b:25:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=edb8b6ed-8d6d-4e47-ad25-f1fc8ad80e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:de:6c:10:6c:cb:e9:f6:9f:75:eb:a9:80:36: b8:f1:1e:91:7c:f1:a6:72:fc:ad:a8:1f:39:6b:cc: 0a:99:24:53:8e:95:0d:0d:3c:c7:c4:b4:67:c5:7a: 5f:d3:57:46:f1:c2:3a:9c:3a:e5:9a:f2:6a:72:11: 57:8b:92:f4:4e:64:e3:6b:be:cc:30:d3:39:57:10: b0:2a:31:31:f9:c9:43:ff:69:7b:04:5b:14:38:3b: 4a:92:13:71:37:c3:ac:8a:d7:f1:1e:e1:ad:67:00: dd:55:c4:f3:79:34:c5:94:50:16:27:a9:29:97:06: 07:1f:a4:5a:99:1f:19:b4:63:dc:9e:70:82:a6:5f: e1:bf:13:45:83:cd:6f:ef:d6:d2:99:1c:26:e8:0e: de:c4:ab:ea:f2:44:0e:01:64:28:50:61:b1:d2:0f: 34:72:58:7b:a4:71:af:8a:8f:a2:69:9d:3d:88:35: 08:ac:f9:37:81:d2:a6:d7:62:a0:ce:fb:fe:67:6f: 02:d5:c0:86:47:8e:81:d2:f3:e4:30:75:11:54:be: 51:ff:58:56:77:ba:81:61:bf:0d:65:1b:16:9e:47: df:8e:17:9e:c1:e9:82:34:71:ea:cc:fe:7c:f0:9c: 7a:d7:77:89:05:44:6e:31:74:a7:e2:6e:a4:d9:50: e7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:10:93:B0:F0:AA:AA:ED:DD:05:7E:4A:73:73:71:CC:99:88:88:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ca680b6f-d40e-316c-b986-e0c0fb556767.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.96.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:31:ca:86:b9:c8:24:26:80:76:5e:58:b2:c4:e7:79:cb:ee: 00:5f:e8:d9:5d:1b:de:77:82:0d:da:74:e5:16:92:d5:c2:76: af:72:a6:43:4b:9b:64:3d:ce:02:3f:be:4c:a0:a2:a2:93:e5: 4c:83:09:8e:de:7d:89:76:92:ac:2a:6c:6b:99:00:1a:8c:45: 51:a7:da:d0:9b:94:51:0e:33:f6:df:4e:6d:41:c3:f2:b5:f0: 2d:af:8f:e5:e9:e0:f8:bb:0b:5c:c6:eb:0b:bc:75:b5:d6:eb: d0:01:5e:c7:e8:78:26:20:75:27:02:28:c2:91:98:c3:13:0d: ea:06:46:0a:1b:70:ef:59:8e:14:af:3d:b3:3d:98:49:20:50: aa:32:90:e3:81:72:b6:1f:78:6c:08:c9:ab:80:fe:be:2a:1f: 82:8d:6e:9f:11:a0:da:83:43:24:9b:6d:e6:55:dd:45:6a:92: d1:fc:00:f8:15:45:e3:91:3c:de:06:b3:c3:9a:5b:72:81:bd: 51:3e:2c:85:01:76:cd:f0:5e:10:a3:65:9d:be:bb:42:d4:74: 7e:7d:46:dd:0c:39:00:7b:a4:eb:77:f4:39:35:f8:b1:36:32: fc:d2:5e:42:01:9e:1b:35:0f:7d:69:d7:b0:8b:c0:ad:6f:73: 20:c7:cf:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmjQMA0gxFRslJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZWRiOGI2ZWQtOGQ2ZC00ZTQ3LWFkMjUtZjFmYzhhZDgwZTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt5sEGzL6fafdeupgDa48R6RfPGmcvytqB85 a8wKmSRTjpUNDTzHxLRnxXpf01dG8cI6nDrlmvJqchFXi5L0TmTja77MMNM5VxCw KjEx+clD/2l7BFsUODtKkhNxN8OsitfxHuGtZwDdVcTzeTTFlFAWJ6kplwYHH6Ra mR8ZtGPcnnCCpl/hvxNFg81v79bSmRwm6A7exKvq8kQOAWQoUGGx0g80clh7pHGv io+iaZ09iDUIrPk3gdKm12Kgzvv+Z28C1cCGR46B0vPkMHURVL5R/1hWd7qBYb8N ZRsWnkffjheewemCNHHqzP588Jx613eJBURuMXSn4m6k2VDn1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIQk7Dwqqrt3QV+SnNzccyZiIjfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2E2ODBiNmYtZDQwZS0z MTZjLWI5ODYtZTBjMGZiNTU2NzY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2GA2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYxyoa5yCQmgHZeWLLE53nL7gBf6NldG953gg3adOUWktXCdq9ypkNL m2Q9zgI/vkygoqKT5UyDCY7efYl2kqwqbGuZABqMRVGn2tCblFEOM/bfTm1Bw/K1 8C2vj+Xp4Pi7C1zG6wu8dbXW69ABXsfoeCYgdScCKMKRmMMTDeoGRgobcO9ZjhSv PbM9mEkgUKoykOOBcrYfeGwIyauA/r4qH4KNbp8RoNqDQySbbeZV3UVqktH8APgV ReORPN4Gs8OaW3KBvVE+LIUBds3wXhCjZZ2+u0LUdH59Rt0MOQB7pOt39Dk1+LE2 MvzSXkIBnhs1D31p17CLwK1vcyDHz7Y= -----END CERTIFICATE-----Generated at Sat May 10 22:06:22 2025 by rpki-client