$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3521c4c-8b86-3753-8c96-a289ffb4f163.roa File: d3521c4c-8b86-3753-8c96-a289ffb4f163.roa (raw, json) Hash identifier: SL11AWqHZ2OWi6M4+A8V3bB0KR/ZgDQdv6HCzV6AEPE= Subject key identifier: A3:21:94:C9:B5:48:12:34:41:E4:1B:B5:09:FD:B1:6F:35:10:72:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4B60E58C95407D965000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3521c4c-8b86-3753-8c96-a289ffb4f163.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 40399 IP address blocks: 63.138.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4b:60:e5:8c:95:40:7d:96:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5d6673af-d12d-46e5-b718-11a31de7cfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:83:23:b3:9e:6e:29:52:7a:38:6c:d5:81: 06:bf:e5:4b:67:22:a1:77:bc:93:7c:70:8e:84:ff: 2c:22:9f:27:51:c0:b6:d0:28:81:d0:03:7a:0d:a2: de:c5:ca:8f:62:67:a8:57:18:38:14:9f:c0:af:f1: da:5d:82:9e:9b:fb:e7:dd:48:df:18:ae:14:f8:de: db:60:42:dd:81:c0:b6:06:a5:12:dc:87:61:7b:66: 1d:bb:16:55:dd:8c:06:81:b4:39:0b:d5:b8:75:6d: 77:bf:91:9f:e2:7c:bd:61:6f:3e:3a:03:2d:5b:0a: 1a:c3:bc:48:74:41:6e:79:d2:9d:84:b5:68:3a:db: b7:05:01:e2:5b:6e:f4:99:7f:4e:fd:9a:df:bc:a7: f4:62:4d:fc:52:90:48:4d:10:a5:9d:2b:65:ec:c1: d0:8e:49:c8:31:f9:4c:05:65:ca:db:ad:4f:ef:f5: d4:c6:ca:39:bf:14:be:bc:80:6c:f7:ec:35:c4:a5: 1b:07:72:c1:cd:5b:17:d7:41:9e:6e:ab:aa:9b:be: 2a:66:ba:ac:68:63:04:d4:19:ca:17:91:f7:24:26: 7a:7a:92:44:38:14:b8:3c:31:89:07:60:c9:b1:96: 5a:7a:fc:5b:4f:3d:da:80:4c:e6:fa:69:cf:fd:b6: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:21:94:C9:B5:48:12:34:41:E4:1B:B5:09:FD:B1:6F:35:10:72:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d3521c4c-8b86-3753-8c96-a289ffb4f163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.138.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e4:c5:00:39:56:6c:83:16:25:ec:0d:8a:9e:79:7f:0b:fa: 49:08:83:b9:9c:7a:c4:49:57:3d:12:3b:45:cf:0e:b3:d6:7a: fc:4e:80:9c:46:71:92:8c:ff:af:66:d5:c9:6d:63:d2:ac:f1: d4:6a:04:ab:6e:f7:69:d4:4b:cf:28:c9:90:b8:65:6c:81:5a: d5:ed:93:14:5e:6b:e9:82:10:c6:07:5e:20:bc:1e:2e:7f:a4: fe:54:42:25:a6:2d:49:4e:64:25:ac:69:51:76:c5:71:ca:38: 86:9d:27:e6:91:b8:58:df:26:9f:48:ea:62:db:14:7c:3f:09: c9:8e:b8:95:d2:ed:58:2c:be:74:66:80:d3:ac:2b:12:a7:04: ab:9d:d7:0a:fc:53:99:01:2b:4d:b9:11:5e:88:7c:05:1a:32: 82:44:16:11:eb:02:1d:80:7e:aa:1b:3b:16:f1:46:f8:fd:00: 32:71:cf:26:92:db:fa:21:02:18:38:e1:19:35:e7:6e:c9:0e: a3:e9:25:59:ed:f0:c2:4d:06:3f:e9:57:c2:ff:f6:33:15:31: ca:35:e2:fa:12:90:f2:7a:61:84:6a:88:c2:86:90:02:fc:8a: 61:77:0c:72:5b:cc:93:c1:bc:c5:8c:08:cf:06:1c:65:c5:59: 4b:72:fb:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSktg5YyVQH2WUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWQ2NjczYWYtZDEyZC00NmU1LWI3MTgtMTFhMzFkZTdjZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5SDI7OebilSejhs1YEGv+VLZyKhd7yTfHCO hP8sIp8nUcC20CiB0AN6DaLexcqPYmeoVxg4FJ/Ar/HaXYKem/vn3UjfGK4U+N7b YELdgcC2BqUS3Idhe2YduxZV3YwGgbQ5C9W4dW13v5Gf4ny9YW8+OgMtWwoaw7xI dEFuedKdhLVoOtu3BQHiW270mX9O/ZrfvKf0Yk38UpBITRClnStl7MHQjknIMflM BWXK261P7/XUxso5vxS+vIBs9+w1xKUbB3LBzVsX10Gebquqm74qZrqsaGME1BnK F5H3JCZ6epJEOBS4PDGJB2DJsZZaevxbTz3agEzm+mnP/bZPfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMhlMm1SBI0QeQbtQn9sW81EHKMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDM1MjFjNGMtOGI4Ni0z NzUzLThjOTYtYTI4OWZmYjRmMTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4ptMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDkxQA5VmyDFiXsDYqeeX8L+kkIg7mcesRJVz0SO0XPDrPWevxOgJxG cZKM/69m1cltY9Ks8dRqBKtu92nUS88oyZC4ZWyBWtXtkxRea+mCEMYHXiC8Hi5/ pP5UQiWmLUlOZCWsaVF2xXHKOIadJ+aRuFjfJp9I6mLbFHw/CcmOuJXS7VgsvnRm gNOsKxKnBKud1wr8U5kBK025EV6IfAUaMoJEFhHrAh2AfqobOxbxRvj9ADJxzyaS 2/ohAhg44Rk1527JDqPpJVnt8MJNBj/pV8L/9jMVMco14voSkPJ6YYRqiMKGkAL8 imF3DHJbzJPBvMWMCM8GHGXFWUty+1w= -----END CERTIFICATE-----Generated at Sat May 10 14:54:48 2025 by rpki-client