$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d533e790-6948-34cf-9cce-12b34b7b96b9.roa File: d533e790-6948-34cf-9cce-12b34b7b96b9.roa (raw, json) Hash identifier: jPLg6x0CWJqqVxz+v869h3nOQTbizS7V7XdNthJ8HqI= Subject key identifier: 86:F9:78:F1:19:DA:9B:80:CF:9F:E9:9B:27:85:D8:52:D3:1A:40:54 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A17D48666EFFA70511B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d533e790-6948-34cf-9cce-12b34b7b96b9.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 205.184.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:d4:86:66:ef:fa:70:51:1b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=1bce003e-1d6a-46f7-acce-25982ec88a52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b4:c9:df:90:00:cc:c0:74:e7:e7:74:35:fc: 2b:08:0a:33:ab:6a:d3:ce:db:7d:34:49:2e:4c:46: c9:7c:8c:a0:98:43:4e:87:10:85:e3:f2:41:93:a6: 21:a8:dd:61:a1:89:8c:89:5a:cb:71:52:e7:94:ca: b6:b5:ce:9f:40:c5:f6:8f:ea:b2:b5:64:24:e4:0d: ed:e5:4b:a2:ea:b8:6d:13:e6:fe:9e:83:2b:dd:e8: 66:aa:68:0c:15:0a:55:b1:20:b6:87:a4:17:59:38: 75:e3:16:f5:34:57:66:26:3a:7b:f5:04:bd:55:2b: b1:20:42:0b:56:03:25:6f:ac:9d:d8:79:05:69:52: 31:39:0f:87:c9:8b:1e:36:c2:a6:b9:61:c7:f0:32: 38:e4:72:45:b6:cf:3e:d3:29:9c:7b:a8:05:2e:23: ee:fc:8f:54:14:e0:98:7c:56:ec:21:3a:a8:f5:9b: 3b:1d:95:83:a3:fd:a0:88:c2:8f:12:da:06:22:13: b6:22:37:16:e0:8a:b6:4d:7a:5c:02:bc:69:0d:08: df:ac:4f:93:9d:a1:c0:ff:3f:e7:96:cd:3c:5d:b8: 18:53:48:cc:ee:95:08:ac:8b:73:49:fc:ca:c2:dc: 58:de:a2:aa:a1:bf:20:86:7f:94:31:bb:d5:fd:df: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F9:78:F1:19:DA:9B:80:CF:9F:E9:9B:27:85:D8:52:D3:1A:40:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d533e790-6948-34cf-9cce-12b34b7b96b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.184.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:08:ea:a6:d6:cf:48:c9:eb:a3:7d:96:71:0c:ea:54:b2:90: f0:ec:b9:b0:47:1f:e1:b8:aa:f7:dd:d6:d4:66:b4:89:45:9d: 2a:ae:1c:ea:df:46:5b:4b:5c:f1:b8:8e:dd:8f:19:4c:a2:e8: 61:78:22:63:2f:b9:fb:74:e7:b9:13:ce:4e:59:98:f0:8e:4b: b8:75:ae:62:6a:07:e2:6f:34:b5:bc:b4:38:84:77:64:28:bd: dc:8a:71:38:53:45:b8:0c:43:72:0d:d0:99:62:84:05:02:4d: 1c:2e:11:55:ed:55:50:48:bc:0e:0d:68:a5:e3:b1:8d:36:43: 16:fc:6e:b7:9c:53:66:0c:bd:38:c6:d2:b4:e0:d2:59:c8:26: 1c:70:2d:bf:43:ee:6e:06:d0:b6:67:bd:75:0f:42:65:f1:16: b1:3b:e3:94:21:85:b0:3c:0a:ff:58:7c:f1:52:8a:f9:b0:71: 8c:a6:3d:59:f3:64:f5:63:da:e6:c6:a1:33:2b:6e:98:90:ed: 0a:a0:78:01:ab:a8:c5:34:e0:cc:43:dd:5c:53:5a:df:bd:a0: 20:b5:bd:69:25:95:76:7a:ba:20:b0:6c:0a:51:50:7b:f9:61: af:1b:f9:99:7c:11:69:b6:22:9e:ff:81:4e:d1:f7:0a:46:0d: 53:d9:43:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShfUhmbv+nBRG0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MWJjZTAwM2UtMWQ2YS00NmY3LWFjY2UtMjU5ODJlYzg4YTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLTJ35AAzMB05+d0NfwrCAozq2rTztt9NEku TEbJfIygmENOhxCF4/JBk6YhqN1hoYmMiVrLcVLnlMq2tc6fQMX2j+qytWQk5A3t 5Uui6rhtE+b+noMr3ehmqmgMFQpVsSC2h6QXWTh14xb1NFdmJjp79QS9VSuxIEIL VgMlb6yd2HkFaVIxOQ+HyYseNsKmuWHH8DI45HJFts8+0ymce6gFLiPu/I9UFOCY fFbsITqo9Zs7HZWDo/2giMKPEtoGIhO2IjcW4Iq2TXpcArxpDQjfrE+TnaHA/z/n ls08XbgYU0jM7pUIrItzSfzKwtxY3qKqob8ghn+UMbvV/d+DswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIb5ePEZ2puAz5/pmyeF2FLTGkBUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDUzM2U3OTAtNjk0OC0z NGNmLTljY2UtMTJiMzRiN2I5NmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzbhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgI6qbWz0jJ66N9lnEM6lSykPDsubBHH+G4qvfd1tRmtIlFnSquHOrf RltLXPG4jt2PGUyi6GF4ImMvuft057kTzk5ZmPCOS7h1rmJqB+JvNLW8tDiEd2Qo vdyKcThTRbgMQ3IN0JlihAUCTRwuEVXtVVBIvA4NaKXjsY02Qxb8brecU2YMvTjG 0rTg0lnIJhxwLb9D7m4G0LZnvXUPQmXxFrE745QhhbA8Cv9YfPFSivmwcYymPVnz ZPVj2ubGoTMrbpiQ7QqgeAGrqMU04MxD3VxTWt+9oCC1vWkllXZ6uiCwbApRUHv5 Ya8b+Zl8EWm2Ip7/gU7R9wpGDVPZQxw= -----END CERTIFICATE-----Generated at Thu May 8 12:40:14 2025 by rpki-client