$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa File: dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa (raw, json) Hash identifier: pDoI4BW1B/iyK87zkD5b75h86QiqlvRVGTm3b4NedFA= Subject key identifier: F7:E1:B8:17:88:5F:D4:B7:F5:DA:45:4C:E2:5E:FE:CC:C0:01:A8:7A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A44F76C3212CC621E0680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.219.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:44:f7:6c:32:12:cc:62:1e:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b631a8bc-c482-47ac-894f-f14197c12abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c4:50:e9:5f:e0:06:94:74:6e:e6:b9:a9:4f: a2:fc:0b:a0:5c:72:8a:4c:77:54:14:da:c3:fa:d0: f3:97:d7:e0:e9:6e:6f:4b:1e:c4:58:65:2d:0c:c4: b8:a8:1f:23:b4:31:51:b7:88:45:1e:79:cb:8f:ab: 78:df:ba:81:4a:c3:e0:38:b7:ec:5f:bf:5e:c2:bf: 35:a6:6e:44:df:35:dd:e0:6f:87:26:b5:0d:cb:9e: aa:9e:ed:cb:98:11:0d:52:9b:13:45:e6:61:26:83: 86:c6:20:67:79:b7:9b:5b:f4:6d:77:e5:82:21:7f: 6a:9f:46:24:1b:f4:8a:90:9d:78:6f:f5:66:bf:1d: 62:82:bc:73:00:90:61:0e:81:92:46:56:64:bc:52: 7a:c9:09:ef:3b:c0:4e:52:49:64:03:0c:db:12:a0: c8:f0:0a:ba:4e:aa:b5:2d:c9:4a:07:37:7e:75:c1: cd:80:f4:12:13:ca:35:aa:e5:53:a8:2f:a8:ea:44: 1b:f0:f0:00:98:bc:7d:a1:ce:c6:b2:3e:0b:0d:9a: e1:19:2c:d1:ff:05:d6:54:d4:0f:c4:65:6f:d7:33: ff:87:da:2a:02:5d:13:04:2d:8b:2a:33:e4:b9:02: f6:59:82:eb:d6:6c:4b:50:42:8b:23:49:0f:7d:c2: 69:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:B8:17:88:5F:D4:B7:F5:DA:45:4C:E2:5E:FE:CC:C0:01:A8:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dc1dbcd9-1050-39bf-afaa-723193d52e1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.219.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f4:bb:1e:8e:40:1d:6c:b7:99:0d:34:90:2e:32:df:7e:e6: 58:3e:00:da:0f:ad:4b:35:d5:64:89:9c:2d:e2:aa:09:74:54: 8d:30:7a:7c:2e:94:34:c6:00:22:76:95:03:97:b6:a7:2b:d8: 1a:f1:09:09:da:6a:37:9c:4c:95:e2:9a:f7:9c:16:0f:95:5d: 2b:98:17:ff:a8:ce:59:4d:77:95:89:c4:24:40:fa:70:c3:27: 39:52:e9:af:e7:7e:c3:7c:ac:2f:7c:8b:36:f8:df:f2:47:6f: 3d:f3:86:a3:4b:54:4a:08:b6:03:b7:fe:55:53:19:44:7d:60: 1d:e2:4a:0e:67:b8:83:55:b0:fd:9e:2d:6d:f0:24:11:c2:2a: 89:6d:a8:b5:c1:45:f9:16:ea:2f:64:ca:66:f0:63:00:f8:1f: a7:68:f4:be:27:c6:cd:0b:1b:4c:d4:44:6e:86:f7:c2:2e:ad: 51:e9:35:da:bc:59:c3:6d:01:8e:70:d1:94:5e:6b:43:e4:55: 61:e2:d4:1b:6d:4c:4a:71:68:99:df:0b:58:31:80:46:ae:2b: 3a:6c:4b:ef:50:7e:fb:9a:f7:bc:de:66:1b:82:d4:f5:d6:e0: 73:9c:da:6c:04:6d:5c:52:bc:9a:f7:3b:8b:85:28:96:3e:a0: 8d:31:c2:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkT3bDISzGIeBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjYzMWE4YmMtYzQ4Mi00N2FjLTg5NGYtZjE0MTk3YzEyYWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcRQ6V/gBpR0bua5qU+i/AugXHKKTHdUFNrD +tDzl9fg6W5vSx7EWGUtDMS4qB8jtDFRt4hFHnnLj6t437qBSsPgOLfsX79ewr81 pm5E3zXd4G+HJrUNy56qnu3LmBENUpsTReZhJoOGxiBnebebW/Rtd+WCIX9qn0Yk G/SKkJ14b/Vmvx1igrxzAJBhDoGSRlZkvFJ6yQnvO8BOUklkAwzbEqDI8Aq6Tqq1 LclKBzd+dcHNgPQSE8o1quVTqC+o6kQb8PAAmLx9oc7Gsj4LDZrhGSzR/wXWVNQP xGVv1zP/h9oqAl0TBC2LKjPkuQL2WYLr1mxLUEKLI0kPfcJpMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfhuBeIX9S39dpFTOJe/szAAah6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGMxZGJjZDktMTA1MC0z OWJmLWFmYWEtNzIzMTkzZDUyZTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2NsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/0ux6OQB1st5kNNJAuMt9+5lg+ANoPrUs11WSJnC3iqgl0VI0wenwu lDTGACJ2lQOXtqcr2BrxCQnaajecTJXimvecFg+VXSuYF/+ozllNd5WJxCRA+nDD JzlS6a/nfsN8rC98izb43/JHbz3zhqNLVEoItgO3/lVTGUR9YB3iSg5nuINVsP2e LW3wJBHCKoltqLXBRfkW6i9kymbwYwD4H6do9L4nxs0LG0zURG6G98IurVHpNdq8 WcNtAY5w0ZRea0PkVWHi1BttTEpxaJnfC1gxgEauKzpsS+9Qfvua97zeZhuC1PXW 4HOc2mwEbVxSvJr3O4uFKJY+oI0xwt8= -----END CERTIFICATE-----Generated at Sun May 11 01:30:29 2025 by rpki-client