$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa File: dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa (raw, json) Hash identifier: xHcoSJUp+dsbt0/Ni6/9pSBWOcRftgYtF/9o2DmU0nA= Subject key identifier: 90:7B:6A:9C:CE:6F:5F:2B:BA:13:9F:86:9F:45:1D:B4:25:A3:9C:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A489A352F50A473D0C680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14125 IP address blocks: 63.254.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:9a:35:2f:50:a4:73:d0:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c0cd08fb-2fee-45ba-8d45-601bc92f437f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:f3:da:e7:cd:40:12:50:3d:9a:45:db:f9: 71:95:74:4d:c4:f2:09:15:0c:82:d7:97:55:b8:ac: 0c:52:3d:de:83:79:76:6e:d1:cd:5d:eb:89:2b:40: 3b:45:c6:fb:60:09:a3:e3:ed:70:8a:c4:3a:94:d3: e2:5d:3f:cb:1e:86:6b:31:6a:c0:55:2b:58:42:37: b9:52:fc:f0:26:f1:ab:95:00:f8:a4:55:5e:87:a5: f5:c0:9c:79:cf:b0:a7:4a:f1:5c:2c:85:28:79:f4: 22:e2:8e:65:7f:7e:ee:8f:6e:78:d5:3a:64:1f:03: 97:94:d2:db:15:e4:f1:ca:8d:09:d9:6a:c5:fb:10: 51:bd:92:ed:f8:e8:14:a9:7a:58:c7:c1:25:9b:b6: 4c:cb:a4:1f:61:8b:a9:e9:e2:07:1b:f9:66:0a:a2: 24:77:67:6a:fe:e2:b2:39:b3:b4:b3:f8:e5:f0:28: b1:de:76:81:52:33:36:9d:17:a6:b8:4f:b3:06:d4: e6:73:d3:e1:0d:bd:6b:07:aa:bb:b4:8e:66:87:04: 87:ab:f9:ca:38:6b:f5:5d:de:6c:7e:2f:6e:7e:aa: 9e:42:f3:23:01:c6:ed:4a:c5:74:19:5b:42:85:9b: b5:af:c7:de:00:32:b9:ba:5a:54:9a:15:37:78:8c: 12:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:7B:6A:9C:CE:6F:5F:2B:BA:13:9F:86:9F:45:1D:B4:25:A3:9C:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dcb90c79-5ca5-3cc4-a7d5-f785d0b3cd37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.254.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d8:c3:76:38:62:9b:f8:7a:8d:73:56:b5:2c:bf:ab:d8:67: 8f:d0:2c:63:14:4e:cc:81:98:47:ff:9b:29:67:25:73:96:82: 98:ca:5b:17:00:e4:cd:c1:72:75:f0:fa:82:93:2f:61:60:95: ae:8d:15:8d:bf:c9:fb:4b:1c:44:b1:c0:9f:48:ad:18:2f:13: a0:df:ca:74:44:4e:a1:42:1f:b7:bd:03:31:86:f4:64:42:41: 9e:34:bc:bb:8d:04:1c:97:73:d4:67:cc:e7:70:70:b9:2e:f8: 31:e8:6f:fc:c6:1f:69:78:4a:2c:f9:e5:e6:eb:df:31:f8:12: a6:de:fa:c1:0c:88:9f:82:5e:a6:ba:20:6c:69:ca:49:34:ef: 97:ce:42:80:f6:58:fd:38:e1:16:f8:ea:9c:bf:02:0b:ae:e5: dc:a8:26:28:f4:86:6d:e7:35:55:b7:39:28:42:23:68:10:93: fa:97:72:59:da:c1:62:4c:60:7a:82:54:3a:40:7e:4c:cd:c5: 99:c1:d1:ad:b0:ff:31:27:47:57:47:a0:e2:28:3b:57:21:46: 15:ae:d2:73:fc:11:e4:1e:87:36:76:e9:23:25:ca:75:cb:6a: 9b:bb:f8:fe:f0:96:42:a0:ea:37:79:c0:e3:1e:b3:db:ee:3f: 46:be:fe:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkiaNS9QpHPQxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzBjZDA4ZmItMmZlZS00NWJhLThkNDUtNjAxYmM5MmY0MzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7Xz2ufNQBJQPZpF2/lxlXRNxPIJFQyC15dV uKwMUj3eg3l2btHNXeuJK0A7Rcb7YAmj4+1wisQ6lNPiXT/LHoZrMWrAVStYQje5 UvzwJvGrlQD4pFVeh6X1wJx5z7CnSvFcLIUoefQi4o5lf37uj2541TpkHwOXlNLb FeTxyo0J2WrF+xBRvZLt+OgUqXpYx8Elm7ZMy6QfYYup6eIHG/lmCqIkd2dq/uKy ObO0s/jl8Cix3naBUjM2nRemuE+zBtTmc9PhDb1rB6q7tI5mhwSHq/nKOGv1Xd5s fi9ufqqeQvMjAcbtSsV0GVtChZu1r8feADK5ulpUmhU3eIwSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJB7apzOb18ruhOfhp9FHbQlo5zMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGNiOTBjNzktNWNhNS0z Y2M0LWE3ZDUtZjc4NWQwYjNjZDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/4aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/Yw3Y4Ypv4eo1zVrUsv6vYZ4/QLGMUTsyBmEf/mylnJXOWgpjKWxcA 5M3BcnXw+oKTL2Fgla6NFY2/yftLHESxwJ9IrRgvE6DfynRETqFCH7e9AzGG9GRC QZ40vLuNBByXc9RnzOdwcLku+DHob/zGH2l4Siz55ebr3zH4Eqbe+sEMiJ+CXqa6 IGxpykk075fOQoD2WP044Rb46py/Aguu5dyoJij0hm3nNVW3OShCI2gQk/qXclna wWJMYHqCVDpAfkzNxZnB0a2w/zEnR1dHoOIoO1chRhWu0nP8EeQehzZ26SMlynXL apu7+P7wlkKg6jd5wOMes9vuP0a+/go= -----END CERTIFICATE-----Generated at Sat May 10 11:31:47 2025 by rpki-client