$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e073be00-6658-3b31-82a8-3b5bd77886ac.roa File: e073be00-6658-3b31-82a8-3b5bd77886ac.roa (raw, json) Hash identifier: lKTNnAmuZa84EyrTJik+xdUNZYBvbpxPUUpJfvjvu8c= Subject key identifier: C9:93:DA:1A:DF:DE:79:2B:96:41:00:58:2E:77:48:FB:AB:82:93:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A17C669577D13E7EECC60 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e073be00-6658-3b31-82a8-3b5bd77886ac.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 205.147.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:17:c6:69:57:7d:13:e7:ee:cc:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=26564fc2-d24d-44a8-9cb7-7642e4fa53b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ef:50:89:4f:54:f1:57:38:04:84:0e:dd:01: 5c:0c:08:9c:cb:73:30:8e:46:e9:68:5f:f9:a8:cd: 6b:5c:64:f5:53:9a:b1:30:48:9a:89:5d:91:e5:62: 6c:dd:2f:bd:6f:be:9e:2b:fe:1b:0a:f5:45:e6:17: 2c:36:0d:5c:4e:95:46:2f:6c:66:ba:f4:75:da:fa: 6c:38:90:4a:f8:9c:c2:5a:e7:c4:b3:d0:66:83:a0: 98:de:65:ba:58:cd:51:c8:31:c5:b9:5d:eb:df:16: 7c:d4:93:48:c3:5e:13:ac:e2:ee:2d:c9:d4:6a:0e: 6d:20:d0:4c:22:8f:aa:a1:21:dd:68:a6:fc:02:d7: 82:71:11:79:a5:05:6d:92:69:51:e1:87:da:af:88: 3e:07:15:d5:a1:04:0f:b8:5d:32:01:62:eb:7d:d8: ca:96:e1:41:6e:db:4b:ec:70:f9:24:7b:93:c2:e2: 33:2a:c8:b3:70:f9:76:08:c1:20:29:fe:3d:62:b1: 79:b1:b1:c6:df:74:41:b5:2a:36:af:43:33:57:66: cb:f4:df:bf:87:99:82:ec:cd:d2:84:94:6e:ba:e1: 29:75:12:55:dd:ca:c2:38:f0:20:05:9d:8e:98:49: 1f:59:9d:6f:bb:81:74:df:90:a5:a4:5a:60:56:ee: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:DA:1A:DF:DE:79:2B:96:41:00:58:2E:77:48:FB:AB:82:93:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e073be00-6658-3b31-82a8-3b5bd77886ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 205.147.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:74:e3:0c:22:fd:04:f1:ec:03:d6:5b:bc:cc:90:7c:8b:6e: ba:db:2f:17:1e:d1:84:79:11:7f:1a:3e:9e:af:02:d8:13:44: 03:00:95:08:8f:d5:e1:b8:ad:07:76:d3:49:b7:95:13:fe:5c: b6:0f:3f:bd:e7:15:50:56:85:1a:dd:a7:71:7f:62:32:39:13: d5:06:2a:7f:0e:d1:57:b2:37:ba:2c:00:5e:20:af:cb:20:31: a4:a9:07:ad:4d:16:7c:b8:57:6c:c2:19:ad:75:95:c9:cf:56: 25:4d:c6:be:d7:0e:2f:1e:3b:48:9a:03:eb:e4:47:02:cb:f9: 74:6e:7c:46:44:61:e1:a9:bb:2f:e9:cc:c1:7e:bd:fc:0c:00: e1:23:0e:67:e3:a4:ea:5b:39:e8:b0:c5:71:41:30:de:b6:78: 40:31:6a:64:2a:b2:3a:27:32:44:3d:c0:b6:dd:a8:56:e8:60: 08:68:6e:28:59:20:b9:04:26:00:37:35:3e:9b:9b:e4:d2:f6: ad:65:ce:45:4f:07:54:73:1b:bb:ef:61:d6:61:fb:3d:f7:8c: f3:d2:52:cd:21:02:c7:3b:97:e5:af:c2:9b:dd:ef:63:4b:e1: 67:50:84:cf:85:4d:ad:de:dd:48:43:6f:70:7d:29:17:e0:90: 3b:51:3d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShfGaVd9E+fuzGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MjY1NjRmYzItZDI0ZC00NGE4LTljYjctNzY0MmU0ZmE1M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxO9QiU9U8Vc4BIQO3QFcDAicy3MwjkbpaF/5 qM1rXGT1U5qxMEiaiV2R5WJs3S+9b76eK/4bCvVF5hcsNg1cTpVGL2xmuvR12vps OJBK+JzCWufEs9Bmg6CY3mW6WM1RyDHFuV3r3xZ81JNIw14TrOLuLcnUag5tINBM Io+qoSHdaKb8AteCcRF5pQVtkmlR4Yfar4g+BxXVoQQPuF0yAWLrfdjKluFBbttL 7HD5JHuTwuIzKsizcPl2CMEgKf49YrF5sbHG33RBtSo2r0MzV2bL9N+/h5mC7M3S hJRuuuEpdRJV3crCOPAgBZ2OmEkfWZ1vu4F035ClpFpgVu42mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmT2hrf3nkrlkEAWC53SPurgpN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTA3M2JlMDAtNjY1OC0z YjMxLTgyYTgtM2I1YmQ3Nzg4NmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzZPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAp04wwi/QTx7APWW7zMkHyLbrrbLxce0YR5EX8aPp6vAtgTRAMAlQiP 1eG4rQd200m3lRP+XLYPP73nFVBWhRrdp3F/YjI5E9UGKn8O0VeyN7osAF4gr8sg MaSpB61NFny4V2zCGa11lcnPViVNxr7XDi8eO0iaA+vkRwLL+XRufEZEYeGpuy/p zMF+vfwMAOEjDmfjpOpbOeiwxXFBMN62eEAxamQqsjonMkQ9wLbdqFboYAhobihZ ILkEJgA3NT6bm+TS9q1lzkVPB1RzG7vvYdZh+z33jPPSUs0hAsc7l+Wvwpvd72NL 4WdQhM+FTa3e3UhDb3B9KRfgkDtRPck= -----END CERTIFICATE-----Generated at Sun May 11 15:08:42 2025 by rpki-client