$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa File: e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa (raw, json) Hash identifier: qH4IhNrQbEHQrAZ/En0dK5e+B6H0wmZn3npO7GnXzRY= Subject key identifier: 0E:7B:4A:77:2D:1B:03:42:75:88:42:84:B0:88:FD:C5:8A:0B:56:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3A512F9C72A194510A00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 64.90.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3a:51:2f:9c:72:a1:94:51:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a93499ce-202c-41b2-825e-5732ee9e526f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:be:a8:cb:d1:e2:ca:e5:8f:3e:fc:c4:08:d7: 5f:48:54:c3:ab:d9:f6:7e:03:81:e7:0b:d6:b4:a8: 0c:89:07:2b:69:9a:90:4b:43:00:38:da:63:7d:35: 46:9a:f5:57:a6:9d:fe:ef:80:7f:55:4c:9e:b9:fb: 72:48:18:d7:ad:16:4a:d7:89:17:f0:14:5b:84:6a: 4c:9b:0a:3a:3b:37:b3:c5:d3:00:65:21:3c:64:16: de:be:cb:86:c8:9a:0a:8e:cf:d1:58:30:af:1a:5f: c9:79:3b:be:2b:96:f9:27:c2:d9:aa:3c:34:95:2f: ed:12:9a:21:0e:0d:f9:dd:0b:4d:4a:48:d5:6b:ac: be:c0:40:2c:ae:7b:7e:eb:19:60:08:7e:25:b0:74: a9:93:51:d2:f4:98:7e:3e:a8:a3:7a:ef:8d:45:67: a1:a6:45:d0:2e:47:15:bf:88:e0:31:ad:9a:0e:c1: 6b:bb:4e:c6:6c:6a:24:b7:74:53:da:7a:82:db:30: f4:6d:df:d3:23:fd:74:23:48:d5:02:41:12:b5:a0: ae:97:7f:03:40:96:c9:92:94:c0:3f:7b:98:e7:8b: cc:c7:98:14:77:8e:65:cc:03:1f:24:05:32:cb:de: ae:db:0c:db:e7:fe:88:f9:52:33:58:19:5c:d3:e3: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7B:4A:77:2D:1B:03:42:75:88:42:84:B0:88:FD:C5:8A:0B:56:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e3ffde9c-4570-3ebe-add8-18dc54f63ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 64.90.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:92:0b:6d:8b:ba:14:98:98:c5:ed:db:a1:a2:3c:0f:61:86: 63:6b:14:3e:58:42:92:65:4c:b2:8c:94:e3:27:a4:c1:3d:3c: 52:ef:63:8e:c1:5f:29:c2:e2:80:b6:a6:6f:59:ea:93:32:a6: 1c:15:9c:bb:c1:a1:86:45:55:ec:19:78:ad:3a:1d:e2:a4:d0: 4e:ae:36:8a:c8:40:76:e6:a6:69:c7:da:36:af:b6:32:09:16: 27:6e:7b:25:67:4e:72:f8:7c:73:25:5d:52:2a:a4:09:f1:be: 9b:fc:74:ca:3a:ac:0d:75:df:cd:6d:6d:c7:5e:a4:48:07:fe: d0:28:b6:92:ea:97:3c:af:2c:9e:71:e7:6d:20:23:b2:6b:e4: 3f:ae:7c:82:74:43:0a:0f:3d:0d:9a:db:99:15:e0:9b:75:e1: 56:0a:f5:ee:38:5b:b3:45:f1:c4:e3:28:6c:6c:a5:46:24:e2: ff:ca:f7:9a:ff:ba:de:d7:ab:a7:47:ab:c7:67:7a:d5:04:cb: 46:68:84:ae:71:4b:a4:89:d9:e8:39:d8:1b:ad:41:45:54:57: bb:2f:62:4d:98:7f:2d:c9:17:89:a4:f1:b5:b9:db:b4:01:30: 18:0f:e2:02:28:4b:98:d2:35:e7:cc:c8:94:4c:7e:8c:b3:cc: a1:92:0a:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjpRL5xyoZRRCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTkzNDk5Y2UtMjAyYy00MWIyLTgyNWUtNTczMmVlOWU1MjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL6oy9HiyuWPPvzECNdfSFTDq9n2fgOB5wvW tKgMiQcraZqQS0MAONpjfTVGmvVXpp3+74B/VUyeuftySBjXrRZK14kX8BRbhGpM mwo6OzezxdMAZSE8ZBbevsuGyJoKjs/RWDCvGl/JeTu+K5b5J8LZqjw0lS/tEpoh Dg353QtNSkjVa6y+wEAsrnt+6xlgCH4lsHSpk1HS9Jh+Pqijeu+NRWehpkXQLkcV v4jgMa2aDsFru07GbGokt3RT2nqC2zD0bd/TI/10I0jVAkEStaCul38DQJbJkpTA P3uY54vMx5gUd45lzAMfJAUyy96u2wzb5/6I+VIzWBlc0+P67wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA57SnctGwNCdYhChLCI/cWKC1YjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTNmZmRlOWMtNDU3MC0z ZWJlLWFkZDgtMThkYzU0ZjYzZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQFoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGSC22LuhSYmMXt26GiPA9hhmNrFD5YQpJlTLKMlOMnpME9PFLvY47B XynC4oC2pm9Z6pMyphwVnLvBoYZFVewZeK06HeKk0E6uNorIQHbmpmnH2javtjIJ FidueyVnTnL4fHMlXVIqpAnxvpv8dMo6rA11381tbcdepEgH/tAotpLqlzyvLJ5x 520gI7Jr5D+ufIJ0QwoPPQ2a25kV4Jt14VYK9e44W7NF8cTjKGxspUYk4v/K95r/ ut7Xq6dHq8dnetUEy0ZohK5xS6SJ2eg52ButQUVUV7svYk2Yfy3JF4mk8bW527QB MBgP4gIoS5jSNefMyJRMfoyzzKGSCto= -----END CERTIFICATE-----Generated at Wed May 7 03:57:17 2025 by rpki-client