$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6388776-9f5b-34c2-a54e-b4fcf2e02bd1.roa File: e6388776-9f5b-34c2-a54e-b4fcf2e02bd1.roa (raw, json) Hash identifier: bnfUhNcxMQ5hs/SfWpuMuDCAHKPEeue++ztmdznQQ+k= Subject key identifier: 8B:07:66:8C:CB:18:A9:22:1D:A8:E8:66:76:24:83:A5:75:9C:B3:50 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A254CCE0A4CCBD70A48C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6388776-9f5b-34c2-a54e-b4fcf2e02bd1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 27338 IP address blocks: 209.192.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:25:4c:ce:0a:4c:cb:d7:0a:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=424a66fb-1db7-4b1d-bd03-168fb66a946e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2b:49:34:01:ac:b5:cc:8e:6b:41:42:5f:98: 96:f4:4c:8f:70:d3:2e:1c:de:37:38:14:50:0a:ab: 35:e1:62:ee:b1:fd:61:1d:0c:b8:95:4e:66:ba:58: 6e:b9:1e:de:2b:05:e4:e8:fe:ec:05:ff:8c:89:66: 1e:c4:46:a2:1e:9a:9c:59:e7:4d:53:44:06:9b:5e: c6:57:1f:f5:e0:13:db:9a:28:e5:a5:ef:80:38:9f: 87:6a:10:5a:7f:fe:a8:22:93:77:47:f7:f7:a2:fb: 2c:93:8f:44:b2:a8:88:91:97:a8:c0:98:ba:44:c1: 3b:31:f9:22:f2:46:0b:60:3d:9e:0e:1f:8e:76:c1: 92:b4:56:35:d1:40:1b:74:56:22:d5:f6:4b:bd:37: aa:74:47:25:84:a3:2f:55:f2:5c:06:40:fd:88:f9: e3:34:ca:98:d7:bf:bf:1e:c0:b5:c4:e1:e9:42:37: 16:20:ea:ad:4f:d9:1f:8b:ae:39:8f:4e:c2:8b:b4: a6:8b:91:5a:a5:88:2f:85:28:3d:8c:10:3e:94:1b: 4f:56:7c:5c:01:0c:01:22:5e:4c:f3:2b:18:d3:83: b0:3e:58:b9:92:ee:ab:69:98:fc:65:c6:c9:05:f9: 83:30:95:88:73:ec:3a:1b:8e:66:1b:0b:ae:ba:6b: 10:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:07:66:8C:CB:18:A9:22:1D:A8:E8:66:76:24:83:A5:75:9C:B3:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e6388776-9f5b-34c2-a54e-b4fcf2e02bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.192.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3a:21:7d:71:6d:6c:5d:53:2c:58:05:82:4a:b8:c1:8f:11: b3:97:b0:69:f5:9d:80:66:fe:5b:60:ab:b4:5c:2a:8f:72:97: 81:f4:4a:82:1b:77:4f:4a:c7:78:9a:fe:c0:89:1c:c4:63:79: a3:9f:10:44:70:0d:f2:9b:1b:53:ac:29:50:36:ee:2e:18:3a: 0e:79:4e:cf:b4:5f:f0:63:8e:9b:44:ab:7e:1d:0f:da:ef:80: 60:c9:77:b8:14:f5:75:22:39:6a:2a:c4:9f:6e:24:c8:f3:cb: 1e:81:33:42:f0:ac:f5:22:1d:c1:c0:71:0f:59:bc:7e:86:f5: d6:19:8d:b1:7b:68:c3:fe:9a:ad:b6:f7:60:ca:47:eb:e9:e3: 04:21:7e:b6:b2:44:92:d4:ed:c2:a2:a7:20:3a:01:6b:5e:36: e2:bd:23:42:49:d8:52:9f:99:e1:71:a8:ea:06:d5:14:03:bf: db:f8:c1:ee:59:f1:56:48:0d:51:70:0b:b5:86:79:dd:10:c6: 27:29:ad:47:8e:8a:bf:f7:27:cf:79:3b:8a:5b:e6:45:cd:01: 9f:ca:3c:d7:ff:33:45:dc:83:16:c7:5b:eb:4e:c1:3c:4f:65: 70:1f:5c:ad:c2:47:0e:43:5d:bc:90:e0:d5:0c:47:cd:d7:ff: a8:54:ad:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiVMzgpMy9cKSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDI0YTY2ZmItMWRiNy00YjFkLWJkMDMtMTY4ZmI2NmE5NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhitJNAGstcyOa0FCX5iW9EyPcNMuHN43OBRQ Cqs14WLusf1hHQy4lU5mulhuuR7eKwXk6P7sBf+MiWYexEaiHpqcWedNU0QGm17G Vx/14BPbmijlpe+AOJ+HahBaf/6oIpN3R/f3ovssk49EsqiIkZeowJi6RME7Mfki 8kYLYD2eDh+OdsGStFY10UAbdFYi1fZLvTeqdEclhKMvVfJcBkD9iPnjNMqY17+/ HsC1xOHpQjcWIOqtT9kfi645j07Ci7Smi5FapYgvhSg9jBA+lBtPVnxcAQwBIl5M 8ysY04OwPli5ku6raZj8ZcbJBfmDMJWIc+w6G45mGwuuumsQVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsHZozLGKkiHajoZnYkg6V1nLNQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTYzODg3NzYtOWY1Yi0z NGMyLWE1NGUtYjRmY2YyZTAyYmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0cBrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI6IX1xbWxdUyxYBYJKuMGPEbOXsGn1nYBm/ltgq7RcKo9yl4H0SoIb d09Kx3ia/sCJHMRjeaOfEERwDfKbG1OsKVA27i4YOg55Ts+0X/BjjptEq34dD9rv gGDJd7gU9XUiOWoqxJ9uJMjzyx6BM0LwrPUiHcHAcQ9ZvH6G9dYZjbF7aMP+mq22 92DKR+vp4wQhfrayRJLU7cKipyA6AWteNuK9I0JJ2FKfmeFxqOoG1RQDv9v4we5Z 8VZIDVFwC7WGed0QxicprUeOir/3J895O4pb5kXNAZ/KPNf/M0XcgxbHW+tOwTxP ZXAfXK3CRw5DXbyQ4NUMR83X/6hUrVU= -----END CERTIFICATE-----Generated at Sat May 10 13:06:08 2025 by rpki-client