$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa File: e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa (raw, json) Hash identifier: WhsWJqAEKohwHvsOzOCWD3vruxTL8e7jpljPRyvPOGU= Subject key identifier: 6A:FA:12:43:AD:36:4B:04:0B:58:F5:4B:4C:84:BC:BA:B9:70:32:56 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A488ED02BE0319F08BC80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 12263 IP address blocks: 216.172.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:8e:d0:2b:e0:31:9f:08:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=aa8fc42b-a4eb-4421-939d-6be540e8baaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:f8:ea:92:a3:5d:ae:45:d3:e0:d6:c7:91: bc:62:49:47:43:54:b8:b2:2c:ca:29:45:6f:19:db: 8b:49:b8:c0:00:2f:1e:43:ba:32:da:9b:57:c8:a8: c8:19:02:13:3b:e6:a2:db:8c:87:6d:d7:9a:aa:15: 31:a6:a1:d1:8c:10:13:5a:d3:58:2c:96:74:30:55: 69:62:eb:4f:50:af:11:61:2b:7e:4f:a1:11:de:b5: 9e:e1:54:fe:f7:37:16:ca:20:60:65:4e:5d:76:8a: 9a:78:ef:30:73:77:87:b0:8a:41:49:aa:08:09:25: eb:e8:f8:20:fc:0c:00:a1:aa:b3:c5:82:fc:f2:00: ec:bd:be:33:b5:8d:29:b2:6c:4b:93:d6:6c:8a:b1: 91:53:26:6a:8b:1e:6d:cc:99:36:f6:cf:c6:36:9d: 60:ea:ed:e8:6a:14:92:0c:14:5a:a9:89:84:61:aa: 93:21:ab:e6:22:87:fa:10:2d:9e:51:00:3a:27:23: 85:79:d7:1f:f0:55:dc:41:c7:7d:63:79:64:3c:57: 6d:d0:9d:99:5d:5a:8b:eb:1f:22:1a:37:34:d0:b5: e4:3c:9e:04:9f:d5:85:e9:e1:79:c7:16:16:80:c7: 8b:d3:c8:d5:be:8e:af:1a:1c:8f:24:40:24:90:22: a2:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FA:12:43:AD:36:4B:04:0B:58:F5:4B:4C:84:BC:BA:B9:70:32:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e8ba02ce-03ec-3bcb-ad68-1d27bcb3bb98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.172.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:a6:f1:a7:f5:b1:84:ea:12:38:c7:b5:74:dc:3a:4d:27:7a: 39:68:0e:da:92:77:02:ea:b6:58:8c:2a:c0:97:63:9b:cc:45: b8:db:cf:9b:cf:5b:0d:62:ca:03:94:b3:bc:e9:85:d3:68:14: 7d:4a:96:43:9d:c9:0f:ff:0c:7a:a3:8d:41:12:ce:82:99:39: 4b:b3:0b:d5:35:73:61:32:66:83:a8:27:98:60:ee:c1:79:ac: 5d:78:8f:a2:c1:49:3e:7f:90:11:e6:8f:e3:af:c7:11:31:e5: 02:65:b7:7d:32:09:b5:02:77:b5:a7:94:a4:e9:8d:6e:c9:31: bb:06:f0:1b:52:ec:27:0f:89:dd:2d:e0:a2:b7:74:8e:6a:42: ec:76:55:16:8a:0f:17:70:3e:81:61:81:93:e7:76:42:ed:0f: 4d:4f:19:e1:f7:70:6e:49:84:23:34:38:83:17:36:c5:83:bd: 5f:f2:cb:1f:0f:60:cb:20:9f:d9:09:e1:97:82:5b:0f:37:31: 83:a8:f4:77:41:1a:a9:24:2d:d8:d8:5a:0f:57:d6:bf:53:84: f7:b2:be:83:25:f7:da:4d:12:7b:8d:92:bf:9c:5d:a7:a5:f3: 93:51:4a:ef:61:09:43:9e:8f:1f:3e:77:cb:ad:7f:bd:9f:f1: fe:bd:45:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkiO0CvgMZ8IvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YWE4ZmM0MmItYTRlYi00NDIxLTkzOWQtNmJlNTQwZThiYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIf46pKjXa5F0+DWx5G8YklHQ1S4sizKKUVv GduLSbjAAC8eQ7oy2ptXyKjIGQITO+ai24yHbdeaqhUxpqHRjBATWtNYLJZ0MFVp YutPUK8RYSt+T6ER3rWe4VT+9zcWyiBgZU5ddoqaeO8wc3eHsIpBSaoICSXr6Pgg /AwAoaqzxYL88gDsvb4ztY0psmxLk9ZsirGRUyZqix5tzJk29s/GNp1g6u3oahSS DBRaqYmEYaqTIavmIof6EC2eUQA6JyOFedcf8FXcQcd9Y3lkPFdt0J2ZXVqL6x8i Gjc00LXkPJ4En9WF6eF5xxYWgMeL08jVvo6vGhyPJEAkkCKi3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr6EkOtNksEC1j1S0yEvLq5cDJWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZThiYTAyY2UtMDNlYy0z YmNiLWFkNjgtMWQyN2JjYjNiYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCm8af1sYTqEjjHtXTcOk0nejloDtqSdwLqtliMKsCXY5vMRbjbz5vP Ww1iygOUs7zphdNoFH1KlkOdyQ//DHqjjUESzoKZOUuzC9U1c2EyZoOoJ5hg7sF5 rF14j6LBST5/kBHmj+OvxxEx5QJlt30yCbUCd7WnlKTpjW7JMbsG8BtS7CcPid0t 4KK3dI5qQux2VRaKDxdwPoFhgZPndkLtD01PGeH3cG5JhCM0OIMXNsWDvV/yyx8P YMsgn9kJ4ZeCWw83MYOo9HdBGqkkLdjYWg9X1r9ThPeyvoMl99pNEnuNkr+cXael 85NRSu9hCUOejx8+d8utf72f8f69RTw= -----END CERTIFICATE-----Generated at Sat May 10 13:35:39 2025 by rpki-client