$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa File: f214b74c-400e-3cf1-b976-685a01ebde20.roa (raw, json) Hash identifier: dpM5Vit7MdMMZkB5ldPbixvZupHxji23+2+1uPLQDCw= Subject key identifier: F9:C3:9D:E2:E9:6A:D1:6F:D2:34:CE:8E:C3:10:CE:CB:84:33:A5:82 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4BD68D6C78841EBEB300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 53610 IP address blocks: 63.252.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4b:d6:8d:6c:78:84:1e:be:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=bec99538-6ffc-4169-af6c-76c7ef805937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:8a:59:81:ac:c3:e8:c7:f4:3b:3e:31:ce: fd:20:72:70:24:45:83:62:05:57:71:bf:71:ca:e2: b0:bb:35:cf:5f:3e:d8:fc:49:03:a7:be:20:38:56: ca:e1:d5:3a:2d:72:e1:e6:c9:9f:9f:8b:f2:be:f0: 62:e8:ee:03:ec:c0:df:70:db:2d:06:5b:76:65:fc: f5:13:3e:93:30:54:b5:1c:81:9e:09:1b:32:25:94: ae:fd:a3:ca:b8:6f:c3:51:41:7b:b6:70:47:49:95: ba:67:01:46:53:03:a2:71:87:24:89:e6:c9:09:89: 87:f2:0d:e1:74:66:67:6a:8e:7f:94:d8:fd:a7:e1: f6:6e:85:87:94:b7:e4:88:a6:06:7d:47:d0:b5:d8: 64:8d:79:86:dc:3f:e7:55:4d:73:5e:0c:7a:75:67: c2:e3:25:97:f3:26:18:98:48:63:6b:48:72:fb:53: d5:11:07:b8:84:8e:d6:99:ef:dc:bf:57:d4:30:02: 2a:02:ec:d0:7e:35:f8:e3:81:24:6d:15:12:9f:f8: b3:0e:8c:d3:06:bd:0b:cd:c9:cb:cf:15:64:33:0e: b9:b9:59:53:7b:ea:a8:02:c6:5f:0f:a2:41:9d:2e: 52:f9:fc:60:0b:2e:93:bf:ea:22:41:a6:2f:48:34: 07:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C3:9D:E2:E9:6A:D1:6F:D2:34:CE:8E:C3:10:CE:CB:84:33:A5:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f214b74c-400e-3cf1-b976-685a01ebde20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.252.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:15:4c:e6:f4:b8:5c:9d:06:f7:b1:2c:45:b0:1a:19:7f:4f: e4:94:cd:cf:3d:7d:8a:42:d9:d5:94:b1:1f:77:a1:d7:01:e7: 0f:03:24:0d:b2:27:2e:ad:e4:33:fc:15:06:3c:91:73:cb:a9: 26:59:8c:38:6f:52:ed:31:ee:d2:b4:7e:cb:70:8b:49:c3:78: 1e:a9:13:2a:57:0d:7e:57:06:69:2c:38:8d:2b:72:6f:ae:f1: 4f:8c:c4:a9:e4:09:74:ff:dc:95:f5:6f:b7:c1:ac:93:7a:6f: 55:b3:c4:85:d4:56:f7:4a:e4:ea:a4:59:ba:2b:df:9b:da:3b: a3:98:3b:b7:fd:56:23:2d:4e:90:70:cd:ff:a1:a6:db:06:94: 1e:64:c7:b0:f2:bf:b6:42:33:a8:79:39:ae:5c:95:29:72:01: 6c:bf:33:54:9f:7b:d5:94:42:cb:3e:2c:f4:e5:7f:77:0f:40: f8:7e:56:a8:0a:13:2b:78:5a:20:7a:fd:87:b9:97:8c:cc:83: 29:b6:c4:8a:cd:c9:16:74:30:23:83:25:ce:65:26:f5:61:b7: 1b:a6:75:07:48:e2:45:30:40:74:e1:38:51:f3:4a:8d:fb:43: 92:ec:4a:6c:fe:67:27:f5:e8:b1:c1:5d:9f:7e:20:68:c9:8e: fa:b8:09:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkvWjWx4hB6+swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YmVjOTk1MzgtNmZmYy00MTY5LWFmNmMtNzZjN2VmODA1OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DyKWYGsw+jH9Ds+Mc79IHJwJEWDYgVXcb9x yuKwuzXPXz7Y/EkDp74gOFbK4dU6LXLh5smfn4vyvvBi6O4D7MDfcNstBlt2Zfz1 Ez6TMFS1HIGeCRsyJZSu/aPKuG/DUUF7tnBHSZW6ZwFGUwOicYckiebJCYmH8g3h dGZnao5/lNj9p+H2boWHlLfkiKYGfUfQtdhkjXmG3D/nVU1zXgx6dWfC4yWX8yYY mEhja0hy+1PVEQe4hI7Wme/cv1fUMAIqAuzQfjX444EkbRUSn/izDozTBr0LzcnL zxVkMw65uVlTe+qoAsZfD6JBnS5S+fxgCy6Tv+oiQaYvSDQHWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnDneLpatFv0jTOjsMQzsuEM6WCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIxNGI3NGMtNDAwZS0z Y2YxLWI5NzYtNjg1YTAxZWJkZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCP/zkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgVTOb0uFydBvexLEWwGhl/T+SUzc89fYpC2dWUsR93odcB5w8DJA2y Jy6t5DP8FQY8kXPLqSZZjDhvUu0x7tK0fstwi0nDeB6pEypXDX5XBmksOI0rcm+u 8U+MxKnkCXT/3JX1b7fBrJN6b1WzxIXUVvdK5OqkWbor35vaO6OYO7f9ViMtTpBw zf+hptsGlB5kx7Dyv7ZCM6h5Oa5clSlyAWy/M1Sfe9WUQss+LPTlf3cPQPh+VqgK Eyt4WiB6/Ye5l4zMgym2xIrNyRZ0MCODJc5lJvVhtxumdQdI4kUwQHThOFHzSo37 Q5LsSmz+Zyf16LHBXZ9+IGjJjvq4Ccs= -----END CERTIFICATE-----Generated at Sat May 10 12:05:08 2025 by rpki-client