$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa File: fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa (raw, json) Hash identifier: 2dR7KGjbCWn8HTEeJWKduTzY2ENor1PYKxCntVXdUkU= Subject key identifier: CF:8E:C1:60:53:09:5E:7C:96:A5:63:06:9B:3F:F2:A6:C8:66:5C:02 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9C94956FC3BB0DB0482DA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa Signing time: Sat 03 May 2025 02:03:56 +0000 ROA not before: Sat 03 May 2025 02:03:56 +0000 ROA not after: Fri 01 Aug 2025 02:03:56 +0000 asID: 7029 IP address blocks: 151.213.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:c9:49:56:fc:3b:b0:db:04:82:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 02:03:56 2025 GMT Not After : Aug 1 02:03:56 2025 GMT Subject: CN=e0c9a4c2-eb16-4f3d-a0bd-f41c549d84a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:84:f2:e6:8d:06:6e:d6:47:e0:5f:ac:e2:4f: 8c:d8:15:e6:df:09:36:63:b9:97:9b:43:89:49:8b: 6b:23:db:4c:81:3e:6e:25:a6:f6:fa:74:e7:80:d5: 75:cc:76:2a:7a:6b:3a:77:6d:9e:32:25:fa:98:ae: 7e:95:b7:96:97:9d:13:91:71:af:ac:c8:76:71:80: 3a:a3:66:03:d7:80:e9:ec:0b:d0:a6:df:0a:f0:5f: ce:d8:2c:65:05:4e:12:3a:47:a7:2d:80:9a:b0:04: 83:c2:6d:4b:14:ca:bf:7f:56:c5:16:e5:06:1f:5d: 05:b0:9c:bd:1a:5a:8d:1a:5d:e3:87:32:b0:41:fc: 94:de:9b:ea:68:39:7c:99:55:47:48:67:b2:da:00: b4:fd:9e:9c:cc:ad:17:21:5c:93:74:e7:7b:0c:ef: f8:7c:0a:60:46:14:0f:99:20:c8:86:a9:2c:ee:12: fa:a7:18:31:55:91:07:19:d9:a8:ef:b9:fe:fe:1e: 1b:f4:44:a5:d0:be:3d:a8:b3:62:8f:0a:59:e8:6b: 50:79:a9:71:65:26:29:24:aa:05:97:94:54:21:c1: 7f:b5:59:c8:a9:14:67:c3:d8:82:7a:8f:56:c9:f5: 59:b9:05:ff:52:92:20:61:ea:09:cc:76:8c:25:aa: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8E:C1:60:53:09:5E:7C:96:A5:63:06:9B:3F:F2:A6:C8:66:5C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8e1633-4433-3491-af4f-78a96b3a9ef4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:77:4f:ed:04:73:7d:f7:6c:1c:d1:58:04:35:9d:c0:20:1c: 65:00:3e:60:6c:a5:bb:22:5f:58:48:4b:a2:19:cd:9f:5d:08: fa:3a:3c:56:6c:d2:62:fa:93:c8:5f:9d:8a:e5:08:5c:a7:40: 01:73:7b:6a:e0:61:23:e3:ea:d0:a4:16:6f:81:e1:b0:c8:6a: d3:bb:ce:9b:31:3c:c7:55:d4:f2:e3:81:f2:45:59:00:3a:59: f2:02:d7:de:82:28:d0:33:a8:8f:d8:88:58:67:50:62:b2:e4: 0e:01:67:4b:03:2c:f9:2f:84:28:86:d4:b6:85:d4:68:2b:2f: d0:d8:13:5d:70:96:4b:9b:25:dd:c3:dd:e8:b4:02:4c:0f:a2: 29:6c:6f:b7:f7:37:4c:b0:b5:b2:ae:d7:91:a7:26:72:3a:2e: b1:ae:39:f4:b4:d8:4a:f0:61:5b:80:b4:5d:0c:76:cb:02:8b: fc:17:6a:90:d9:b8:78:e2:af:75:ec:20:d8:68:86:47:99:95: c5:49:6f:9f:a1:57:2d:e7:85:6f:76:af:ab:db:31:03:08:a9: 5b:15:76:5d:67:60:f6:a7:4a:37:f3:29:d5:49:7b:db:e1:f2: 46:d6:87:94:92:f8:80:c0:ea:80:16:b2:7b:60:0f:3e:b0:cc: c6:9c:48:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5yUlW/Duw2wSC2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAyMDM1NloXDTI1MDgwMTAyMDM1NlowLzEtMCsGA1UEAxMk ZTBjOWE0YzItZWIxNi00ZjNkLWEwYmQtZjQxYzU0OWQ4NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4Ty5o0GbtZH4F+s4k+M2BXm3wk2Y7mXm0OJ SYtrI9tMgT5uJab2+nTngNV1zHYqems6d22eMiX6mK5+lbeWl50TkXGvrMh2cYA6 o2YD14Dp7AvQpt8K8F/O2CxlBU4SOkenLYCasASDwm1LFMq/f1bFFuUGH10FsJy9 GlqNGl3jhzKwQfyU3pvqaDl8mVVHSGey2gC0/Z6czK0XIVyTdOd7DO/4fApgRhQP mSDIhqks7hL6pxgxVZEHGdmo77n+/h4b9ESl0L49qLNijwpZ6GtQealxZSYpJKoF l5RUIcF/tVnIqRRnw9iCeo9WyfVZuQX/UpIgYeoJzHaMJaq72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+OwWBTCV58lqVjBps/8qbIZlwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI4ZTE2MzMtNDQzMy0z NDkxLWFmNGYtNzhhOTZiM2E5ZWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9WKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl3T+0Ec333bBzRWAQ1ncAgHGUAPmBspbsiX1hIS6IZzZ9dCPo6PFZs 0mL6k8hfnYrlCFynQAFze2rgYSPj6tCkFm+B4bDIatO7zpsxPMdV1PLjgfJFWQA6 WfIC196CKNAzqI/YiFhnUGKy5A4BZ0sDLPkvhCiG1LaF1GgrL9DYE11wlkubJd3D 3ei0AkwPoilsb7f3N0ywtbKu15GnJnI6LrGuOfS02ErwYVuAtF0MdssCi/wXapDZ uHjir3XsINhohkeZlcVJb5+hVy3nhW92r6vbMQMIqVsVdl1nYPanSjfzKdVJe9vh 8kbWh5SS+IDA6oAWsntgDz6wzMacSL0= -----END CERTIFICATE-----Generated at Fri May 9 06:53:55 2025 by rpki-client