$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa File: fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa (raw, json) Hash identifier: ojh+6naeC6zit+vUXusLJxvUjGIesXgQOYpFDmK7i3s= Subject key identifier: 37:59:06:32:E9:A1:D8:56:16:64:9A:2D:01:3F:1E:94:3E:17:4F:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4A7E46C60C477FBC62E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 30080 IP address blocks: 74.8.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4a:7e:46:c6:0c:47:7f:bc:62:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=2ea9d3a4-861f-4f5a-88d8-ac244803ea04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:72:38:6a:9e:52:11:e1:74:1d:49:d5:ba:93: 7f:12:11:ac:6e:94:77:d0:0f:d1:15:c3:8a:8a:0a: c4:b5:be:3a:1e:2f:46:d0:68:1e:3f:eb:f7:03:db: cc:f7:74:19:1d:ea:3a:2c:04:af:94:86:8d:1b:e9: a6:21:dd:bc:a4:a9:38:dc:e4:ba:b5:60:4b:0c:ef: 33:01:b9:41:f2:d6:f0:d5:13:c7:2d:ed:3b:f6:9e: 9c:b5:92:47:e7:47:0a:32:83:ea:1c:de:38:4b:73: 2a:60:87:b5:e2:d8:4d:f9:a8:2e:2f:24:75:2a:24: 37:2a:a3:f0:f5:0a:34:09:99:2b:37:b4:af:af:9e: 79:90:84:0c:ea:b3:9f:e8:68:4c:dd:93:38:ab:81: 4f:08:95:6b:aa:5b:f6:c3:99:a8:07:20:3b:27:37: a1:c9:78:e0:73:c9:ab:ea:68:0a:57:3d:d8:e0:1e: e5:6e:43:6f:6b:4b:41:c1:39:52:6a:36:4f:cd:15: 8b:fe:f3:cb:db:41:1d:77:80:b3:a4:0c:46:ab:a7: ae:48:17:13:01:e3:4f:e5:63:d7:15:2b:9e:b5:c3: c7:08:c7:08:7e:2d:56:64:b2:f8:48:fd:48:af:8b: 19:84:f1:59:38:92:83:91:dd:bb:8c:35:9d:81:bc: 5a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:59:06:32:E9:A1:D8:56:16:64:9A:2D:01:3F:1E:94:3E:17:4F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdccd2c7-cc9b-3a11-bcb8-eeb6e6055f3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c5:3d:be:15:73:5a:dd:52:ff:1f:77:ef:1f:f7:58:f9:81: 90:dc:72:1c:33:4c:47:85:0f:ef:54:ba:3f:d6:bd:61:72:a8: bc:48:a0:ef:5b:0b:0a:2b:95:55:7a:35:8f:13:15:17:2d:f6: 8d:42:d6:5b:03:3f:fa:d4:15:d8:68:ed:e6:ba:d6:16:37:c2: 1c:da:bc:f7:3e:1b:75:87:8a:f7:54:01:1f:5b:9d:d8:43:98: a8:b8:75:44:a2:15:60:a7:fc:1c:2c:2f:90:9d:d0:c2:88:c0: 0d:f9:e0:a9:ba:eb:0c:74:ee:b0:92:f3:aa:d5:a9:71:c6:65: 7c:96:b4:5d:cb:36:61:4b:17:95:8d:ee:93:36:9b:b6:38:58: ea:23:71:c1:a9:c3:57:d5:e0:ab:a2:cf:4c:62:9f:ab:4f:5a: 8c:7b:49:fe:13:12:f0:b6:ba:2c:1f:67:8d:dc:ab:ac:08:e6: ae:55:6f:29:0d:ea:0d:ee:f2:24:31:ff:38:b6:50:f5:b1:15: 90:5e:d9:7b:25:b3:ec:77:7e:57:12:39:d4:ab:d4:bd:1b:26: 59:ec:64:89:c5:2e:7a:46:5b:66:8e:57:59:12:0e:f1:d5:df: 51:cc:d4:47:5a:36:97:92:5c:94:87:c7:33:d7:ce:b0:7a:b4: 33:0a:4d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkp+RsYMR3+8YuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MmVhOWQzYTQtODYxZi00ZjVhLTg4ZDgtYWMyNDQ4MDNlYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnI4ap5SEeF0HUnVupN/EhGsbpR30A/RFcOK igrEtb46Hi9G0GgeP+v3A9vM93QZHeo6LASvlIaNG+mmId28pKk43OS6tWBLDO8z AblB8tbw1RPHLe079p6ctZJH50cKMoPqHN44S3MqYIe14thN+aguLyR1KiQ3KqPw 9Qo0CZkrN7Svr555kIQM6rOf6GhM3ZM4q4FPCJVrqlv2w5moByA7JzehyXjgc8mr 6mgKVz3Y4B7lbkNva0tBwTlSajZPzRWL/vPL20Edd4CzpAxGq6euSBcTAeNP5WPX FSuetcPHCMcIfi1WZLL4SP1Ir4sZhPFZOJKDkd27jDWdgbxayQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdZBjLpodhWFmSaLQE/HpQ+F0+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRjY2QyYzctY2M5Yi0z YTExLWJjYjgtZWViNmU2MDU1ZjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASggkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHFPb4Vc1rdUv8fd+8f91j5gZDcchwzTEeFD+9Uuj/WvWFyqLxIoO9b CworlVV6NY8TFRct9o1C1lsDP/rUFdho7ea61hY3whzavPc+G3WHivdUAR9bndhD mKi4dUSiFWCn/BwsL5Cd0MKIwA354Km66wx07rCS86rVqXHGZXyWtF3LNmFLF5WN 7pM2m7Y4WOojccGpw1fV4Kuiz0xin6tPWox7Sf4TEvC2uiwfZ43cq6wI5q5VbykN 6g3u8iQx/zi2UPWxFZBe2Xsls+x3flcSOdSr1L0bJlnsZInFLnpGW2aOV1kSDvHV 31HM1EdaNpeSXJSHxzPXzrB6tDMKTRM= -----END CERTIFICATE-----Generated at Sat May 10 11:21:02 2025 by rpki-client