$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa File: ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa (raw, json) Hash identifier: EHEoKzd89cXs1h+jqgYMPZYh0DusHWiBxxZJNC7FPLM= Subject key identifier: 7B:68:1C:68:9D:54:8E:28:6F:6A:8B:FF:E4:5D:5C:D3:05:DB:86:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1A742909BF780A6C0D18 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.47.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1a:74:29:09:bf:78:0a:6c:0d:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a0c9c208-a961-4620-a02a-b6baf8566498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a6:c4:d0:99:9b:ce:81:e0:43:e2:f0:33:7e: 38:8e:3a:d9:07:0c:47:34:fb:20:a6:df:7d:e7:53: 39:ac:14:07:2e:d6:96:50:05:f1:36:f7:e1:8c:1d: 9e:82:a6:c4:db:1c:5e:7e:8d:e9:64:c2:d7:95:80: 22:3d:8c:cf:2c:d1:a5:44:06:13:a0:e9:21:69:ad: c8:ed:66:a2:85:92:90:08:66:2f:e7:66:d6:78:48: e2:26:59:e2:8b:a5:36:64:95:dc:24:4a:65:85:95: 7f:f6:d9:7c:0d:20:90:b1:fc:23:60:b2:bf:e8:c3: b1:ad:d8:8d:aa:91:3b:62:43:ea:0e:f8:79:e6:ba: e8:bd:72:6b:2d:c3:f1:b7:a1:07:fa:06:e3:1a:a0: 49:4a:24:08:0d:81:c9:eb:81:59:29:7b:ed:86:0b: 51:95:6c:24:f3:72:ad:ff:29:28:95:30:f4:e9:7a: 0b:75:2c:95:c1:e7:32:ca:5c:d0:24:3f:77:d8:94: b2:c2:be:ca:d7:0f:33:3d:78:f7:55:20:b5:c6:b5: 97:19:4e:26:ef:9b:f6:04:20:83:b7:74:ea:45:50: 6e:23:fe:0d:a3:25:0c:2c:52:ed:31:5f:a6:66:89: 8c:f1:a1:ec:87:7b:dd:03:64:9a:a4:cd:c3:72:1d: af:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:68:1C:68:9D:54:8E:28:6F:6A:8B:FF:E4:5D:5C:D3:05:DB:86:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ff40cb68-1ebc-3822-8ca6-f22a53a60dce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.47.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0e:0a:6c:ff:fc:9b:ad:4e:f0:32:5d:b7:3a:e7:ed:e7:39: 7d:f7:30:4e:06:9e:b8:c5:60:1c:f3:79:ad:41:f3:05:72:7a: e7:94:40:e8:76:61:d3:07:51:c2:66:27:db:85:b3:e4:2e:d9: 94:a4:49:70:fd:c9:0e:aa:05:22:b1:f2:49:2d:3d:dd:2f:6c: 77:8e:19:be:9a:25:21:11:cc:85:a8:46:6b:03:42:a3:f6:da: d5:d6:4d:44:20:c1:c2:79:64:d1:ea:c4:ff:d4:95:ab:6a:2b: 50:62:4a:a6:b2:5d:0c:ae:85:e5:d8:15:ab:c9:03:21:8d:86: 79:22:4d:75:73:a8:25:9e:74:f2:95:03:b9:c3:f5:8e:86:b0: 76:c3:46:45:b9:a1:45:78:3a:83:d2:cd:8e:6d:99:03:c0:f8: 26:ee:b9:c9:13:07:bf:59:42:57:a8:95:d2:bc:a8:f0:df:d6: 0c:b9:54:8b:8e:3b:b6:ae:5a:26:82:3c:88:bc:5b:58:cf:76: 69:2a:ac:67:86:75:c3:34:07:dd:50:d2:0c:ea:53:88:1c:b1: 24:38:13:73:55:df:c0:97:bf:84:00:0f:e3:b1:88:6f:cc:ec: 27:64:06:ae:aa:12:ef:4b:95:03:b6:25:fb:bf:0f:43:1e:bd: 60:6d:41:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShp0KQm/eApsDRgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTBjOWMyMDgtYTk2MS00NjIwLWEwMmEtYjZiYWY4NTY2NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6bE0JmbzoHgQ+LwM344jjrZBwxHNPsgpt99 51M5rBQHLtaWUAXxNvfhjB2egqbE2xxefo3pZMLXlYAiPYzPLNGlRAYToOkhaa3I 7WaihZKQCGYv52bWeEjiJlnii6U2ZJXcJEplhZV/9tl8DSCQsfwjYLK/6MOxrdiN qpE7YkPqDvh55rrovXJrLcPxt6EH+gbjGqBJSiQIDYHJ64FZKXvthgtRlWwk83Kt /ykolTD06XoLdSyVwecyylzQJD932JSywr7K1w8zPXj3VSC1xrWXGU4m75v2BCCD t3TqRVBuI/4NoyUMLFLtMV+mZomM8aHsh3vdA2SapM3Dch2vjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtoHGidVI4ob2qL/+RdXNMF24Y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmY0MGNiNjgtMWViYy0z ODIyLThjYTYtZjIyYTUzYTYwZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2C/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8OCmz//JutTvAyXbc65+3nOX33ME4GnrjFYBzzea1B8wVyeueUQOh2 YdMHUcJmJ9uFs+Qu2ZSkSXD9yQ6qBSKx8kktPd0vbHeOGb6aJSERzIWoRmsDQqP2 2tXWTUQgwcJ5ZNHqxP/UlatqK1BiSqayXQyuheXYFavJAyGNhnkiTXVzqCWedPKV A7nD9Y6GsHbDRkW5oUV4OoPSzY5tmQPA+CbuuckTB79ZQleoldK8qPDf1gy5VIuO O7auWiaCPIi8W1jPdmkqrGeGdcM0B91Q0gzqU4gcsSQ4E3NV38CXv4QAD+OxiG/M 7CdkBq6qEu9LlQO2Jfu/D0MevWBtQW8= -----END CERTIFICATE-----Generated at Fri May 9 16:23:37 2025 by rpki-client