$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ed98236-8eeb-3a55-ab69-a1f429a618df.roa File: 0ed98236-8eeb-3a55-ab69-a1f429a618df.roa (raw, json) Hash identifier: PSybWCYiU2FSJeuUf0MOFSAzWHBkJrl1DZrfmRiFj3w= Subject key identifier: 76:73:77:04:AC:1E:EF:BA:FC:B2:F3:A5:E1:EC:AA:70:32:A5:5B:55 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496A19B871F3BE6262BAA3FA80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ed98236-8eeb-3a55-ab69-a1f429a618df.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 7029 IP address blocks: 151.213.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:b8:71:f3:be:62:62:ba:a3:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=99848b21-d9b4-4f16-9598-f07d22e905c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:58:ff:1c:e8:53:46:58:c4:10:44:5a:b8:31: 6d:3b:5b:fa:c5:69:89:a2:6c:c0:a6:31:8b:89:e0: 29:83:98:8d:96:26:27:88:55:83:51:de:b5:47:38: d1:a3:13:2e:7e:76:12:69:d5:d7:57:a0:84:e9:22: f1:f7:60:ea:28:b6:82:db:5e:56:5e:fb:cf:be:74: cc:dc:0e:90:54:7c:e5:55:e5:18:42:53:76:49:56: 2f:36:06:ac:98:d8:ce:e7:bf:6d:43:59:63:64:ed: b7:7d:2f:79:dd:40:01:1e:53:9f:04:c2:79:1e:ba: e8:5c:9f:3a:f6:f9:ba:c5:56:44:9a:55:0b:e8:e7: e3:f9:b7:1f:21:46:3b:2d:e0:b0:3c:7a:79:6d:83: 77:77:22:db:aa:75:09:a5:6e:9d:33:d1:0c:66:bd: 12:3e:7a:6f:c8:bd:5c:1d:fd:00:ed:49:96:52:49: c4:1b:5c:a2:1c:6e:d1:dd:eb:57:28:02:16:dd:3a: a0:7c:34:e8:7d:76:9c:04:01:49:4b:63:fe:a5:e0: a5:cb:a4:41:1f:12:a7:92:5f:91:f5:75:9f:6d:e3: 57:c3:55:23:0e:0f:b2:ed:89:78:4b:9e:ab:5d:65: a1:a3:3b:fa:a3:d7:f2:5a:a4:f5:7c:47:8d:4a:9b: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:73:77:04:AC:1E:EF:BA:FC:B2:F3:A5:E1:EC:AA:70:32:A5:5B:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0ed98236-8eeb-3a55-ab69-a1f429a618df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:bd:79:d9:ff:72:d0:f2:8f:3c:fd:5e:90:63:c7:f1:bf:75: 15:c2:c4:ce:9c:a3:29:c3:3f:f3:85:e8:0e:94:a7:c6:b6:d2: ff:5a:24:48:38:bd:22:2e:b4:dc:7b:8f:7b:19:5f:04:65:a9: 2d:23:b5:92:c0:08:a6:c5:aa:fc:7a:3d:fd:9b:7d:2d:b1:2f: 6e:a9:b2:a4:e3:97:af:2f:3b:6d:dc:c7:93:a8:93:61:2a:48: 8a:15:f5:bc:a1:56:74:ac:4c:8f:1c:ae:dd:7e:30:38:fb:21: b4:78:03:75:cd:f4:b9:d6:5e:3f:39:df:8c:4f:1f:83:01:dd: b7:80:3a:8a:a4:b5:3d:82:6c:2b:37:fd:5a:05:b7:94:31:7d: 68:85:10:05:a2:65:56:97:12:a1:b8:b2:92:57:3b:b3:a7:b1: 81:4a:8c:87:52:08:16:9f:ca:63:31:d7:a2:03:5f:48:f7:91: 6a:6e:62:dc:e3:c4:6d:88:e2:a3:c8:7e:f6:de:09:f5:a1:a3: 08:1f:2e:04:bb:66:e8:46:d0:da:ce:7d:03:51:bb:3f:f2:e8: 7e:0c:d7:c1:ef:d1:51:9f:0a:02:dc:c7:37:78:ac:bc:4e:98: 56:16:34:56:2c:3d:12:61:d3:4c:dd:b5:ba:d3:91:3b:5a:b8: 41:03:12:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbhx875iYrqj+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk OTk4NDhiMjEtZDliNC00ZjE2LTk1OTgtZjA3ZDIyZTkwNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1j/HOhTRljEEERauDFtO1v6xWmJomzApjGL ieApg5iNliYniFWDUd61RzjRoxMufnYSadXXV6CE6SLx92DqKLaC215WXvvPvnTM 3A6QVHzlVeUYQlN2SVYvNgasmNjO579tQ1ljZO23fS953UABHlOfBMJ5HrroXJ86 9vm6xVZEmlUL6Ofj+bcfIUY7LeCwPHp5bYN3dyLbqnUJpW6dM9EMZr0SPnpvyL1c Hf0A7UmWUknEG1yiHG7R3etXKAIW3TqgfDTofXacBAFJS2P+peCly6RBHxKnkl+R 9XWfbeNXw1UjDg+y7Yl4S56rXWWhozv6o9fyWqT1fEeNSpsrZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZzdwSsHu+6/LLzpeHsqnAypVtVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGVkOTgyMzYtOGVlYi0z YTU1LWFiNjktYTFmNDI5YTYxOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm9edn/ctDyjzz9XpBjx/G/dRXCxM6coynDP/OF6A6Up8a20v9aJEg4 vSIutNx7j3sZXwRlqS0jtZLACKbFqvx6Pf2bfS2xL26psqTjl68vO23cx5Ook2Eq SIoV9byhVnSsTI8crt1+MDj7IbR4A3XN9LnWXj8534xPH4MB3beAOoqktT2CbCs3 /VoFt5QxfWiFEAWiZVaXEqG4spJXO7OnsYFKjIdSCBafymMx16IDX0j3kWpuYtzj xG2I4qPIfvbeCfWhowgfLgS7ZuhG0NrOfQNRuz/y6H4M18Hv0VGfCgLcxzd4rLxO mFYWNFYsPRJh00zdtbrTkTtauEEDEm4= -----END CERTIFICATE-----Generated at Sun Apr 27 07:04:27 2025 by rpki-client