$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa File: 3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa (raw, json) Hash identifier: BWetsPRM9YAD9IoZrjd3hkJF9c/9B0QGhMw/C5U8r7c= Subject key identifier: 78:CB:B2:70:18:CC:C3:68:3B:5E:7D:B1:0E:5C:74:8B:98:DD:28:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A119AC8DA14607E3A089CB480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 209.255.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:c8:da:14:60:7e:3a:08:9c:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=4141b71b-6acb-4c58-9e53-02bbf0ff3391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:be:3d:90:48:8d:a1:bf:63:1a:d6:f5:a3: 73:ff:d2:6c:be:49:62:d4:d7:8b:b9:eb:8e:5d:6b: b0:c2:e2:77:81:23:eb:52:57:01:f4:a1:d0:91:3e: 23:b3:1d:54:5f:0a:92:39:7f:f2:dd:63:76:20:20: bb:bb:a1:49:20:e0:79:6d:1b:0c:a5:0c:c0:48:f6: ce:91:6d:c2:97:56:63:5f:2b:dc:a0:0e:bc:6d:0e: 55:56:92:45:9b:87:ca:9c:58:2c:0f:2f:07:68:f7: 3a:55:98:90:32:2f:1a:1e:08:ac:e8:04:8a:22:2c: 0f:4e:82:5d:f7:98:bc:e1:f7:de:93:f4:6a:ce:52: cd:60:29:d0:0c:a3:0c:b8:61:4b:2f:e1:8b:e1:df: e5:ec:0a:64:45:5f:f5:ac:79:1b:a4:7f:24:e5:21: 11:20:69:fa:0f:ba:b2:12:fa:36:72:18:53:42:5b: 7e:fe:d0:9d:e9:48:21:6b:e9:8d:ba:95:bf:f6:e5: b0:88:a7:20:24:23:83:49:a6:5c:63:70:eb:18:0c: 34:cf:bb:a6:85:a5:b8:0f:9d:2b:d4:48:92:a1:75: 33:b3:41:1a:70:23:7c:b4:58:aa:47:b2:bf:1e:d3: 0f:7d:e1:a4:55:8d:78:83:d8:0c:bc:61:15:2b:60: 15:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CB:B2:70:18:CC:C3:68:3B:5E:7D:B1:0E:5C:74:8B:98:DD:28:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3a156ed6-dcdf-3258-a7f3-dd59a00b1bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.255.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:e8:fc:5a:31:79:34:bd:fe:ed:bf:2e:c7:7a:cf:3d:22:3e: 18:11:09:d6:98:23:f4:19:d0:fb:f8:cb:33:10:27:41:cf:67: e9:9c:c3:c9:6a:7e:36:75:e9:a6:75:fd:03:fa:89:27:dd:71: 6c:4c:1c:7f:0d:d0:aa:61:64:4c:17:2f:ce:57:2d:30:0a:5f: 72:9d:66:41:9f:33:64:82:05:69:9f:a5:ff:d0:3b:2c:63:58: 46:a6:b1:6b:94:65:dc:b9:22:f5:96:51:b3:dc:6c:f0:72:31: e1:ac:72:91:a0:8d:40:8b:46:6e:e7:86:95:56:16:2a:66:f4: 5e:ec:05:7f:f0:4a:ea:bb:1e:ff:86:91:6a:08:58:e1:3b:55: 6c:1e:e2:3b:ca:3d:5e:21:62:b8:75:94:94:f9:ad:4d:de:3a: 0f:c2:37:a7:d9:74:68:3b:68:64:57:c6:f5:2e:2e:38:83:3e: c2:03:d8:58:65:2a:5e:d5:41:b9:0f:51:80:ff:a0:d0:6d:a9: 29:c4:60:84:96:65:c0:17:b7:c0:38:bf:ee:02:e5:f5:33:c5: 22:29:d3:b8:a0:14:9e:c6:14:c4:de:2e:be:8d:f7:c6:58:c3: 47:73:db:2d:ef:a3:bb:62:40:e8:66:0f:f2:e1:74:5f:74:c8: 08:18:3e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmsjaFGB+OgictIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk NDE0MWI3MWItNmFjYi00YzU4LTllNTMtMDJiYmYwZmYzMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBi+PZBIjaG/YxrW9aNz/9Jsvkli1NeLueuO XWuwwuJ3gSPrUlcB9KHQkT4jsx1UXwqSOX/y3WN2ICC7u6FJIOB5bRsMpQzASPbO kW3Cl1ZjXyvcoA68bQ5VVpJFm4fKnFgsDy8HaPc6VZiQMi8aHgis6ASKIiwPToJd 95i84ffek/RqzlLNYCnQDKMMuGFLL+GL4d/l7ApkRV/1rHkbpH8k5SERIGn6D7qy Evo2chhTQlt+/tCd6Ugha+mNupW/9uWwiKcgJCODSaZcY3DrGAw0z7umhaW4D50r 1EiSoXUzs0EacCN8tFiqR7K/HtMPfeGkVY14g9gMvGEVK2AVAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjLsnAYzMNoO159sQ5cdIuY3SjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvM2ExNTZlZDYtZGNkZi0z MjU4LWE3ZjMtZGQ1OWEwMGIxYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f+hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHo/FoxeTS9/u2/Lsd6zz0iPhgRCdaYI/QZ0Pv4yzMQJ0HPZ+mcw8lq fjZ16aZ1/QP6iSfdcWxMHH8N0KphZEwXL85XLTAKX3KdZkGfM2SCBWmfpf/QOyxj WEamsWuUZdy5IvWWUbPcbPByMeGscpGgjUCLRm7nhpVWFipm9F7sBX/wSuq7Hv+G kWoIWOE7VWwe4jvKPV4hYrh1lJT5rU3eOg/CN6fZdGg7aGRXxvUuLjiDPsID2Fhl Kl7VQbkPUYD/oNBtqSnEYISWZcAXt8A4v+4C5fUzxSIp07igFJ7GFMTeLr6N98ZY w0dz2y3vo7tiQOhmD/LhdF90yAgYPhA= -----END CERTIFICATE-----Generated at Sun Jun 15 20:06:04 2025 by rpki-client