$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa File: 5012a183-6945-305b-9c9c-de9ba51406f9.roa (raw, json) Hash identifier: D+s2snWqd2bQVvgeNzbC9/R2CLU9bm+G2LpLPqCEBZw= Subject key identifier: CC:6B:CA:32:75:D3:17:90:6C:52:04:54:BD:0F:A1:5A:AE:C7:19:4A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584953C41F2C292E38B29B50F6C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 7029 IP address blocks: 209.253.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1f:2c:29:2e:38:b2:9b:50:f6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=8bec0784-001e-40a3-939e-4b3027198c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:d8:12:d2:14:10:05:5b:24:3d:a2:3a:32: 87:85:89:99:c7:37:7a:0f:0f:c1:bc:30:7d:e3:a6: a0:a0:e0:e9:bf:0f:0b:fb:f8:d2:53:4c:32:4d:94: 74:c5:38:84:18:25:e3:16:8b:3b:97:02:27:87:9e: 07:83:5e:37:af:d6:74:d4:6e:2f:e4:13:b8:95:7a: 79:99:dd:1d:9a:ea:13:88:07:6f:a9:ed:5e:03:d7: 0e:d7:ea:b0:2e:2a:93:4a:51:3d:dc:55:e4:d0:41: e0:80:23:1e:3e:07:93:c5:f0:72:ba:86:ae:f3:69: 43:ee:72:a2:b5:7c:02:19:a7:fb:16:67:95:ac:a0: 33:7e:7f:b3:8a:4b:21:a1:a5:98:0d:1e:12:b9:81: b0:7b:de:15:f5:bb:4b:4c:ae:82:44:1e:96:07:a5: d6:fc:65:fb:36:72:33:c1:31:2c:17:3a:17:2d:90: 41:8c:23:ed:e3:56:ec:47:02:5e:0d:4e:90:46:ed: f7:26:2f:eb:9b:61:1d:76:53:8c:a9:e1:0b:41:f9: d0:b2:dc:09:e4:3f:37:d0:a3:85:23:af:3f:4e:e0: e9:d7:48:4e:5e:5f:21:d3:dd:da:71:bf:5c:67:6e: 5c:4f:d9:4c:b2:f0:7f:96:50:66:bf:66:2d:1a:cc: b9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6B:CA:32:75:D3:17:90:6C:52:04:54:BD:0F:A1:5A:AE:C7:19:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5012a183-6945-305b-9c9c-de9ba51406f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.253.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:76:38:f2:b7:e5:60:f6:f7:f0:96:3b:ff:ab:41:6d:1a:58: ce:0a:f6:43:7d:f9:93:ea:40:e2:7f:c3:71:d1:39:a2:43:79: 79:11:22:11:ca:dd:5b:08:98:eb:37:4c:cc:68:8f:17:aa:a0: 34:7d:6f:2a:69:52:ad:f8:d0:f4:a9:2f:55:76:e1:bf:ef:01: b7:8b:f8:e6:58:dd:f7:c8:63:c8:bf:91:38:5a:c7:8d:bd:b5: d8:b8:dd:39:eb:ff:cf:4b:85:78:3b:09:52:ef:57:6a:30:7a: 3c:6b:96:4d:89:60:56:ce:b7:20:f7:41:3d:94:f3:5c:eb:d1: 52:03:10:06:b1:88:3b:15:be:0d:68:02:15:ad:f5:60:d0:b2: e9:f4:9a:ba:73:cc:82:a8:70:ad:02:ff:03:ab:78:12:6a:55: 45:01:4a:a5:57:1c:89:c4:37:8e:ab:36:54:ba:c2:fd:48:ed: 2f:f7:ff:ef:fe:66:36:b3:e6:8c:ae:f9:43:4c:b4:16:3c:21: 47:50:d1:69:12:99:15:43:2d:14:63:f4:92:12:52:aa:dd:9d: 78:24:92:51:13:80:70:10:f9:2b:d3:01:ed:04:9d:bf:7c:a5: 47:8c:41:73:ed:ff:48:09:2a:1c:d6:95:44:25:14:75:9d:dd: 82:5c:e2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxB8sKS44sptQ9sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGJlYzA3ODQtMDAxZS00MGEzLTkzOWUtNGIzMDI3MTk4YzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEPYEtIUEAVbJD2iOjKHhYmZxzd6Dw/BvDB9 46agoODpvw8L+/jSU0wyTZR0xTiEGCXjFos7lwInh54Hg143r9Z01G4v5BO4lXp5 md0dmuoTiAdvqe1eA9cO1+qwLiqTSlE93FXk0EHggCMePgeTxfByuoau82lD7nKi tXwCGaf7FmeVrKAzfn+zikshoaWYDR4SuYGwe94V9btLTK6CRB6WB6XW/GX7NnIz wTEsFzoXLZBBjCPt41bsRwJeDU6QRu33Ji/rm2EddlOMqeELQfnQstwJ5D830KOF I68/TuDp10hOXl8h093acb9cZ25cT9lMsvB/llBmv2YtGsy5+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxryjJ10xeQbFIEVL0PoVquxxlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTAxMmExODMtNjk0NS0z MDViLTljOWMtZGU5YmE1MTQwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0f2lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEx2OPK35WD29/CWO/+rQW0aWM4K9kN9+ZPqQOJ/w3HROaJDeXkRIhHK 3VsImOs3TMxojxeqoDR9byppUq340PSpL1V24b/vAbeL+OZY3ffIY8i/kThax429 tdi43Tnr/89LhXg7CVLvV2owejxrlk2JYFbOtyD3QT2U81zr0VIDEAaxiDsVvg1o AhWt9WDQsun0mrpzzIKocK0C/wOreBJqVUUBSqVXHInEN46rNlS6wv1I7S/3/+/+ Zjaz5oyu+UNMtBY8IUdQ0WkSmRVDLRRj9JISUqrdnXgkklETgHAQ+SvTAe0Enb98 pUeMQXPt/0gJKhzWlUQlFHWd3YJc4mI= -----END CERTIFICATE-----Generated at Sun Apr 27 02:30:14 2025 by rpki-client