$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73f034b6-2a56-3ab5-a591-3aa2f4340150.roa File: 73f034b6-2a56-3ab5-a591-3aa2f4340150.roa (raw, json) Hash identifier: 4rrgtJM+rmBqcAgLB2iPYqtkSLAa1snyVxoBEaQ9gos= Subject key identifier: 60:86:A6:73:D5:EA:18:ED:22:1C:AE:04:42:7C:29:A0:46:FC:AF:36 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D21103ACEAA0C65A4F51A100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73f034b6-2a56-3ab5-a591-3aa2f4340150.roa Signing time: Sun 09 Feb 2025 02:00:39 +0000 ROA not before: Sun 09 Feb 2025 02:00:39 +0000 ROA not after: Sat 10 May 2025 01:00:39 +0000 asID: 27482 IP address blocks: 63.250.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d2:11:03:ac:ea:a0:c6:5a:4f:51:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 9 02:00:39 2025 GMT Not After : May 10 01:00:39 2025 GMT Subject: CN=056607a4-7d06-49e8-9b82-d2b3e9e02fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:28:9b:47:80:8b:f2:a8:8f:e6:2a:59:48:6a: f0:04:0f:85:7c:01:77:3d:7c:62:3b:b6:34:e2:cb: 99:c5:8a:b6:b4:03:2b:fb:28:c8:b0:90:07:e9:84: 43:95:e6:f0:39:ab:b5:21:79:07:e1:d7:0f:5c:fe: 1c:3c:90:51:2e:24:88:3e:94:bb:a8:61:c7:66:79: e1:1d:98:19:5f:84:14:59:ac:89:f1:f2:19:c4:d2: f7:84:95:a0:b7:6a:35:d9:d5:d1:bb:50:de:fb:a8: aa:81:1c:b9:e8:a4:db:9e:91:7b:d2:aa:53:f2:c1: 59:f5:a5:3e:8b:ce:d1:fd:4f:81:74:c2:64:54:a6: 58:dc:7d:3c:f3:24:90:a2:6d:ef:8a:06:c8:2f:dc: 56:39:d8:da:ea:b2:c1:17:2e:52:5c:ae:b5:17:ad: e8:b7:cc:1b:eb:e6:e4:21:f3:22:fe:dc:31:88:52: fd:41:fc:f4:0a:26:33:8b:c1:45:a8:96:f6:11:1d: f9:87:1b:9a:30:6f:d7:bb:3c:0e:b7:ae:49:e8:ec: 62:f7:c7:f0:93:ea:8f:d0:16:cd:6b:db:1d:80:be: 1e:ea:50:d6:bc:1c:9d:70:3b:ab:22:28:fc:ba:c9: 4b:fd:32:36:4b:21:25:4b:ad:a8:db:e6:4d:f5:e0: 81:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:86:A6:73:D5:EA:18:ED:22:1C:AE:04:42:7C:29:A0:46:FC:AF:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/73f034b6-2a56-3ab5-a591-3aa2f4340150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.250.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b3:cc:34:e3:8d:82:a5:30:e6:77:77:cc:71:c1:da:08:6f: b2:9e:b8:1d:15:e8:d8:23:2c:d0:ce:ec:62:74:6b:ae:6d:28: af:94:b6:9d:f0:25:f8:db:b3:50:2a:cb:9a:43:90:06:0a:35: c7:b9:07:e4:dd:2a:cd:db:0d:39:36:2f:81:1e:38:d4:98:f0: d2:b7:3b:88:b7:1d:6d:0e:8b:ec:8b:2f:16:ea:60:5c:e2:df: 81:b2:87:f2:89:13:ab:a9:ff:49:39:39:08:47:13:a3:c5:e5: 3c:fb:65:c4:ea:0c:d3:75:fe:b6:99:90:1f:60:41:35:62:30: 26:01:63:2a:aa:12:86:2f:ee:78:8f:9d:5f:08:26:fa:15:fd: 68:e4:0a:9b:45:fa:3a:4c:45:3d:ea:54:85:5a:78:fa:54:1e: c3:c6:3a:06:24:bd:d1:08:bf:0b:0b:a6:16:72:d9:b0:23:f0: a6:50:81:38:e4:a6:b0:23:0e:1a:98:22:8e:90:34:b3:48:a6: 3d:67:88:bc:53:86:92:73:71:f4:83:90:b8:b5:de:3b:64:d3: 9c:9f:38:fc:50:99:c2:95:4b:e1:cf:f5:c0:d4:a1:e2:dd:73: a9:01:1e:5b:05:3b:99:4c:f5:4b:5f:7a:43:91:44:eb:c5:56: d8:58:a2:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjSEQOs6qDGWk9RoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk MDU2NjA3YTQtN2QwNi00OWU4LTliODItZDJiM2U5ZTAyZmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCibR4CL8qiP5ipZSGrwBA+FfAF3PXxiO7Y0 4suZxYq2tAMr+yjIsJAH6YRDlebwOau1IXkH4dcPXP4cPJBRLiSIPpS7qGHHZnnh HZgZX4QUWayJ8fIZxNL3hJWgt2o12dXRu1De+6iqgRy56KTbnpF70qpT8sFZ9aU+ i87R/U+BdMJkVKZY3H088ySQom3vigbIL9xWOdja6rLBFy5SXK61F63ot8wb6+bk IfMi/twxiFL9Qfz0CiYzi8FFqJb2ER35hxuaMG/XuzwOt65J6Oxi98fwk+qP0BbN a9sdgL4e6lDWvBydcDurIij8uslL/TI2SyElS62o2+ZN9eCBjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCGpnPV6hjtIhyuBEJ8KaBG/K82MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzNmMDM0YjYtMmE1Ni0z YWI1LWE1OTEtM2FhMmY0MzQwMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP/r8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuzzDTjjYKlMOZ3d8xxwdoIb7KeuB0V6NgjLNDO7GJ0a65tKK+Utp3w Jfjbs1Aqy5pDkAYKNce5B+TdKs3bDTk2L4EeONSY8NK3O4i3HW0Oi+yLLxbqYFzi 34Gyh/KJE6up/0k5OQhHE6PF5Tz7ZcTqDNN1/raZkB9gQTViMCYBYyqqEoYv7niP nV8IJvoV/WjkCptF+jpMRT3qVIVaePpUHsPGOgYkvdEIvwsLphZy2bAj8KZQgTjk prAjDhqYIo6QNLNIpj1niLxThpJzcfSDkLi13jtk05yfOPxQmcKVS+HP9cDUoeLd c6kBHlsFO5lM9UtfekORROvFVthYouY= -----END CERTIFICATE-----Generated at Sun Apr 27 05:43:31 2025 by rpki-client