$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80af4de0-1bfa-3402-afbd-21dbddda1981.roa File: 80af4de0-1bfa-3402-afbd-21dbddda1981.roa (raw, json) Hash identifier: 54cbP8ooslSCwYW0/oyj+XpcjWXRF+iMzgrXUBj/ZI0= Subject key identifier: 2A:1E:1A:0B:01:A8:88:7A:CE:9B:B5:51:D4:8D:42:DD:D9:E3:9A:AA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584957F4113E4D445BE545A4B180 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80af4de0-1bfa-3402-afbd-21dbddda1981.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 151.213.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:11:3e:4d:44:5b:e5:45:a4:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=e9a369d6-e655-40a8-96fd-37e27d7a2f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c7:d3:67:db:fb:81:b2:0c:d7:25:42:32:dd: 94:10:ef:01:83:49:72:c1:4b:9e:43:71:69:9d:05: fb:7b:84:3b:e7:14:78:f0:ca:ad:6c:a8:36:74:24: 21:42:93:32:9b:a5:10:ef:ac:f2:cc:ec:34:05:ba: a8:b6:62:cd:57:a5:31:f1:e2:ef:c4:8f:67:bd:dd: 64:8d:ac:00:a9:32:8e:c9:0f:c4:5c:8f:38:5d:92: 77:90:49:f1:c4:c0:e0:d3:93:5f:65:fa:ee:e8:5e: fb:0b:4b:14:b8:d5:8c:94:59:79:7d:78:94:cb:18: c3:57:7d:91:02:4d:d8:7c:da:75:96:18:1c:ef:56: d4:d2:d4:9d:c3:47:83:9e:d8:ee:58:9c:48:84:b3: c2:89:b2:6e:46:bb:ab:dd:dd:1d:29:d4:2b:ab:04: f3:d4:0d:92:ad:9d:65:77:b9:ff:03:53:2c:5b:da: 8f:07:77:fb:17:07:04:1e:ef:3d:66:42:13:39:52: 08:04:bb:ea:4b:db:d4:2d:1e:6a:12:59:00:8e:92: db:99:f0:6a:7c:de:6d:40:ba:60:b8:7c:fb:99:8f: 72:1d:26:98:d6:c4:bb:f6:48:71:a8:c7:7a:d5:73: ed:10:ff:fe:1e:c9:fa:5a:b0:34:8c:e6:2a:6d:3d: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1E:1A:0B:01:A8:88:7A:CE:9B:B5:51:D4:8D:42:DD:D9:E3:9A:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/80af4de0-1bfa-3402-afbd-21dbddda1981.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:36:b7:29:81:b9:a7:b7:5b:3a:1e:01:ba:17:2a:cd:ae:d5: 48:fb:8c:70:45:a2:d9:d7:65:f6:44:4d:09:fd:e7:e6:b0:08: f2:78:b7:18:8f:10:91:42:2e:b4:98:eb:8c:bd:ba:27:c9:a9: 01:d1:96:70:e6:33:0d:db:a6:39:3a:a2:40:22:32:d8:6b:53: 79:19:76:49:c0:f1:23:13:6d:18:f3:08:ac:31:d2:2a:46:5c: ec:f0:48:e0:ee:3d:2e:e1:29:44:58:a8:a3:ed:7c:27:d1:f3: b9:82:9f:19:67:85:15:8b:0c:ac:ef:33:9c:85:8c:15:8e:bb: 66:1e:cc:df:cb:86:70:d3:fd:48:30:54:0f:46:61:80:f7:22: d9:cf:9f:5b:ba:6b:66:38:b9:7a:01:1c:b7:f9:9d:0f:10:6f: 6f:84:78:e5:f1:1e:b6:2e:f3:6a:55:9a:95:cd:f2:f2:f9:bf: 60:59:13:0c:65:ed:79:6d:c0:e5:2f:8b:09:f1:57:27:e5:92: 7a:38:40:51:5d:ef:87:c7:60:e8:96:7d:90:0c:65:cc:89:d0: 22:dc:d4:11:49:13:ba:77:a4:fc:b5:fd:ab:57:21:45:1f:31: 81:57:7e:8a:4b:10:65:49:16:7e:81:2b:77:3e:3a:c3:44:e2: c3:e2:68:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BE+TURb5UWksYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk ZTlhMzY5ZDYtZTY1NS00MGE4LTk2ZmQtMzdlMjdkN2EyZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MfTZ9v7gbIM1yVCMt2UEO8Bg0lywUueQ3Fp nQX7e4Q75xR48MqtbKg2dCQhQpMym6UQ76zyzOw0BbqotmLNV6Ux8eLvxI9nvd1k jawAqTKOyQ/EXI84XZJ3kEnxxMDg05NfZfru6F77C0sUuNWMlFl5fXiUyxjDV32R Ak3YfNp1lhgc71bU0tSdw0eDntjuWJxIhLPCibJuRrur3d0dKdQrqwTz1A2SrZ1l d7n/A1MsW9qPB3f7FwcEHu89ZkITOVIIBLvqS9vULR5qElkAjpLbmfBqfN5tQLpg uHz7mY9yHSaY1sS79khxqMd61XPtEP/+Hsn6WrA0jOYqbT1r9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoeGgsBqIh6zpu1UdSNQt3Z45qqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODBhZjRkZTAtMWJmYS0z NDAyLWFmYmQtMjFkYmRkZGExOTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM2tymBuae3WzoeAboXKs2u1Uj7jHBFotnXZfZETQn95+awCPJ4txiP EJFCLrSY64y9uifJqQHRlnDmMw3bpjk6okAiMthrU3kZdknA8SMTbRjzCKwx0ipG XOzwSODuPS7hKURYqKPtfCfR87mCnxlnhRWLDKzvM5yFjBWOu2YezN/LhnDT/Ugw VA9GYYD3ItnPn1u6a2Y4uXoBHLf5nQ8Qb2+EeOXxHrYu82pVmpXN8vL5v2BZEwxl 7XltwOUviwnxVyflkno4QFFd74fHYOiWfZAMZcyJ0CLc1BFJE7p3pPy1/atXIUUf MYFXfopLEGVJFn6BK3c+OsNE4sPiaMA= -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:27 2025 by rpki-client