$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f238683-1775-3a8c-b8e4-f517c9d11d99.roa File: 9f238683-1775-3a8c-b8e4-f517c9d11d99.roa (raw, json) Hash identifier: V+E/oE911kPqGJxViBZbqd9wSYf22bT/W2t5AS3O52M= Subject key identifier: 63:8A:F2:EB:09:F3:8B:BF:29:61:9B:8C:F6:5D:A2:9C:F3:1A:D7:A1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA223CFED1EA91DE4037C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f238683-1775-3a8c-b8e4-f517c9d11d99.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 162.39.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:22:3c:fe:d1:ea:91:de:40:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=cfcb9183-e899-471f-aa27-ea9df4e8b621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f0:c6:b2:de:2a:48:e6:34:9e:ce:2b:fb:a2: 75:4c:d0:3a:5d:d1:5e:37:15:22:71:fa:8c:13:38: 65:fd:78:f3:30:4d:fe:fd:d7:3f:34:89:2e:db:d2: 9a:7c:e4:c2:cd:e9:45:88:4d:e3:79:63:72:19:9e: 1f:38:87:e0:89:1c:55:cf:6a:19:02:23:76:38:50: 38:bc:21:ed:d8:86:61:19:80:d6:c0:b0:9c:c9:77: ea:78:8c:ba:4a:4c:5d:d9:e8:6c:d0:24:f6:2e:92: ba:32:cf:72:c3:c2:7a:fb:25:52:33:26:da:57:3c: ff:f3:26:e7:24:4b:99:a4:fa:84:04:ae:42:f8:8b: 76:8c:e0:64:7b:a1:1e:00:06:99:8c:20:01:5d:8f: 8f:11:e5:39:24:71:77:8b:d3:4c:ae:b7:28:fb:02: e1:46:5d:68:12:4c:9d:60:16:57:05:89:9c:0f:7a: d1:52:9a:83:cb:b0:1b:62:d5:3d:bd:2c:ce:54:1d: 70:ce:cb:cd:56:f0:24:e6:50:d4:16:9a:65:1d:38: e4:e0:bb:71:5a:9c:f1:d6:5a:e3:9f:73:c1:92:bd: 2f:68:9a:34:94:14:31:90:75:50:1f:66:1e:97:6e: 17:0e:c3:01:5b:bf:c9:ff:c9:2f:45:b4:44:17:ea: d6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8A:F2:EB:09:F3:8B:BF:29:61:9B:8C:F6:5D:A2:9C:F3:1A:D7:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9f238683-1775-3a8c-b8e4-f517c9d11d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.39.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:c1:bb:63:50:19:e2:85:9a:d3:99:b4:1b:c5:30:de:c6:3a: f8:b9:53:6c:3f:9e:de:c3:4a:fa:2f:f3:ce:95:cf:a5:e4:20: 05:2f:4d:b3:1e:8b:fc:82:f5:e3:28:ff:af:21:e5:7e:93:ed: bb:ac:17:7f:b9:48:4c:cb:07:55:46:f0:8e:07:47:0a:e4:da: a4:ae:2f:26:be:1b:ee:90:10:cc:03:18:53:05:bf:84:fb:a7: 2c:62:59:77:57:9a:c9:5d:6a:14:5c:88:25:f1:f6:a2:c1:c5: b4:6c:45:95:b9:2d:b1:ad:bb:7f:f5:30:a9:64:2d:16:b2:6f: 43:5b:ef:b2:43:b0:cb:93:e3:04:4c:70:55:49:73:2d:f4:39: 5e:16:f2:7e:32:68:2c:03:eb:1e:0a:ad:ed:65:a0:ee:04:7c: ba:d6:6a:22:69:df:58:34:2a:bb:4e:91:ec:76:be:69:b4:44: e0:1c:30:6d:2e:87:42:9d:26:6b:10:ea:60:40:29:fb:1f:88: c2:30:0c:87:a0:54:aa:1b:b7:7a:fd:1e:96:c6:75:78:40:32: 79:47:8f:05:28:01:7f:a4:21:b8:83:6e:c9:82:90:c6:b3:0e: cb:38:44:71:f6:3a:4f:f6:ca:23:c5:ab:2d:07:e8:c3:c1:08: a9:bd:79:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiI8/tHqkd5AN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk Y2ZjYjkxODMtZTg5OS00NzFmLWFhMjctZWE5ZGY0ZThiNjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPDGst4qSOY0ns4r+6J1TNA6XdFeNxUicfqM Ezhl/XjzME3+/dc/NIku29KafOTCzelFiE3jeWNyGZ4fOIfgiRxVz2oZAiN2OFA4 vCHt2IZhGYDWwLCcyXfqeIy6Skxd2ehs0CT2LpK6Ms9yw8J6+yVSMybaVzz/8ybn JEuZpPqEBK5C+It2jOBke6EeAAaZjCABXY+PEeU5JHF3i9NMrrco+wLhRl1oEkyd YBZXBYmcD3rRUpqDy7AbYtU9vSzOVB1wzsvNVvAk5lDUFpplHTjk4LtxWpzx1lrj n3PBkr0vaJo0lBQxkHVQH2Yel24XDsMBW7/J/8kvRbREF+rWPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOK8usJ84u/KWGbjPZdopzzGtehMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOWYyMzg2ODMtMTc3NS0z YThjLWI4ZTQtZjUxN2M5ZDExZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoifSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3Bu2NQGeKFmtOZtBvFMN7GOvi5U2w/nt7DSvov886Vz6XkIAUvTbMe i/yC9eMo/68h5X6T7busF3+5SEzLB1VG8I4HRwrk2qSuLya+G+6QEMwDGFMFv4T7 pyxiWXdXmsldahRciCXx9qLBxbRsRZW5LbGtu3/1MKlkLRayb0Nb77JDsMuT4wRM cFVJcy30OV4W8n4yaCwD6x4Kre1loO4EfLrWaiJp31g0KrtOkex2vmm0ROAcMG0u h0KdJmsQ6mBAKfsfiMIwDIegVKobt3r9HpbGdXhAMnlHjwUoAX+kIbiDbsmCkMaz Dss4RHH2Ok/2yiPFqy0H6MPBCKm9eYI= -----END CERTIFICATE-----Generated at Sun Jun 15 20:05:31 2025 by rpki-client