$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa File: afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa (raw, json) Hash identifier: 1BW8ibzht00xyTAl1Lea374gJCV1U++sI7CHgzPlj+Q= Subject key identifier: 3E:F9:5E:9B:2E:0A:5F:84:67:C3:8B:5B:E7:A8:C0:06:97:60:19:74 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A394BE2A5F7B9456314C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 63.246.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:39:4b:e2:a5:f7:b9:45:63:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d228e1e8-6b39-455e-8d30-713f15e6273e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:ca:fa:d3:47:da:93:0d:15:88:42:a2:b3: 0a:4b:ae:ab:9e:78:e2:bc:4c:84:6a:f3:84:3e:f6: 92:52:58:76:3a:6d:2e:17:28:44:fc:ad:8c:ca:08: 66:08:10:04:b5:7f:b0:ae:8c:b4:e2:31:cd:96:a6: ca:5c:85:c8:38:e3:f7:16:cd:31:94:ea:35:a5:69: 29:2e:22:b6:69:f4:f3:80:b9:5b:2c:a8:f2:66:2b: cc:2c:55:1f:4b:18:7e:af:00:78:7f:50:40:dd:53: f6:82:19:8b:8f:1f:88:b8:09:8b:a5:29:92:c4:94: 35:ac:e5:26:25:fd:6c:5a:d5:00:dc:db:95:cf:7f: d0:e1:b2:3b:e2:32:ed:d6:99:69:a5:1e:3c:9e:55: 3c:07:db:33:ce:9f:71:f6:19:74:3a:24:da:bd:ac: 5d:8d:bc:57:3e:26:61:17:21:9a:78:5b:88:78:0c: bd:d1:f8:44:2d:d7:54:fa:bf:2f:17:97:80:f8:bf: 3d:1e:4c:36:3a:de:20:ba:96:8e:be:5d:c6:f5:10: 1c:0a:81:33:c0:93:03:58:81:27:0f:e6:2b:bc:fe: 42:b8:32:34:b8:39:e8:1c:e7:03:aa:ec:f9:e6:63: 71:4c:94:8e:28:0e:50:c1:37:b2:d1:ee:ed:c1:cd: 85:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:F9:5E:9B:2E:0A:5F:84:67:C3:8B:5B:E7:A8:C0:06:97:60:19:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/afbd72a2-a1c5-3aac-aa05-7b34f2ce8b61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 63.246.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:e7:c5:ea:c1:9c:c4:a1:7a:bf:a5:25:3f:ce:21:27:0d:f2: 58:f1:b3:70:29:40:b2:41:f5:26:c4:ab:c5:b2:27:e3:c6:13: 1a:ef:cf:99:ee:54:ca:f9:da:09:51:51:e5:8e:02:05:15:82: 54:27:21:d6:5d:86:e9:8b:75:57:2a:b2:34:89:af:d2:a4:fb: ec:d2:09:1b:7b:6d:15:0f:5c:9d:99:69:ea:bf:60:31:54:fb: 1c:cb:4f:15:4b:16:f3:4c:6e:38:32:45:24:84:25:62:eb:97: 11:fa:ae:c1:d9:a9:6a:d8:61:e0:de:e5:63:a9:49:be:73:f0: 19:51:81:53:08:b0:01:5f:61:a9:af:da:f8:1d:3d:e0:07:be: 3b:74:5b:f0:f1:bb:0e:37:8b:a2:41:9b:4a:25:7d:36:ad:06: e9:7c:db:47:fa:a2:60:6d:a8:5a:0a:28:47:fd:86:e8:0d:c6: 58:19:fc:cb:91:6a:10:84:4a:02:fd:6d:40:f0:35:ac:61:09: da:56:ed:a5:1a:8d:b3:fd:eb:30:13:46:8f:f6:73:f6:bc:6e: a3:e9:14:aa:01:08:84:e4:2a:38:1c:07:8e:fb:b1:f0:f6:e1: f6:bb:42:b7:80:c8:fc:a4:ce:04:af:48:cc:e3:e0:29:33:b2: db:1a:21:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjlL4qX3uUVjFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDIyOGUxZTgtNmIzOS00NTVlLThkMzAtNzEzZjE1ZTYyNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDzK+tNH2pMNFYhCorMKS66rnnjivEyEavOE PvaSUlh2Om0uFyhE/K2MyghmCBAEtX+wroy04jHNlqbKXIXIOOP3Fs0xlOo1pWkp LiK2afTzgLlbLKjyZivMLFUfSxh+rwB4f1BA3VP2ghmLjx+IuAmLpSmSxJQ1rOUm Jf1sWtUA3NuVz3/Q4bI74jLt1plppR48nlU8B9szzp9x9hl0OiTavaxdjbxXPiZh FyGaeFuIeAy90fhELddU+r8vF5eA+L89Hkw2Ot4gupaOvl3G9RAcCoEzwJMDWIEn D+YrvP5CuDI0uDnoHOcDquz55mNxTJSOKA5QwTey0e7twc2F9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD75XpsuCl+EZ8OLW+eowAaXYBl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWZiZDcyYTItYTFjNS0z YWFjLWFhMDUtN2IzNGYyY2U4YjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFP/ZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjnxerBnMSher+lJT/OIScN8ljxs3ApQLJB9SbEq8WyJ+PGExrvz5nu VMr52glRUeWOAgUVglQnIdZdhumLdVcqsjSJr9Kk++zSCRt7bRUPXJ2Zaeq/YDFU +xzLTxVLFvNMbjgyRSSEJWLrlxH6rsHZqWrYYeDe5WOpSb5z8BlRgVMIsAFfYamv 2vgdPeAHvjt0W/Dxuw43i6JBm0olfTatBul820f6omBtqFoKKEf9hugNxlgZ/MuR ahCESgL9bUDwNaxhCdpW7aUajbP96zATRo/2c/a8bqPpFKoBCITkKjgcB477sfD2 4fa7QreAyPykzgSvSMzj4CkzstsaId4= -----END CERTIFICATE-----Generated at Sun Jun 15 11:33:35 2025 by rpki-client