$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1a89a5a-a95e-3257-8310-171b79bd382e.roa File: c1a89a5a-a95e-3257-8310-171b79bd382e.roa (raw, json) Hash identifier: HW0zByrr0KMGJW/BU4je+ounbYcKh/H+WceY8Xgap8M= Subject key identifier: DA:1D:65:AB:F2:0B:A0:0F:20:08:F5:C2:E6:6C:AB:D0:AD:6A:4B:2C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A1A63E557CE6B973A4E7F Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1a89a5a-a95e-3257-8310-171b79bd382e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 216.43.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:1a:63:e5:57:ce:6b:97:3a:4e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e935c057-21f0-436c-8bb4-ed1a7eade660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:37:ff:e3:80:4d:6d:3a:90:03:09:d7:02:fa: a5:8b:79:a4:44:b0:82:c9:0f:3d:a5:c6:a8:52:86: 1f:7e:80:b3:0c:2d:7f:09:90:6b:49:b1:2b:a3:e1: 9b:7d:24:a8:d8:88:c0:36:8f:fb:9e:b7:3d:13:8f: 37:87:a0:b7:66:dd:3e:dd:42:e1:1a:e7:19:ec:fa: b0:1d:4c:27:12:5a:de:bf:b5:c3:53:59:65:79:e7: ac:06:06:f0:6b:7e:2b:37:ab:a1:9c:0b:f1:95:f1: 79:85:1d:31:5a:da:85:88:6e:b4:75:18:28:ec:65: c0:2d:73:1c:76:53:5b:15:59:32:8f:1f:6a:ae:d1: 75:b3:5a:95:ec:cb:7a:62:48:5d:21:26:20:34:e2: 9b:b3:7c:03:0a:d7:96:95:09:92:02:77:4e:35:90: 44:ba:32:d8:b1:23:f0:4c:da:5f:c6:3a:20:0e:49: 66:67:bc:7e:32:17:f4:e8:d4:10:b6:4d:95:12:ff: 1c:8b:56:bf:02:54:3b:16:29:ec:e8:04:e8:ef:25: ed:f8:1f:cc:9b:92:65:da:eb:8b:64:7c:b2:a7:a7: c6:bd:57:e0:12:88:b2:99:1a:a4:81:99:3f:dc:c0: 8b:12:9a:11:59:f1:1b:d7:c8:e8:41:79:6f:0c:65: f8:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1D:65:AB:F2:0B:A0:0F:20:08:F5:C2:E6:6C:AB:D0:AD:6A:4B:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c1a89a5a-a95e-3257-8310-171b79bd382e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 216.43.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e7:2b:7e:6c:d2:bd:be:f4:eb:0d:d1:98:b7:a3:f3:a3:bc: f1:78:98:dd:88:14:66:75:81:f5:3c:fa:ab:11:ea:29:77:20: e6:5b:90:67:cc:2c:a8:87:22:58:68:e6:70:99:a2:f1:df:6b: 7b:d8:c3:3a:4e:1b:2a:72:e1:37:1d:95:b1:9e:72:c3:8e:3d: c4:42:7e:2b:c8:d8:7a:46:a3:e0:e2:94:16:50:4a:89:24:ce: 1b:fc:7b:32:d6:f6:97:6d:62:10:70:e1:2e:89:8b:b9:d6:d7: 1e:b9:0d:fd:93:d7:33:87:3d:6b:6c:e4:01:bb:f4:0d:4e:f7: f8:00:b8:1a:50:c7:71:c7:8b:36:04:97:cb:b7:bd:75:30:eb: 1b:b6:06:e7:9b:8d:47:51:69:1a:30:74:69:db:07:dd:a0:31: c9:a9:13:34:f2:2f:2a:c4:fb:fa:ee:ee:cf:73:a6:4f:7d:80: 08:32:64:20:7e:1a:ef:e2:06:cf:bb:47:1e:9e:ee:42:35:6e: da:4e:32:72:4f:a2:f8:06:bb:c4:a6:44:07:81:e0:31:ed:64: d6:39:d9:40:8a:ed:a8:5d:35:f8:32:09:43:7d:b9:05:b4:50: 06:83:e0:f4:77:da:f3:90:db:db:c8:4d:2c:d7:98:cd:61:2d: 4b:45:cf:fe -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShpj5VfOa5c6Tn8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTkzNWMwNTctMjFmMC00MzZjLThiYjQtZWQxYTdlYWRlNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDf/44BNbTqQAwnXAvqli3mkRLCCyQ89pcao UoYffoCzDC1/CZBrSbEro+GbfSSo2IjANo/7nrc9E483h6C3Zt0+3ULhGucZ7Pqw HUwnElrev7XDU1lleeesBgbwa34rN6uhnAvxlfF5hR0xWtqFiG60dRgo7GXALXMc dlNbFVkyjx9qrtF1s1qV7Mt6YkhdISYgNOKbs3wDCteWlQmSAndONZBEujLYsSPw TNpfxjogDklmZ7x+Mhf06NQQtk2VEv8ci1a/AlQ7Fins6ATo7yXt+B/Mm5Jl2uuL ZHyyp6fGvVfgEoiymRqkgZk/3MCLEpoRWfEb18joQXlvDGX4NQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNodZavyC6APIAj1wuZsq9CtakssMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzFhODlhNWEtYTk1ZS0z MjU3LTgzMTAtMTcxYjc5YmQzODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2CswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABOcrfmzSvb706w3RmLej86O88XiY3YgUZnWB9Tz6qxHqKXcg5luQZ8ws qIciWGjmcJmi8d9re9jDOk4bKnLhNx2VsZ5yw449xEJ+K8jYekaj4OKUFlBKiSTO G/x7Mtb2l21iEHDhLomLudbXHrkN/ZPXM4c9a2zkAbv0DU73+AC4GlDHcceLNgSX y7e9dTDrG7YG55uNR1FpGjB0adsH3aAxyakTNPIvKsT7+u7uz3OmT32ACDJkIH4a 7+IGz7tHHp7uQjVu2k4yck+i+Aa7xKZEB4HgMe1k1jnZQIrtqF01+DIJQ325BbRQ BoPg9Hfa85Db28hNLNeYzWEtS0XP/g== -----END CERTIFICATE-----Generated at Sun Jun 15 11:40:55 2025 by rpki-client