$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9858869-a66f-3fd5-9247-1cdb76be8f43.roa File: f9858869-a66f-3fd5-9247-1cdb76be8f43.roa (raw, json) Hash identifier: fOtAkdc7UcHY0sqHSWzlCa6ZB1ijFrJ2N+rRySx/70M= Subject key identifier: 14:F4:4F:D9:5A:06:DF:92:47:87:DB:45:6F:CB:73:63:F2:FA:C0:D7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3CA58439CDF7E8E80E80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9858869-a66f-3fd5-9247-1cdb76be8f43.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.196.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3c:a5:84:39:cd:f7:e8:e8:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=cbb01c13-a777-4072-bd02-48385a7fb640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4b:0f:36:ab:0d:04:a3:0f:82:7a:05:c7:a8: 66:3c:28:53:78:08:b5:68:18:de:93:54:f7:74:a4: f4:e5:60:43:c5:78:8b:32:56:7e:c7:81:32:d0:dc: 10:c5:65:45:75:9b:2b:a6:26:c6:45:4b:8c:62:08: 53:88:be:c0:34:ce:fc:9f:db:c8:b1:19:c8:e3:86: d1:ab:09:8b:cf:4c:3f:9e:90:41:30:b0:6a:28:13: a1:7a:e8:64:4e:5d:84:66:7f:1a:d0:1c:8f:5a:d0: 0b:2d:36:15:32:01:40:3d:1c:34:32:a7:11:07:93: a6:b6:59:86:cf:4d:97:17:8b:44:f5:e3:10:d5:b1: e3:7c:49:72:ef:1f:7f:ce:8e:8a:be:14:5c:08:27: 42:e4:f3:4a:80:c6:22:60:5d:46:c4:a9:49:51:f5: ef:20:74:57:0b:47:00:61:29:a1:19:c8:2e:ce:45: 7a:43:2e:18:f6:f7:5a:b1:36:5a:18:14:ac:9c:b1: 10:82:c4:cb:bd:ae:47:6b:ac:7c:63:4f:1f:53:5e: a2:aa:b1:91:81:0d:27:20:bc:24:16:95:c9:3a:84: 13:f0:d5:a4:9e:d0:58:cf:75:cd:66:6a:4e:3c:a0: 29:7b:39:a9:70:6d:5e:76:a8:c8:11:e7:a4:28:93: ae:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F4:4F:D9:5A:06:DF:92:47:87:DB:45:6F:CB:73:63:F2:FA:C0:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f9858869-a66f-3fd5-9247-1cdb76be8f43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.196.192.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c1:af:d7:9b:d0:d8:69:b9:97:f3:aa:a9:d0:8f:97:02:cd: 9f:60:53:83:8a:5a:9f:32:3f:8f:0d:43:31:99:41:98:7a:b4: 07:9b:68:48:48:91:dc:7a:6e:40:40:f3:fe:83:d7:50:61:f5: 6b:70:31:11:01:fb:1c:e5:be:f6:8e:f4:a9:e4:35:d1:e7:04: fa:bf:d1:da:c1:24:88:a9:c9:38:91:2f:25:4a:1e:68:dc:e0: d1:e0:03:41:40:e3:4d:0d:73:7d:b1:10:41:65:0d:92:82:e6: ed:ed:c6:5d:8a:0d:9b:72:5b:36:00:d7:aa:42:43:04:ea:7b: 28:fa:e1:a9:02:c4:73:67:36:90:d5:5b:dd:2f:4f:dc:8d:79: 80:fd:d8:ee:6b:23:06:f6:1b:3d:02:08:c3:19:a1:ab:64:13: 04:ab:f0:fb:dd:16:0b:bf:83:a1:33:78:09:6f:7e:c1:6b:6d: 25:3b:5a:69:3f:f6:c1:e8:f0:ba:9a:3d:f7:a9:6e:9b:3e:0d: b3:8d:4e:2f:e9:04:b4:e5:cc:6f:6b:f6:dd:d4:5b:30:92:cf: c6:a8:f2:f6:93:89:b3:21:9d:ff:0f:d3:de:b5:bd:94:a7:2a: ee:c1:d5:35:41:34:49:33:60:95:da:18:89:4f:e9:7b:6d:9c: e5:20:e4:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjylhDnN9+joDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2JiMDFjMTMtYTc3Ny00MDcyLWJkMDItNDgzODVhN2ZiNjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEsPNqsNBKMPgnoFx6hmPChTeAi1aBjek1T3 dKT05WBDxXiLMlZ+x4Ey0NwQxWVFdZsrpibGRUuMYghTiL7ANM78n9vIsRnI44bR qwmLz0w/npBBMLBqKBOheuhkTl2EZn8a0ByPWtALLTYVMgFAPRw0MqcRB5OmtlmG z02XF4tE9eMQ1bHjfEly7x9/zo6KvhRcCCdC5PNKgMYiYF1GxKlJUfXvIHRXC0cA YSmhGcguzkV6Qy4Y9vdasTZaGBSsnLEQgsTLva5Ha6x8Y08fU16iqrGRgQ0nILwk FpXJOoQT8NWkntBYz3XNZmpOPKApezmpcG1edqjIEeekKJOuDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT0T9laBt+SR4fbRW/Lc2Py+sDXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjk4NTg4NjktYTY2Zi0z ZmQ1LTkyNDctMWNkYjc2YmU4ZjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRcTAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Br9eb0NhpuZfzqqnQj5cCzZ9gU4OKWp8yP48NQzGZQZh6tAebaEhI kdx6bkBA8/6D11Bh9WtwMREB+xzlvvaO9KnkNdHnBPq/0drBJIipyTiRLyVKHmjc 4NHgA0FA400Nc32xEEFlDZKC5u3txl2KDZtyWzYA16pCQwTqeyj64akCxHNnNpDV W90vT9yNeYD92O5rIwb2Gz0CCMMZoatkEwSr8PvdFgu/g6EzeAlvfsFrbSU7Wmk/ 9sHo8LqaPfepbps+DbONTi/pBLTlzG9r9t3UWzCSz8ao8vaTibMhnf8P0961vZSn Ku7B1TVBNEkzYJXaGIlP6XttnOUg5NM= -----END CERTIFICATE-----Generated at Sun Jun 15 18:53:32 2025 by rpki-client