$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e2c19fc-defb-3796-a78d-c10160cf3f06.roa File: 2e2c19fc-defb-3796-a78d-c10160cf3f06.roa (raw, json) Hash identifier: qZpbYOM2/pCjBdNA1rkCUaQLv+LwePOw4b2OaMXfe4g= Subject key identifier: 8D:86:54:01:F5:4C:9D:24:BB:97:8E:BA:86:E4:7B:FF:E7:51:B3:F2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F432858496B7ECF8781BE0C74C5553800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e2c19fc-defb-3796-a78d-c10160cf3f06.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 151.213.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:cf:87:81:be:0c:74:c5:55:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=3a70abcb-9a9f-4cd2-8757-6ddbc65b1a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:82:c3:57:b4:f6:19:d6:02:ed:0c:eb:94:9f: c8:d3:13:35:4b:4c:00:09:6d:47:3d:10:ab:f3:8e: 98:2e:62:13:61:00:f8:ab:49:7a:39:25:ba:5e:4c: f1:74:5b:47:8e:89:e7:21:86:d4:56:9f:08:45:55: 3a:fc:8f:de:c4:61:c4:d0:d9:07:53:b6:09:b1:af: 5a:99:5c:ee:d4:1f:2d:89:03:69:59:75:e7:70:f5: 65:9c:ad:e1:b2:2f:e8:77:5b:13:2e:32:de:ec:06: 35:1b:3e:57:91:6e:be:1d:1b:9e:57:37:47:ba:ef: 1b:d0:aa:4d:f3:68:42:d9:ff:df:87:75:f0:b2:96: 66:c0:6c:66:22:a6:68:0f:a8:a2:62:58:3e:22:35: 7d:f8:38:8f:89:d9:06:f4:80:1a:25:d0:d8:35:f8: 0a:12:ab:3d:9a:77:72:be:f9:fc:37:ff:1f:b0:4a: 97:67:28:9a:51:e0:84:66:32:b4:1f:d7:48:46:ad: 90:d2:8e:20:bb:e1:47:01:d7:f2:16:71:38:47:a2: be:9f:f6:47:38:ca:00:51:8e:d6:7f:cf:f5:25:4c: aa:c9:93:18:b2:fe:71:22:5d:07:00:f2:8b:ff:69: 25:29:95:cf:6d:8c:02:56:57:53:c8:82:5e:f6:fe: f7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:86:54:01:F5:4C:9D:24:BB:97:8E:BA:86:E4:7B:FF:E7:51:B3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2e2c19fc-defb-3796-a78d-c10160cf3f06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:c7:45:b7:99:cf:c6:a9:53:68:c6:2d:23:86:2c:4b:30:5f: b5:50:d5:b5:72:28:0d:0c:5d:7d:b9:14:b5:4c:1c:e1:b9:4a: 6d:69:eb:99:50:b4:5f:fb:7a:87:af:2e:a7:1b:cb:d7:ff:45: 34:db:55:4a:a3:f4:27:56:cf:e1:2c:f6:77:a7:1a:d0:07:39: 7b:96:d1:63:e6:24:8c:c2:f2:6e:31:f3:8c:83:f4:ba:f5:11: 5d:4a:64:26:0b:18:28:fe:81:66:8b:4f:0b:fa:65:c0:59:fc: 73:76:5c:8b:d2:df:40:fc:2b:41:48:62:bb:1c:a9:8a:82:84: 02:9d:fa:a9:98:a7:c7:ec:b5:80:7b:90:c2:ba:06:f5:f2:ed: b7:ea:38:ff:db:8d:88:16:68:33:5d:c3:cd:a9:ad:d2:a4:26: 96:2c:db:88:e0:34:ac:62:a3:5b:7b:c6:65:b9:10:ae:42:44: a8:83:f3:ad:40:d8:ee:6e:57:a2:ac:3b:ff:4e:2b:7c:8f:bb: 15:be:22:37:82:db:ed:7f:f6:5e:16:c6:04:d7:d9:df:96:3e: 96:c5:b3:f8:9f:d6:f4:04:1b:8b:6d:bc:9b:d3:78:b4:3b:db: f1:4a:ce:c5:12:45:b7:36:17:36:52:fa:43:b4:5b:c0:90:72: b5:5e:5b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrfs+Hgb4MdMVVOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk M2E3MGFiY2ItOWE5Zi00Y2QyLTg3NTctNmRkYmM2NWIxYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4LDV7T2GdYC7QzrlJ/I0xM1S0wACW1HPRCr 846YLmITYQD4q0l6OSW6XkzxdFtHjonnIYbUVp8IRVU6/I/exGHE0NkHU7YJsa9a mVzu1B8tiQNpWXXncPVlnK3hsi/od1sTLjLe7AY1Gz5XkW6+HRueVzdHuu8b0KpN 82hC2f/fh3XwspZmwGxmIqZoD6iiYlg+IjV9+DiPidkG9IAaJdDYNfgKEqs9mndy vvn8N/8fsEqXZyiaUeCEZjK0H9dIRq2Q0o4gu+FHAdfyFnE4R6K+n/ZHOMoAUY7W f8/1JUyqyZMYsv5xIl0HAPKL/2klKZXPbYwCVldTyIJe9v73jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2GVAH1TJ0ku5eOuobke//nUbPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMmUyYzE5ZmMtZGVmYi0z Nzk2LWE3OGQtYzEwMTYwY2YzZjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXHRbeZz8apU2jGLSOGLEswX7VQ1bVyKA0MXX25FLVMHOG5Sm1p65lQ tF/7eoevLqcby9f/RTTbVUqj9CdWz+Es9nenGtAHOXuW0WPmJIzC8m4x84yD9Lr1 EV1KZCYLGCj+gWaLTwv6ZcBZ/HN2XIvS30D8K0FIYrscqYqChAKd+qmYp8fstYB7 kMK6BvXy7bfqOP/bjYgWaDNdw82prdKkJpYs24jgNKxio1t7xmW5EK5CRKiD861A 2O5uV6KsO/9OK3yPuxW+IjeC2+1/9l4WxgTX2d+WPpbFs/if1vQEG4ttvJvTeLQ7 2/FKzsUSRbc2FzZS+kO0W8CQcrVeW6I= -----END CERTIFICATE-----Generated at Sat Apr 5 20:42:27 2025 by rpki-client