$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa File: 64ac9497-103c-301c-a483-d5e403daa85e.roa (raw, json) Hash identifier: xM9NDtzab+QJLLt30DOA7mR9DtEK8F6siO6WUrRL/cY= Subject key identifier: 4F:D9:37:20:8F:B8:82:85:AB:CD:AD:68:12:D5:8C:23:15:1C:60:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584957F4112FAD46BE19DB6B7500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 7029 IP address blocks: 151.213.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:11:2f:ad:46:be:19:db:6b:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=09b36c86-c236-4d1b-8106-1227cfbe3517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ad:0b:ca:71:e0:eb:07:5c:34:14:9b:b2:59: 81:dd:35:bd:13:97:4b:ca:4f:c1:8b:8c:56:cf:cc: 57:2c:c3:23:88:1e:37:84:d3:6f:4f:d1:4d:51:44: 89:73:4b:34:0e:c8:3b:11:30:9b:23:c3:30:f9:73: 9a:1c:4c:bd:51:be:ec:60:e3:cd:b8:00:d5:2d:44: 37:55:af:08:d3:ba:20:20:b7:e6:66:c5:87:cc:b8: 63:e9:d1:4e:99:de:f1:07:03:51:07:13:18:b9:af: a4:0b:35:b9:af:bd:9a:57:0e:5d:c2:2c:b4:6f:40: 82:ad:5c:23:56:57:65:ae:5a:4b:ce:01:bf:49:1e: 3e:c9:35:86:47:52:94:ae:64:68:e0:fb:43:22:fa: 20:e8:0c:20:2e:dc:a8:31:77:dd:16:ae:b1:32:9d: 96:98:c4:61:8d:4e:76:25:42:b3:9b:e3:6d:94:01: 05:34:64:4c:9b:b4:7c:51:d7:48:a6:9f:f9:70:71: 8b:a1:b7:d3:b6:e9:78:61:c2:1d:6d:7a:69:8f:29: df:f1:95:38:6a:47:46:32:ca:d6:d1:bf:8a:bf:b4: 0a:39:23:b3:cb:90:e0:c1:5e:3f:20:2c:50:6d:05: 86:cd:dd:34:59:88:0a:f3:66:58:44:c1:bb:5f:ab: 97:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D9:37:20:8F:B8:82:85:AB:CD:AD:68:12:D5:8C:23:15:1C:60:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:91:4e:34:a1:cc:45:4a:3b:09:1f:32:6d:a4:38:75:49:65: c2:80:0e:97:5e:f3:c4:4d:49:7b:07:8b:00:28:90:5b:3b:3b: 09:6a:e5:e9:58:e0:1f:7b:7f:2f:e9:e9:1e:9a:64:15:b8:fe: ef:fb:dd:69:bb:d1:b2:71:ed:99:7e:6a:a6:d2:0b:c0:c8:40: f6:19:a8:24:58:db:91:1c:d9:4b:b4:c1:8a:fd:39:5a:27:86: 3d:3a:2c:83:71:65:3d:11:ec:db:16:8c:b4:be:cc:cf:21:11: 46:4f:3d:a6:e7:c4:c4:dc:ec:79:56:27:58:91:d5:14:44:98: 96:75:d7:57:92:28:1a:0c:b5:23:cb:80:42:fd:09:31:a4:76: 8c:bb:63:88:02:4c:28:46:f7:72:be:16:dc:29:8e:46:3e:19: fd:22:4d:e8:ab:fc:82:17:37:66:b4:61:a4:d4:06:1a:ba:29: 29:86:92:f5:65:7c:22:7e:2b:26:4f:d8:c2:a1:a8:71:03:ab: fb:0c:ae:a8:60:34:2b:47:bd:e3:44:e4:ff:4d:1e:7e:1f:5a: 35:45:4a:ef:ae:30:8a:ff:98:d0:f1:84:7d:96:ef:d4:a7:3e: cb:12:65:9c:cf:20:cc:8e:c5:4a:21:03:49:cd:4e:15:5d:9e: dd:9d:ec:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX9BEvrUa+GdtrdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MDliMzZjODYtYzIzNi00ZDFiLTgxMDYtMTIyN2NmYmUzNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa0LynHg6wdcNBSbslmB3TW9E5dLyk/Bi4xW z8xXLMMjiB43hNNvT9FNUUSJc0s0Dsg7ETCbI8Mw+XOaHEy9Ub7sYOPNuADVLUQ3 Va8I07ogILfmZsWHzLhj6dFOmd7xBwNRBxMYua+kCzW5r72aVw5dwiy0b0CCrVwj VldlrlpLzgG/SR4+yTWGR1KUrmRo4PtDIvog6AwgLtyoMXfdFq6xMp2WmMRhjU52 JUKzm+NtlAEFNGRMm7R8UddIpp/5cHGLobfTtul4YcIdbXppjynf8ZU4akdGMsrW 0b+Kv7QKOSOzy5DgwV4/ICxQbQWGzd00WYgK82ZYRMG7X6uX7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/ZNyCPuIKFq82taBLVjCMVHGBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRhYzk0OTctMTAzYy0z MDFjLWE0ODMtZDVlNDAzZGFhODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWRTjShzEVKOwkfMm2kOHVJZcKADpde88RNSXsHiwAokFs7Owlq5elY 4B97fy/p6R6aZBW4/u/73Wm70bJx7Zl+aqbSC8DIQPYZqCRY25Ec2Uu0wYr9OVon hj06LINxZT0R7NsWjLS+zM8hEUZPPabnxMTc7HlWJ1iR1RREmJZ111eSKBoMtSPL gEL9CTGkdoy7Y4gCTChG93K+FtwpjkY+Gf0iTeir/IIXN2a0YaTUBhq6KSmGkvVl fCJ+KyZP2MKhqHEDq/sMrqhgNCtHveNE5P9NHn4fWjVFSu+uMIr/mNDxhH2W79Sn PssSZZzPIMyOxUohA0nNThVdnt2d7P4= -----END CERTIFICATE-----Generated at Sat Apr 5 18:27:11 2025 by rpki-client