$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa File: 1ec27b64-b946-30a2-a82f-7c536af28e32.roa (raw, json) Hash identifier: p8IOUDz0+W6yxwgct96+kLwxeqvI0CBW009J9Ti7VSk= Subject key identifier: 6F:6C:8C:05:25:43:6F:35:7E:56:3B:70:83:3B:C7:02:63:DE:32:A7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A130E18E67217159A5480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.40.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:13:0e:18:e6:72:17:15:9a:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d9b93956-1fd4-42ac-972c-2a8b950005f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:14:11:0e:97:fa:a6:04:fd:24:6f:61:88:1b: c2:7e:1b:0d:8e:72:9f:b1:89:e8:68:a8:92:c3:c2: 6a:59:94:b7:77:2f:7f:fc:a7:d3:42:47:7a:1d:81: 61:d2:37:1b:86:7d:c9:e2:ef:8f:cc:91:8f:f0:fa: 3f:46:36:5b:9a:64:9f:7a:d7:9a:f6:4a:21:0f:e6: c8:ac:5b:53:d4:ad:33:87:8e:ec:e7:38:ec:d5:d5: 4b:95:ff:23:e8:c4:be:b8:e5:74:9c:a6:de:07:bd: a0:3e:23:30:e7:9a:21:1b:c2:fa:85:d1:65:10:94: 15:1b:e5:be:d2:75:15:e4:57:31:3e:c0:8d:b2:97: 17:7b:e7:84:46:dd:09:66:11:0d:9d:78:6e:19:1f: f7:5d:b3:cb:bd:de:80:9f:7c:3a:48:07:c1:23:f8: 12:22:7a:f2:12:3d:1c:7c:6f:8a:ee:3f:07:86:9a: 57:d0:3b:a6:67:b2:29:55:a3:b1:6c:8b:7a:e4:84: f5:6b:96:86:be:86:a2:bc:81:54:e1:04:bb:91:81: 5f:62:ca:9d:46:6c:d5:0c:0c:67:64:80:82:5d:73: d7:8b:03:62:59:4f:c5:a8:ca:14:03:6a:b7:b6:cf: f7:d5:20:51:ab:04:b0:1a:3f:a1:3a:60:16:1b:ea: 99:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6C:8C:05:25:43:6F:35:7E:56:3B:70:83:3B:C7:02:63:DE:32:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1ec27b64-b946-30a2-a82f-7c536af28e32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:02:af:b0:02:85:32:70:28:b5:01:f1:b8:ff:4c:66:81:67: f7:ea:2c:ee:bd:24:c2:03:59:05:5f:8c:59:2b:80:dd:79:46: ef:bb:60:c5:0e:dd:31:56:b9:cd:0a:47:7f:cb:a6:f7:44:14: 39:ab:65:0f:db:98:a9:f4:3b:7b:cf:d7:5a:be:ee:b3:5f:a9: fd:5f:68:6d:e8:db:de:2e:d4:44:c0:59:18:02:22:40:46:a0: 2c:36:dd:dd:46:b1:47:8f:0d:93:e7:f5:fa:78:0c:ed:6f:a4: 04:c6:78:d9:bc:89:31:c0:97:3f:9f:7d:8d:98:5f:7a:79:9b: 41:d4:d2:b8:6f:6b:a1:77:88:7a:31:32:21:46:16:83:fb:2d: 98:a2:b7:4e:fd:c9:b5:12:44:50:bc:1a:17:c1:5b:f6:0f:93: f5:c3:c5:37:1c:4e:41:78:48:2b:9e:89:cc:44:19:f2:e0:84: 28:f3:63:a2:3a:be:be:c2:b2:a2:6a:74:c3:dc:ae:55:39:0f: bf:2d:9a:d2:4f:a4:1d:62:7c:c3:2b:ac:06:d3:50:13:12:24: 1a:22:03:b7:7b:70:07:ca:5e:ac:f7:55:7b:c8:18:6c:96:c9: c6:79:32:6f:61:d8:0d:50:46:88:25:5d:ac:78:76:d5:b2:c3: 12:c7:2c:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShMOGOZyFxWaVIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDliOTM5NTYtMWZkNC00MmFjLTk3MmMtMmE4Yjk1MDAwNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xQRDpf6pgT9JG9hiBvCfhsNjnKfsYnoaKiS w8JqWZS3dy9//KfTQkd6HYFh0jcbhn3J4u+PzJGP8Po/RjZbmmSfetea9kohD+bI rFtT1K0zh47s5zjs1dVLlf8j6MS+uOV0nKbeB72gPiMw55ohG8L6hdFlEJQVG+W+ 0nUV5FcxPsCNspcXe+eERt0JZhENnXhuGR/3XbPLvd6An3w6SAfBI/gSInryEj0c fG+K7j8HhppX0DumZ7IpVaOxbIt65IT1a5aGvoaivIFU4QS7kYFfYsqdRmzVDAxn ZICCXXPXiwNiWU/FqMoUA2q3ts/31SBRqwSwGj+hOmAWG+qZAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG9sjAUlQ281flY7cIM7xwJj3jKnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWVjMjdiNjQtYjk0Ni0z MGEyLWE4MmYtN2M1MzZhZjI4ZTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHRSgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGACr7AChTJwKLUB8bj/TGaBZ/fqLO69JMIDWQVfjFkrgN15Ru+7YMUO 3TFWuc0KR3/LpvdEFDmrZQ/bmKn0O3vP11q+7rNfqf1faG3o294u1ETAWRgCIkBG oCw23d1GsUePDZPn9fp4DO1vpATGeNm8iTHAlz+ffY2YX3p5m0HU0rhva6F3iHox MiFGFoP7LZiit079ybUSRFC8GhfBW/YPk/XDxTccTkF4SCueicxEGfLghCjzY6I6 vr7CsqJqdMPcrlU5D78tmtJPpB1ifMMrrAbTUBMSJBoiA7d7cAfKXqz3VXvIGGyW ycZ5Mm9h2A1QRoglXax4dtWywxLHLPU= -----END CERTIFICATE-----Generated at Wed May 7 22:08:03 2025 by rpki-client