$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26fc12ff-2991-3ce1-b711-697bdca04b9c.roa File: 26fc12ff-2991-3ce1-b711-697bdca04b9c.roa (raw, json) Hash identifier: Y0BLoPho1b37uU8vR6W5ejzLxPS+gJi67QV4CYjjTWg= Subject key identifier: D0:3A:77:9B:36:D0:CC:AF:90:D4:56:DE:58:D2:A1:DF:74:F5:B4:79 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A441C64C7E19DB12573C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26fc12ff-2991-3ce1-b711-697bdca04b9c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.125.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:44:1c:64:c7:e1:9d:b1:25:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=770780d2-85bd-4575-8fe6-9da92fea7c22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:38:5e:6f:98:e1:77:d2:b3:e8:69:1e:c6:2f: 09:2e:3b:c3:54:94:f9:de:05:55:25:81:e3:af:f1: d5:72:b3:89:60:d7:77:e8:78:0f:a8:bd:d0:11:1e: 63:d5:e5:88:fd:12:71:b0:2c:20:f2:09:13:96:6b: 99:0a:72:c8:8e:09:f1:f1:50:a9:05:66:35:0a:69: 9b:f1:74:15:28:96:fa:10:0f:67:f5:dd:bd:8d:8f: 9d:d6:cb:5e:ce:7e:ff:40:66:ae:3e:27:8d:01:8c: 32:c5:25:be:ec:c3:ef:77:07:1f:f7:bf:ed:5e:02: d6:91:13:e1:a0:7c:78:83:02:46:eb:4c:71:dc:52: 92:85:b2:b0:fd:91:89:59:de:65:53:99:e4:4e:ee: 8a:a1:2e:3f:91:fa:5a:7e:59:d0:9e:3c:d4:ec:fe: 93:a3:a5:87:ff:da:2a:2d:21:52:5b:69:e8:bd:69: 7a:8e:73:ef:45:3b:62:eb:61:26:48:f4:e3:94:ca: e7:d4:f7:f8:41:24:20:da:33:05:9a:76:3f:0f:b5: 42:19:39:db:34:b9:ca:53:53:6b:8c:db:b7:dd:00: 15:f8:2e:14:f2:63:d6:41:37:0b:f6:63:20:57:c7: 48:25:d0:cf:9f:69:1a:c8:53:01:3c:c3:bb:88:b6: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3A:77:9B:36:D0:CC:AF:90:D4:56:DE:58:D2:A1:DF:74:F5:B4:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/26fc12ff-2991-3ce1-b711-697bdca04b9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.125.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:c6:ec:ae:33:ff:e7:aa:53:bf:3a:9f:6d:56:d5:15:a3:36: b4:63:21:b7:23:72:80:c0:ee:fc:40:5a:3d:01:32:cc:df:71: dc:66:34:5c:fa:73:6b:66:6b:5e:8f:e6:43:67:27:99:2b:28: 51:fb:a4:4c:dc:34:d1:e1:77:71:fe:3f:aa:3b:dd:e4:49:ed: 57:24:df:60:28:6b:80:52:4e:8f:41:31:fd:8a:35:4a:b6:98: 9d:a8:29:5e:e8:00:bf:27:8c:35:28:5e:fa:4d:4c:58:29:5e: e9:4f:15:0a:54:d1:5c:8a:ab:1f:67:04:a3:85:15:f7:be:3f: fb:82:77:09:c7:92:e9:87:ae:20:80:7b:31:63:1a:0b:62:1e: c7:14:9c:dd:f4:be:c4:78:d8:d0:9c:d0:b7:98:d8:d5:dd:cd: aa:b8:40:bb:e5:ee:27:33:92:71:85:e4:13:35:4e:2e:00:87: 51:ae:9c:3f:26:b8:bd:24:0d:8d:be:32:16:6c:3f:05:08:2b: b9:55:5c:80:25:ce:6a:ac:b8:55:d1:8a:c4:d7:11:d4:c2:12: 50:dd:39:4e:9b:97:cc:8e:bf:d0:f5:81:31:73:9e:09:7b:3e: 87:af:04:bd:02:ca:cc:8b:82:b1:cb:5f:47:ae:cd:ba:8a:e1: c7:cb:10:ff -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSkQcZMfhnbElc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NzcwNzgwZDItODViZC00NTc1LThmZTYtOWRhOTJmZWE3YzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTheb5jhd9Kz6Gkexi8JLjvDVJT53gVVJYHj r/HVcrOJYNd36HgPqL3QER5j1eWI/RJxsCwg8gkTlmuZCnLIjgnx8VCpBWY1Cmmb 8XQVKJb6EA9n9d29jY+d1stezn7/QGauPieNAYwyxSW+7MPvdwcf97/tXgLWkRPh oHx4gwJG60xx3FKShbKw/ZGJWd5lU5nkTu6KoS4/kfpaflnQnjzU7P6To6WH/9oq LSFSW2novWl6jnPvRTti62EmSPTjlMrn1Pf4QSQg2jMFmnY/D7VCGTnbNLnKU1Nr jNu33QAV+C4U8mPWQTcL9mMgV8dIJdDPn2kayFMBPMO7iLZIswIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNA6d5s20MyvkNRW3ljSod909bR5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjZmYzEyZmYtMjk5MS0z Y2UxLWI3MTEtNjk3YmRjYTA0YjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0X0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAIMbsrjP/56pTvzqfbVbVFaM2tGMhtyNygMDu/EBaPQEyzN9x3GY0XPpz a2ZrXo/mQ2cnmSsoUfukTNw00eF3cf4/qjvd5EntVyTfYChrgFJOj0Ex/Yo1SraY nagpXugAvyeMNShe+k1MWCle6U8VClTRXIqrH2cEo4UV974/+4J3CceS6YeuIIB7 MWMaC2IexxSc3fS+xHjY0JzQt5jY1d3NqrhAu+XuJzOScYXkEzVOLgCHUa6cPya4 vSQNjb4yFmw/BQgruVVcgCXOaqy4VdGKxNcR1MISUN05TpuXzI6/0PWBMXOeCXs+ h68EvQLKzIuCsctfR67Nuorhx8sQ/w== -----END CERTIFICATE-----Generated at Sat May 10 10:37:35 2025 by rpki-client