$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa File: 27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa (raw, json) Hash identifier: jMlUN2t7o1J7nq0Fn6LQ8xxyWEniNOZVAwKuUOYgdAg= Subject key identifier: 89:C3:DC:6E:52:2C:54:71:A4:5A:F5:19:22:05:5B:6B:00:C4:B8:2F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3DA3B75CEBF0E396E570 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 74.223.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:a3:b7:5c:eb:f0:e3:96:e5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f422b200-9e77-46c4-a79a-2a787224efae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:f7:47:f6:f2:d5:a5:fd:6d:c2:f5:70:51: e1:d8:f1:b1:a2:00:bc:46:aa:56:f2:d1:a9:57:12: e8:f3:ba:67:68:49:ce:82:db:b3:ff:35:79:fe:f3: 7f:a5:6f:17:f1:c2:a7:91:9c:bb:36:99:11:9c:34: f5:a6:1a:37:60:b7:bc:33:b2:ef:22:22:b4:9b:ac: 2a:8e:dc:25:fe:1b:89:06:cf:2f:5d:91:8c:35:62: 80:09:12:c3:a7:e1:ab:cb:db:af:db:7d:53:4b:d6: c7:08:1b:93:12:73:dc:1c:29:04:87:96:46:24:93: e5:35:db:1f:1e:c6:48:2b:a8:de:71:d9:59:b5:68: 0e:80:f7:62:69:5f:29:e4:1f:3f:e1:fb:78:b1:e7: fb:63:22:c1:fd:88:8c:19:e7:20:b7:ea:ba:32:58: a0:55:74:7e:00:f9:10:d6:be:86:29:c4:4b:b4:61: 97:a5:24:f1:3d:a2:c1:91:72:a4:a0:41:4a:eb:c0: 3b:93:08:c5:85:49:e3:06:3d:b4:40:30:42:7e:f7: 35:e4:27:0c:be:23:98:1b:14:7a:c2:71:37:e2:26: a7:4a:ce:e2:67:58:f7:b7:e0:85:d4:a3:7f:61:79: 05:fe:9d:61:49:8d:84:31:1f:92:06:2b:dc:7e:fa: 24:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C3:DC:6E:52:2C:54:71:A4:5A:F5:19:22:05:5B:6B:00:C4:B8:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/27e533f4-79bc-3c7f-8af9-11456e61ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.223.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:77:dd:f6:6f:1d:21:9d:2e:58:17:4d:01:2a:5e:ef:89:fc: 81:3e:90:62:8e:f8:0e:df:bd:c5:74:67:6e:26:e0:06:e8:bb: 79:4a:f3:f7:28:5b:b3:c8:28:dc:b8:25:3f:78:24:60:0a:18: 71:3c:40:12:08:16:97:3a:c6:fe:9f:5a:f2:b4:5e:36:0e:31: 32:70:bb:b7:ab:b6:8e:2b:76:81:f1:68:f2:04:91:4c:83:55: 51:69:f1:c6:2e:b8:85:23:c2:56:7b:97:41:56:30:6a:08:db: 9b:29:37:bf:5d:ea:ac:a7:47:c5:47:f3:b4:b0:53:78:0e:25: 6c:a6:96:eb:88:58:d1:a9:d0:a0:5e:f3:57:75:fa:71:8a:74: 4a:f9:89:eb:00:98:1f:6b:0c:fb:95:7f:3b:53:75:f8:87:85: f0:c5:c1:74:fa:d8:87:37:c6:2b:b4:57:62:1a:9e:c9:42:32: 15:3f:b8:63:97:28:11:81:f3:03:8b:e5:f3:cb:2b:70:29:59: fd:4f:fd:72:04:46:29:37:62:cf:5a:19:a8:d8:10:00:96:57: 0e:8f:14:4f:6e:51:ec:fa:d8:5f:57:44:4c:df:ac:d7:27:48: aa:73:af:9c:40:cc:ff:06:9c:1d:76:17:f7:c8:11:e2:bc:03: 3a:40:07:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj2jt1zr8OOW5XAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjQyMmIyMDAtOWU3Ny00NmM0LWE3OWEtMmE3ODcyMjRlZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh33R/by1aX9bcL1cFHh2PGxogC8RqpW8tGp VxLo87pnaEnOgtuz/zV5/vN/pW8X8cKnkZy7NpkRnDT1pho3YLe8M7LvIiK0m6wq jtwl/huJBs8vXZGMNWKACRLDp+Gry9uv231TS9bHCBuTEnPcHCkEh5ZGJJPlNdsf HsZIK6jecdlZtWgOgPdiaV8p5B8/4ft4sef7YyLB/YiMGecgt+q6MligVXR+APkQ 1r6GKcRLtGGXpSTxPaLBkXKkoEFK68A7kwjFhUnjBj20QDBCfvc15CcMviOYGxR6 wnE34ianSs7iZ1j3t+CF1KN/YXkF/p1hSY2EMR+SBivcfvokQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFInD3G5SLFRxpFr1GSIFW2sAxLgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjdlNTMzZjQtNzliYy0z YzdmLThhZjktMTE0NTZlNjFmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASt+VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd33fZvHSGdLlgXTQEqXu+J/IE+kGKO+A7fvcV0Z24m4Abou3lK8/co W7PIKNy4JT94JGAKGHE8QBIIFpc6xv6fWvK0XjYOMTJwu7erto4rdoHxaPIEkUyD VVFp8cYuuIUjwlZ7l0FWMGoI25spN79d6qynR8VH87SwU3gOJWymluuIWNGp0KBe 81d1+nGKdEr5iesAmB9rDPuVfztTdfiHhfDFwXT62Ic3xiu0V2IanslCMhU/uGOX KBGB8wOL5fPLK3ApWf1P/XIERik3Ys9aGajYEACWVw6PFE9uUez62F9XREzfrNcn SKpzr5xAzP8GnB12F/fIEeK8AzpAB70= -----END CERTIFICATE-----Generated at Sat May 10 21:58:57 2025 by rpki-client