$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa File: 28f32791-93af-395d-a89b-6915c7444645.roa (raw, json) Hash identifier: 5K/+78uJ4AJfePFu+jidIFp9TSQcYyECu7+UbIjBiEw= Subject key identifier: F1:4F:F5:53:90:A7:D1:99:EE:B5:20:52:91:C6:27:65:D9:3E:13:C6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A18F09B3CB94C91D57880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.92.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:18:f0:9b:3c:b9:4c:91:d5:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5936a073-f814-4bc8-8587-8245a2f9ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f2:6c:6f:f2:97:09:4e:1e:ad:f6:cd:f9:dd: 94:f1:0c:c5:4b:70:15:88:a4:dc:e7:96:5f:0c:7e: e3:0e:3b:4d:6d:67:28:6f:77:50:58:60:49:a8:f2: 2b:bb:32:56:03:ee:d6:27:6b:0b:73:49:7d:29:cb: 7f:e2:0a:69:e7:c0:b6:0c:dd:8f:d0:09:62:31:c0: e1:c8:f0:34:e8:0f:07:8f:90:2c:f3:1d:de:cb:3f: bd:a4:d2:96:e0:6b:32:05:ac:c9:df:6f:a6:16:6c: 51:08:35:30:9e:89:21:bd:2a:f7:2c:b8:87:fc:13: 07:57:55:21:6d:e9:f0:54:d8:cc:26:0c:a5:9e:ab: 1d:6d:c7:d7:56:87:8f:0f:31:fe:5e:52:35:88:6d: 1b:08:1a:44:64:cd:70:8e:b8:b7:49:f9:65:3b:0a: f1:af:9a:81:db:d7:36:ae:a8:f0:68:2f:6b:e7:c1: f5:7f:65:ca:57:0d:c1:31:ff:b5:8b:73:27:d9:bd: 9a:71:68:c5:a7:6c:80:1f:76:6c:d3:7b:de:40:37: d2:33:92:68:f5:bb:b4:1b:fd:ee:dc:7a:f3:42:c4: 5d:a4:70:39:3b:30:7d:45:aa:28:f7:44:4a:33:04: e0:78:49:77:53:81:99:0c:2e:bb:0a:ea:c5:ca:18: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4F:F5:53:90:A7:D1:99:EE:B5:20:52:91:C6:27:65:D9:3E:13:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/28f32791-93af-395d-a89b-6915c7444645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:77:7f:35:de:a3:39:dc:6b:29:6d:d1:28:06:bc:2d:2d:6f: 90:a9:99:d4:53:7b:f3:a7:b1:71:62:f7:3e:66:74:07:35:6c: 21:b1:21:6b:08:30:70:2c:33:30:d7:02:58:de:fe:b3:63:83: 00:72:90:af:5f:9a:eb:e1:1f:00:2f:0f:78:82:81:17:d7:5f: a3:52:59:1f:6c:bc:17:ff:15:a5:ad:f8:cc:ae:ea:92:bc:30: 41:2e:b1:d9:e5:64:8a:5c:bd:5f:5c:18:6e:45:d9:e1:4e:e8: 00:a6:2f:c6:3a:85:28:aa:68:59:a5:a9:81:d7:5c:89:08:03: 3e:38:f2:b8:a9:fe:1c:20:96:21:45:00:5a:81:d2:c5:b6:51: ff:85:76:ce:7f:5a:68:5b:05:39:88:9c:f9:22:cf:a7:fd:37: ae:01:73:ba:3b:f6:3f:c2:3e:e4:27:e5:a4:ea:ae:52:c9:15: 10:b9:73:96:fd:e1:48:c8:2d:e1:df:1e:28:3a:b0:27:08:8a: 66:a6:b6:dd:24:db:e3:c5:ee:99:8c:fa:73:9f:4f:e6:e9:90: 07:83:09:e0:10:59:56:a2:9f:ec:e3:ec:98:2b:c5:4a:b0:ce: 5e:8c:81:eb:27:55:ff:d5:f8:c9:c3:a5:ed:e4:c1:4f:b5:3e: e7:55:5a:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShjwmzy5TJHVeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTkzNmEwNzMtZjgxNC00YmM4LTg1ODctODI0NWEyZjllZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPJsb/KXCU4erfbN+d2U8QzFS3AViKTc55Zf DH7jDjtNbWcob3dQWGBJqPIruzJWA+7WJ2sLc0l9Kct/4gpp58C2DN2P0AliMcDh yPA06A8Hj5As8x3eyz+9pNKW4GsyBazJ32+mFmxRCDUwnokhvSr3LLiH/BMHV1Uh benwVNjMJgylnqsdbcfXVoePDzH+XlI1iG0bCBpEZM1wjri3SfllOwrxr5qB29c2 rqjwaC9r58H1f2XKVw3BMf+1i3Mn2b2acWjFp2yAH3Zs03veQDfSM5Jo9bu0G/3u 3HrzQsRdpHA5OzB9Raoo90RKMwTgeEl3U4GZDC67CurFyhixlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFP9VOQp9GZ7rUgUpHGJ2XZPhPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjhmMzI3OTEtOTNhZi0z OTVkLWE4OWItNjkxNWM3NDQ0NjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0VwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE13fzXeozncaylt0SgGvC0tb5CpmdRTe/OnsXFi9z5mdAc1bCGxIWsI MHAsMzDXAlje/rNjgwBykK9fmuvhHwAvD3iCgRfXX6NSWR9svBf/FaWt+Myu6pK8 MEEusdnlZIpcvV9cGG5F2eFO6ACmL8Y6hSiqaFmlqYHXXIkIAz448rip/hwgliFF AFqB0sW2Uf+Fds5/WmhbBTmInPkiz6f9N64Bc7o79j/CPuQn5aTqrlLJFRC5c5b9 4UjILeHfHig6sCcIimamtt0k2+PF7pmM+nOfT+bpkAeDCeAQWVain+zj7JgrxUqw zl6MgesnVf/V+MnDpe3kwU+1PudVWnU= -----END CERTIFICATE-----Generated at Mon May 12 21:39:32 2025 by rpki-client