$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa File: 39c23487-b420-379f-91d9-56c821c0182c.roa (raw, json) Hash identifier: EGb2kbfqTi6CuNT3FapFBFq1ROR0fpmn4ZdBVaHimS8= Subject key identifier: CA:DA:7C:69:FA:74:93:46:E4:28:59:34:3F:41:5E:7F:EE:D6:1C:E7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3C765042BBA25998E720 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.66.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3c:76:50:42:bb:a2:59:98:e7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=a05c7c7d-93e2-41b3-be0c-6e4755547e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:fe:57:dd:50:a2:96:2b:12:de:76:10:7b: 71:c6:5f:46:23:05:88:37:b8:1f:d9:45:eb:77:9f: 9f:b8:29:34:5e:e2:37:b8:27:1c:a6:55:e3:04:c2: 63:9e:b0:cd:45:77:3b:8c:29:f7:5b:e0:77:02:24: 39:f6:30:dc:45:ce:8d:ce:a6:03:2a:1b:22:bf:5d: 62:a9:42:3b:eb:f4:7b:22:5f:6d:a1:66:c8:6e:ae: 5b:c0:ad:24:70:32:dc:77:43:68:e3:0e:21:08:26: 47:53:e2:0c:7c:e0:49:49:6d:08:c7:58:f9:8b:b2: cc:45:a9:dc:35:0c:e5:d8:af:6b:62:6d:57:59:41: 3f:ab:b2:b9:14:57:60:1e:b6:10:b6:58:17:6b:a9: 66:96:f5:04:e1:11:cf:e7:04:5d:2a:21:fd:18:34: 7a:bf:9a:ae:26:7b:02:c4:44:51:9d:28:2e:a9:cb: 8f:5f:cb:74:b3:1e:da:42:81:7b:42:b2:3e:83:22: 9f:dc:0e:eb:06:21:53:2b:c3:b3:96:e2:fe:ea:e2: 06:b2:27:2d:ff:d2:a4:9b:69:49:8f:4a:e1:5b:a3: f2:d7:f4:79:c2:47:ca:bc:85:92:0f:0a:99:6b:fe: 26:e5:e8:c6:dc:a8:23:b7:ad:29:98:f5:7c:ec:d0: be:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:DA:7C:69:FA:74:93:46:E4:28:59:34:3F:41:5E:7F:EE:D6:1C:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/39c23487-b420-379f-91d9-56c821c0182c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a1:3f:4f:ba:6f:76:70:d0:c9:10:c7:c6:2a:4d:1f:64:8e: 97:83:a0:a1:92:57:a7:e8:60:98:ab:04:fb:cf:5f:0b:bb:32: 7f:65:da:a8:01:12:20:ff:ce:4a:e2:e6:4b:57:6d:59:05:3b: 6a:56:89:8a:29:c9:3b:8a:ae:f6:7f:36:7a:fa:e4:e3:a4:62: c2:12:4d:57:83:c6:b1:cd:01:26:68:ad:89:3e:a8:78:88:77: 68:1d:a8:de:d9:cd:1d:48:e9:8e:57:b6:85:3a:d1:d0:f9:0e: 68:a1:c3:4d:f9:1d:45:e8:25:8b:5b:e4:0f:ad:fa:17:4d:3f: 83:28:1f:9b:69:a2:d0:3e:65:60:e0:6d:93:dd:9d:e2:87:a5: 57:69:80:91:b6:46:9f:e1:7f:99:6d:c3:06:37:92:83:57:2d: c8:97:f7:22:c7:e9:cd:9b:d0:18:30:94:51:da:6f:8c:70:91: e5:9f:aa:38:2d:82:e5:f3:82:d7:52:be:ad:6e:83:f2:e0:05: 06:62:fa:24:f2:1e:bb:cc:c4:58:39:17:6b:71:62:fb:93:41: 39:3a:96:a0:ef:a5:d0:ab:0a:59:37:64:40:c0:58:98:46:cd: da:78:65:1a:b6:f9:df:51:8b:69:39:eb:2b:99:04:f6:9a:25: 03:3c:f3:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjx2UEK7olmY5yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YTA1YzdjN2QtOTNlMi00MWIzLWJlMGMtNmU0NzU1NTQ3ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobf+V91QopYrEt52EHtxxl9GIwWIN7gf2UXr d5+fuCk0XuI3uCccplXjBMJjnrDNRXc7jCn3W+B3AiQ59jDcRc6NzqYDKhsiv11i qUI76/R7Il9toWbIbq5bwK0kcDLcd0No4w4hCCZHU+IMfOBJSW0Ix1j5i7LMRanc NQzl2K9rYm1XWUE/q7K5FFdgHrYQtlgXa6lmlvUE4RHP5wRdKiH9GDR6v5quJnsC xERRnSguqcuPX8t0sx7aQoF7QrI+gyKf3A7rBiFTK8OzluL+6uIGsict/9Kkm2lJ j0rhW6Py1/R5wkfKvIWSDwqZa/4m5ejG3Kgjt60pmPV87NC+rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMrafGn6dJNG5ChZND9BXn/u1hznMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzljMjM0ODctYjQyMC0z NzlmLTkxZDktNTZjODIxYzAxODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRUKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHahP0+6b3Zw0MkQx8YqTR9kjpeDoKGSV6foYJirBPvPXwu7Mn9l2qgB EiD/zkri5ktXbVkFO2pWiYopyTuKrvZ/Nnr65OOkYsISTVeDxrHNASZorYk+qHiI d2gdqN7ZzR1I6Y5XtoU60dD5Dmihw035HUXoJYtb5A+t+hdNP4MoH5tpotA+ZWDg bZPdneKHpVdpgJG2Rp/hf5ltwwY3koNXLciX9yLH6c2b0BgwlFHab4xwkeWfqjgt guXzgtdSvq1ug/LgBQZi+iTyHrvMxFg5F2txYvuTQTk6lqDvpdCrClk3ZEDAWJhG zdp4ZRq2+d9Ri2k56yuZBPaaJQM884E= -----END CERTIFICATE-----Generated at Sat May 10 19:27:26 2025 by rpki-client