$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493f1833-6d1d-32c8-b906-96fedaabf1df.roa File: 493f1833-6d1d-32c8-b906-96fedaabf1df.roa (raw, json) Hash identifier: 3ehJ2bagn5pTaRtHZ2eRucv5NtWNNXhn9vqscV8VBMo= Subject key identifier: BE:A1:DE:D7:7D:84:88:F6:37:B2:1D:DC:9F:62:F0:3E:42:FC:2A:95 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D4306CB9359CBA7C41E43500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493f1833-6d1d-32c8-b906-96fedaabf1df.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 207.91.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:6c:b9:35:9c:ba:7c:41:e4:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=69ccac0e-2e97-4913-ade4-eae35a339773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:e9:46:f9:57:d1:10:43:df:60:2f:a2:8b: 65:90:ba:1e:06:26:fb:18:3b:d4:8c:fe:dc:cf:ed: 28:4b:c2:bd:af:12:eb:d7:1b:2b:e4:25:19:a4:c4: a7:f9:8e:b1:53:1a:4d:2c:c6:7d:a9:bd:69:51:9d: f8:5d:6f:59:b2:57:4c:66:85:e9:7c:e5:f2:ea:a3: 37:42:63:44:da:16:35:ea:4c:58:0f:ea:0f:31:44: 41:4c:b9:bf:00:2b:8f:e9:ec:07:64:62:0b:2c:dc: 45:5d:ff:e1:4e:0d:82:92:21:0b:4e:e7:b2:00:d4: 3a:7b:c4:e5:73:6a:01:1d:6a:f5:dc:93:0e:9c:09: a2:f5:c0:28:7a:d1:05:5f:ed:e0:bb:9f:6c:11:0e: fb:3f:f1:9e:26:30:3c:bf:12:c1:37:d8:2f:72:a1: b8:7c:29:37:65:5a:f5:1e:00:5a:9e:33:99:76:b6: af:06:27:6d:40:56:79:34:1d:65:8b:bf:ed:07:5d: ac:52:5b:91:fd:ca:66:1e:64:9c:54:0d:53:2b:a8: 7b:26:6d:6b:9b:a0:20:96:59:a2:44:60:54:d5:96: 02:32:f9:b9:4e:e4:1e:b7:11:bc:a8:45:e8:cc:97: 57:ec:00:cd:34:0d:c6:18:71:c5:bf:64:69:06:96: 71:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A1:DE:D7:7D:84:88:F6:37:B2:1D:DC:9F:62:F0:3E:42:FC:2A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/493f1833-6d1d-32c8-b906-96fedaabf1df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c3:c9:1c:b5:1d:fe:d9:2a:31:9d:2f:28:ef:8f:2c:72:3d: 5c:3e:08:ff:e2:27:a2:ac:12:16:05:23:e3:90:59:02:dd:ac: 27:82:e1:2e:33:d2:11:d3:59:02:d7:16:59:12:63:82:2b:7f: c8:e1:fe:42:35:eb:73:35:5c:9f:03:56:cd:96:3e:ad:e3:04: 30:d0:04:7b:be:41:8f:0e:76:76:19:7f:07:61:0d:b6:8c:f7: d2:63:51:31:ee:1e:64:89:e6:65:ae:5c:49:43:a6:9c:cd:62: 50:17:eb:66:94:a8:da:79:4f:c0:6b:f0:0b:2f:1e:c1:dc:6e: 66:c9:6f:4b:a7:83:4f:ba:a8:3f:60:d6:0a:d4:50:9f:f4:5d: 39:d2:ce:82:59:26:9d:65:f9:45:92:3c:95:7b:f1:e0:02:92: 85:af:9b:38:a9:f3:d9:ad:63:3e:97:36:41:78:52:7d:39:0c: dd:45:8d:3f:3c:5d:00:35:f7:04:92:17:94:39:19:90:0a:8d: c0:91:d7:d5:ed:04:2f:16:72:a4:75:5c:85:62:08:74:31:15: 8d:cf:9c:11:56:87:c6:63:b2:33:30:26:b2:e5:2a:d2:2a:e4: 6d:e2:16:18:13:9f:a8:b5:eb:a9:cf:1c:d8:b6:6d:c1:4c:54: 9d:22:f9:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGy5NZy6fEHkNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NjljY2FjMGUtMmU5Ny00OTEzLWFkZTQtZWFlMzVhMzM5NzczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pTpRvlX0RBD32AvootlkLoeBib7GDvUjP7c z+0oS8K9rxLr1xsr5CUZpMSn+Y6xUxpNLMZ9qb1pUZ34XW9ZsldMZoXpfOXy6qM3 QmNE2hY16kxYD+oPMURBTLm/ACuP6ewHZGILLNxFXf/hTg2CkiELTueyANQ6e8Tl c2oBHWr13JMOnAmi9cAoetEFX+3gu59sEQ77P/GeJjA8vxLBN9gvcqG4fCk3ZVr1 HgBanjOZdravBidtQFZ5NB1li7/tB12sUluR/cpmHmScVA1TK6h7Jm1rm6Agllmi RGBU1ZYCMvm5TuQetxG8qEXozJdX7ADNNA3GGHHFv2RpBpZxTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6h3td9hIj2N7Id3J9i8D5C/CqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDkzZjE4MzMtNmQxZC0z MmM4LWI5MDYtOTZmZWRhYWJmMWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz1soMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnDyRy1Hf7ZKjGdLyjvjyxyPVw+CP/iJ6KsEhYFI+OQWQLdrCeC4S4z 0hHTWQLXFlkSY4Irf8jh/kI163M1XJ8DVs2WPq3jBDDQBHu+QY8OdnYZfwdhDbaM 99JjUTHuHmSJ5mWuXElDppzNYlAX62aUqNp5T8Br8AsvHsHcbmbJb0ung0+6qD9g 1grUUJ/0XTnSzoJZJp1l+UWSPJV78eACkoWvmzip89mtYz6XNkF4Un05DN1FjT88 XQA19wSSF5Q5GZAKjcCR19XtBC8WcqR1XIViCHQxFY3PnBFWh8ZjsjMwJrLlKtIq 5G3iFhgTn6i166nPHNi2bcFMVJ0i+bw= -----END CERTIFICATE-----Generated at Sun Jun 29 08:55:19 2025 by rpki-client