$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa File: 4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa (raw, json) Hash identifier: OUMuPkeY9Q5YZ3ErslHARfCn5cUaw4Ho6Ca3wb2jA14= Subject key identifier: 5A:E1:CD:65:B4:BB:0C:62:B5:71:8A:41:FE:0A:62:D3:EA:FD:E1:0E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A42E42C9DAE816BECD880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 207.155.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:42:e4:2c:9d:ae:81:6b:ec:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ffaa964c-3369-4f2b-8bc7-55428d286ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cd:96:9f:80:ab:35:5d:81:80:e4:2c:06:24: f0:90:3d:88:26:21:a0:9a:34:1d:dd:00:3b:9f:9e: 7a:2e:11:c1:dd:b7:3b:ec:9e:7a:75:0b:e7:3c:0d: c3:a0:2d:08:76:72:df:4c:e3:ce:56:dd:89:e1:7b: 64:22:1a:99:a7:ea:09:b9:f4:43:5b:42:42:c4:a5: a3:a5:cf:ea:43:6a:66:39:59:c4:2e:41:39:ad:89: 2a:62:cd:e2:07:6e:bc:d9:5e:56:2e:cb:7c:c9:10: 35:c7:d8:59:69:82:ef:5c:ec:fb:5b:d2:f9:2a:14: 7f:59:74:11:df:ff:05:e5:b3:54:6c:88:8f:3c:97: 50:d8:31:5c:39:af:2a:c0:a0:3e:90:6a:38:6f:9b: 68:4e:bb:7a:fe:ce:95:a3:a4:02:cd:63:7b:8b:51: ff:d3:1f:51:b5:8e:f1:32:52:a9:55:30:8a:15:60: c6:9d:3b:e2:6c:5b:77:c8:24:a6:9f:af:fb:b1:1e: 1d:81:99:ef:ff:ca:2a:bd:d0:f5:a7:60:4d:85:0c: 7a:c2:2d:e9:50:bb:67:48:fd:bf:0b:c0:72:a3:11: 33:da:e5:39:59:1e:a9:fa:9a:32:bd:d1:52:ff:8d: ce:8b:f3:93:1e:ec:99:09:e8:9d:1a:15:9d:c8:8e: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E1:CD:65:B4:BB:0C:62:B5:71:8A:41:FE:0A:62:D3:EA:FD:E1:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4c78658c-11ab-3125-b2fe-4bb271c7f3a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:65:a9:c0:f0:46:7d:0c:9b:a8:24:c1:f4:58:79:c8:38:3a: 70:56:9e:d1:46:29:4e:82:62:65:04:eb:e9:e3:5e:bc:1e:f9: 25:24:3e:e4:c7:0c:72:bd:61:d6:0e:d2:50:70:37:6b:12:b9: a0:aa:62:f5:f8:f7:b4:9d:b2:3d:9c:8b:f5:f3:2b:13:20:9a: f6:ae:aa:b7:cc:90:6f:aa:d9:44:a6:7c:ab:df:3d:e4:a6:05: 92:12:38:f2:cd:09:d9:15:dd:18:d2:ee:69:aa:64:e9:2c:89: f5:73:5a:79:6d:6a:d1:77:94:b9:7e:03:90:ff:61:b8:e3:c5: de:8b:5a:f8:fe:66:46:b6:c8:be:1a:5b:d7:2d:1c:63:f3:96: 4f:2a:99:4b:41:32:83:c8:55:2a:d2:d4:3e:5c:7f:1e:1a:ad: d8:83:62:e0:a2:1f:aa:74:df:5d:a3:d6:7c:50:58:ac:8d:40: a2:2b:d8:30:52:e5:63:c4:2f:1e:31:8f:04:81:b1:96:b0:7c: 0f:13:ea:40:79:6c:5e:bd:80:1c:3a:bf:11:2e:1c:cd:61:cc: 30:0f:af:59:b5:53:ad:8b:e7:cf:db:85:20:d8:5d:6c:22:b9: d9:81:b7:90:67:99:38:8b:09:c1:a2:2b:59:6e:53:5a:43:c7: 4b:72:24:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkLkLJ2ugWvs2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmZhYTk2NGMtMzM2OS00ZjJiLThiYzctNTU0MjhkMjg2YmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c2Wn4CrNV2BgOQsBiTwkD2IJiGgmjQd3QA7 n556LhHB3bc77J56dQvnPA3DoC0IdnLfTOPOVt2J4XtkIhqZp+oJufRDW0JCxKWj pc/qQ2pmOVnELkE5rYkqYs3iB2682V5WLst8yRA1x9hZaYLvXOz7W9L5KhR/WXQR 3/8F5bNUbIiPPJdQ2DFcOa8qwKA+kGo4b5toTrt6/s6Vo6QCzWN7i1H/0x9RtY7x MlKpVTCKFWDGnTvibFt3yCSmn6/7sR4dgZnv/8oqvdD1p2BNhQx6wi3pULtnSP2/ C8ByoxEz2uU5WR6p+poyvdFS/43Oi/OTHuyZCeidGhWdyI44MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrhzWW0uwxitXGKQf4KYtPq/eEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGM3ODY1OGMtMTFhYi0z MTI1LWIyZmUtNGJiMjcxYzdmM2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHz5sAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNlqcDwRn0Mm6gkwfRYecg4OnBWntFGKU6CYmUE6+njXrwe+SUkPuTH DHK9YdYO0lBwN2sSuaCqYvX497Sdsj2ci/XzKxMgmvauqrfMkG+q2USmfKvfPeSm BZISOPLNCdkV3RjS7mmqZOksifVzWnltatF3lLl+A5D/Ybjjxd6LWvj+Zka2yL4a W9ctHGPzlk8qmUtBMoPIVSrS1D5cfx4ardiDYuCiH6p0312j1nxQWKyNQKIr2DBS 5WPELx4xjwSBsZawfA8T6kB5bF69gBw6vxEuHM1hzDAPr1m1U62L58/bhSDYXWwi udmBt5BnmTiLCcGiK1luU1pDx0tyJLM= -----END CERTIFICATE-----Generated at Fri May 9 02:58:29 2025 by rpki-client