$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa File: 5338ef0f-921e-34fb-9c0b-c753c46e0181.roa (raw, json) Hash identifier: XSzliIq4LBkNT0TZqaPnYjnIuZviSZ1gOmkBFTLqSmM= Subject key identifier: EF:89:95:01:D1:D6:17:24:56:D4:6A:F9:4D:5D:BC:B0:0A:ED:BE:0B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A146E64E28DF8F8ABDB00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 69.40.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:14:6e:64:e2:8d:f8:f8:ab:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=97f4ed45-93c0-44e2-a086-f5254e9c297d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8a:88:7f:53:5c:7d:db:a2:3c:d9:2b:01:80: a8:25:c3:ee:61:ff:30:39:dc:40:06:45:df:e2:3e: 79:8b:c4:47:03:86:2b:7d:88:68:31:f2:f5:15:ae: 3f:8f:83:5b:de:51:53:51:7d:b2:3a:9f:cd:a1:86: ed:23:33:76:dd:53:76:b2:69:d4:9a:0c:ad:8e:7c: 1d:ba:67:ee:e8:58:d7:98:3a:b4:63:9c:2a:f0:af: 22:71:8b:e3:04:bd:19:ff:11:9b:cd:f9:a0:b1:2b: a7:46:80:f5:b5:a4:44:b5:a5:a8:f4:33:00:5f:2a: ef:0c:7b:f5:d2:c5:06:d8:6a:6c:56:12:58:d0:ae: e0:03:13:88:f3:10:96:da:42:4c:07:78:37:ac:36: ee:62:46:e7:32:6a:e6:7d:d2:d6:d4:92:1c:62:e7: 28:ab:80:38:9e:a7:11:6a:9d:ef:2d:98:5a:37:61: f7:e9:fc:be:99:f3:41:e6:1f:4e:d8:5f:aa:20:6e: 55:76:ed:22:75:94:c3:92:dd:d5:c1:c0:a3:40:6a: 9f:e3:ca:9f:21:f4:dc:71:55:c7:90:f7:60:de:68: cc:5f:0d:d7:8a:24:fe:af:4b:a6:eb:90:10:d0:d5: 7d:b0:99:3c:be:71:f6:01:c8:40:02:95:f6:9b:be: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:89:95:01:D1:D6:17:24:56:D4:6A:F9:4D:5D:BC:B0:0A:ED:BE:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/5338ef0f-921e-34fb-9c0b-c753c46e0181.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:c9:59:e0:56:9c:39:c8:7a:36:0a:b7:ed:bd:83:92:ae:39: db:f7:25:0e:06:c7:4b:28:57:bb:5d:7e:c8:fa:b1:93:75:0a: 58:79:76:52:8a:4a:0f:4b:71:2d:6e:49:72:ca:f7:d4:c6:17: 64:7a:4d:6d:94:8e:a0:5d:7c:27:ef:36:a7:84:ef:3e:f7:d0: b6:3b:4f:54:3e:ff:d5:eb:85:fa:55:f7:4c:24:65:b7:47:c6: f6:e0:2f:f0:27:f1:f4:19:09:35:c3:cc:07:4e:e4:ac:d4:6c: 91:84:6a:c1:1e:2c:7b:83:ce:cc:55:ba:2e:81:41:a8:7c:d9: f6:e8:12:aa:10:e8:06:e8:6a:7b:dc:30:d0:21:87:0a:3f:a5: 48:bb:5a:7b:fc:33:17:70:fe:02:d9:1a:64:cf:59:a6:8b:12: 9d:98:41:da:3e:76:20:a7:93:87:fb:b0:b6:7c:8d:9b:c0:7e: 92:eb:51:bd:a1:08:67:02:1d:1d:db:75:fd:bb:5f:95:ac:b8: 34:ab:e5:2b:e0:5a:5a:a8:31:22:f5:13:b6:ad:50:c6:b9:d4: 6b:19:d3:79:2b:f8:52:ef:8b:e2:36:cf:1c:9e:19:eb:56:8c: 87:e4:f5:0a:13:b0:13:e7:2b:aa:f5:69:cd:dd:93:4d:da:87: cd:46:ea:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhRuZOKN+Pir2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk OTdmNGVkNDUtOTNjMC00NGUyLWEwODYtZjUyNTRlOWMyOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4qIf1NcfduiPNkrAYCoJcPuYf8wOdxABkXf 4j55i8RHA4YrfYhoMfL1Fa4/j4Nb3lFTUX2yOp/NoYbtIzN23VN2smnUmgytjnwd umfu6FjXmDq0Y5wq8K8icYvjBL0Z/xGbzfmgsSunRoD1taREtaWo9DMAXyrvDHv1 0sUG2GpsVhJY0K7gAxOI8xCW2kJMB3g3rDbuYkbnMmrmfdLW1JIcYucoq4A4nqcR ap3vLZhaN2H36fy+mfNB5h9O2F+qIG5Vdu0idZTDkt3VwcCjQGqf48qfIfTccVXH kPdg3mjMXw3XiiT+r0um65AQ0NV9sJk8vnH2AchAApX2m75M5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO+JlQHR1hckVtRq+U1dvLAK7b4LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTMzOGVmMGYtOTIxZS0z NGZiLTljMGItYzc1M2M0NmUwMTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvJWeBWnDnIejYKt+29g5KuOdv3JQ4Gx0soV7tdfsj6sZN1Clh5dlKK Sg9LcS1uSXLK99TGF2R6TW2UjqBdfCfvNqeE7z730LY7T1Q+/9XrhfpV90wkZbdH xvbgL/An8fQZCTXDzAdO5KzUbJGEasEeLHuDzsxVui6BQah82fboEqoQ6Aboanvc MNAhhwo/pUi7Wnv8Mxdw/gLZGmTPWaaLEp2YQdo+diCnk4f7sLZ8jZvAfpLrUb2h CGcCHR3bdf27X5WsuDSr5SvgWlqoMSL1E7atUMa51GsZ03kr+FLvi+I2zxyeGetW jIfk9QoTsBPnK6r1ac3dk03ah81G6r4= -----END CERTIFICATE-----Generated at Wed May 7 16:20:21 2025 by rpki-client