$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa File: 60901289-8f58-32fd-a99a-a58e61c82919.roa (raw, json) Hash identifier: VncMthaw+IMokGbilfdXnnoQ8DC42PIy1aALJ9qczOQ= Subject key identifier: 81:D5:8F:CA:95:30:85:85:CE:DA:9E:E2:10:CB:C6:FC:9B:8B:E3:D8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A185F5253602FB2FC5D00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 207.170.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:18:5f:52:53:60:2f:b2:fc:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=eb003750-0c98-49aa-9ea6-0bbd3111fe06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:0b:a8:bb:8b:b5:b1:b3:b9:d6:85:5d:7d: 5a:a8:2a:4a:73:ae:9f:05:bd:af:31:21:1b:b9:69: f1:54:b3:a4:78:18:51:ea:26:93:4c:14:0d:b1:c1: 95:60:70:96:2c:00:66:06:6e:7e:ec:27:63:da:c5: ff:7e:1a:60:be:32:62:bd:ea:da:d0:1a:ee:c1:e4: 32:26:50:42:83:a5:47:47:aa:89:a7:f0:4f:e6:e2: 37:20:fc:5b:4e:9e:bb:d6:52:9c:e7:91:a1:8d:25: 37:26:3d:f0:3d:15:5b:95:9e:4e:f7:b5:e0:20:9b: d2:e4:1a:c4:da:b3:95:87:ef:59:53:e9:c4:29:6a: 39:94:c5:27:31:e1:b7:ba:0e:38:ac:0d:64:eb:5c: 63:dc:ce:76:f6:e6:79:af:b5:ab:75:ab:21:5f:71: 5d:51:19:2e:71:5d:a7:6f:e4:66:d7:e2:ca:8f:0e: 52:23:58:b0:67:1e:a3:db:44:de:30:a6:f5:38:55: 18:e7:b6:31:ec:16:29:47:ab:d3:32:4e:4b:9d:cd: f6:16:f7:ec:38:de:a2:d8:e2:5b:72:85:a0:6d:e0: 6e:62:7c:8d:11:34:48:b5:39:a4:d9:c7:da:33:6a: 72:ca:c9:6e:e9:d2:da:c2:76:f7:84:10:0b:43:65: 8b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:8F:CA:95:30:85:85:CE:DA:9E:E2:10:CB:C6:FC:9B:8B:E3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/60901289-8f58-32fd-a99a-a58e61c82919.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.170.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:07:88:a4:a3:ef:1c:4e:c8:b7:fc:28:b9:41:01:f5:83:ed: 09:b5:60:29:b2:ff:2a:f9:2c:5b:94:6b:e1:25:0c:cf:f9:77: 08:c5:68:d9:31:8f:63:d9:a1:78:63:49:51:61:54:9e:fa:30: 65:49:09:e0:41:2b:20:91:03:d1:8d:07:1a:8b:d0:2e:3f:e0: 3a:a6:ed:fa:ed:d5:7d:32:c5:1a:19:bd:27:1b:c9:bd:16:b7: 71:d6:ec:97:f8:95:70:56:2a:e0:b9:5d:96:02:26:26:f6:5a: f1:f7:61:d4:05:ef:fa:fe:d3:87:ae:dc:67:66:56:34:2d:1a: 1d:06:e7:40:0d:39:73:80:15:1e:74:db:61:b6:b7:bc:b9:36: 85:42:9a:66:91:7c:72:33:ab:4a:96:4f:9b:4b:4e:15:dd:de: 4b:6b:d9:36:2b:a2:2e:8e:05:6a:02:a6:f2:11:7e:55:df:6e: 57:f7:cf:64:e8:27:7e:c4:22:76:12:34:94:b8:c1:00:d1:6a: 67:af:9f:63:62:22:7c:f6:96:ec:a9:64:96:fc:51:da:e7:a9: 06:54:d7:73:81:de:27:f0:5f:f1:c3:b6:55:ea:56:66:98:bc: 4c:94:3e:2b:d4:91:44:bd:50:2e:5c:e8:06:9c:34:21:7b:0e: d9:a0:81:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShhfUlNgL7L8XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZWIwMDM3NTAtMGM5OC00OWFhLTllYTYtMGJiZDMxMTFmZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo50LqLuLtbGzudaFXX1aqCpKc66fBb2vMSEb uWnxVLOkeBhR6iaTTBQNscGVYHCWLABmBm5+7Cdj2sX/fhpgvjJivera0BruweQy JlBCg6VHR6qJp/BP5uI3IPxbTp671lKc55GhjSU3Jj3wPRVblZ5O97XgIJvS5BrE 2rOVh+9ZU+nEKWo5lMUnMeG3ug44rA1k61xj3M529uZ5r7WrdashX3FdURkucV2n b+Rm1+LKjw5SI1iwZx6j20TeMKb1OFUY57Yx7BYpR6vTMk5Lnc32FvfsON6i2OJb coWgbeBuYnyNETRItTmk2cfaM2pyyslu6dLawnb3hBALQ2WLNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIHVj8qVMIWFztqe4hDLxvybi+PYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjA5MDEyODktOGY1OC0z MmZkLWE5OWEtYTU4ZTYxYzgyOTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz6oAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoHiKSj7xxOyLf8KLlBAfWD7Qm1YCmy/yr5LFuUa+ElDM/5dwjFaNkx j2PZoXhjSVFhVJ76MGVJCeBBKyCRA9GNBxqL0C4/4Dqm7frt1X0yxRoZvScbyb0W t3HW7Jf4lXBWKuC5XZYCJib2WvH3YdQF7/r+04eu3GdmVjQtGh0G50ANOXOAFR50 22G2t7y5NoVCmmaRfHIzq0qWT5tLThXd3ktr2TYroi6OBWoCpvIRflXfblf3z2To J37EInYSNJS4wQDRamevn2NiInz2luypZJb8UdrnqQZU13OB3ifwX/HDtlXqVmaY vEyUPivUkUS9UC5c6AacNCF7DtmggdA= -----END CERTIFICATE-----Generated at Sat May 10 21:00:26 2025 by rpki-client