$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa File: 7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa (raw, json) Hash identifier: Ep6rdp3f5bQeC4ytlpDKli43ytBful24bWLSNcAiZOo= Subject key identifier: 1E:5D:53:5B:EF:B7:EC:E5:07:3F:1A:59:47:AB:4F:4E:AA:41:72:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A43BCFDE6F9AED2CB0F40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.83.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:43:bc:fd:e6:f9:ae:d2:cb:0f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b680cea4-a5c7-4eb8-acb4-6794e1eab281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:79:d8:d6:df:b4:68:22:6c:82:4e:35:73: 30:d2:43:22:a4:a5:75:cc:8b:d8:22:8b:0b:74:5a: 02:c8:61:bd:82:21:1c:fa:3f:15:b4:a1:87:05:d8: 89:88:6e:43:c1:91:f4:87:36:65:9f:2b:89:21:22: db:0d:2f:1d:0f:e5:12:80:72:b3:e2:e5:7c:e9:f6: b7:9f:8c:ea:32:36:b6:3c:60:0a:27:9c:79:4a:be: e9:97:18:2f:7b:92:64:bf:6a:23:87:81:27:36:c8: 41:34:a0:4a:28:89:f4:6c:b0:ab:ac:15:47:9c:d8: a7:53:29:8e:3e:0d:ea:b1:af:fd:61:05:55:dd:c4: 83:32:f5:87:3b:4a:c6:fc:75:a4:c3:46:71:17:d6: aa:a5:55:55:78:ce:30:0e:f3:f7:0a:79:f3:80:01: d8:bd:ca:20:4f:05:94:d5:54:3e:ea:ab:3f:f6:28: f8:1f:14:e2:b3:ac:f9:7b:5f:54:d4:2f:12:77:b2: db:d5:29:df:1a:15:35:32:24:45:bf:dc:9b:38:4f: db:9c:8b:11:f8:a1:3b:3c:bc:04:9e:9e:83:3c:2a: 73:6a:1e:6d:3d:05:40:22:2e:3f:e8:29:e2:7e:38: 44:3a:f1:9d:a6:3f:63:a5:72:87:5c:62:e4:f2:1c: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5D:53:5B:EF:B7:EC:E5:07:3F:1A:59:47:AB:4F:4E:AA:41:72:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7272b0b2-5be3-3198-9d07-122f9ce9ae8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.83.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:5e:84:2e:92:83:5a:22:3c:90:f9:c6:7f:24:f4:cd:10:38: b7:1f:37:e2:bf:13:59:3a:b3:69:30:15:fb:17:c0:ec:d7:54: 47:ce:b8:74:53:a7:2e:8e:27:62:b0:19:25:f0:c4:ab:a5:16: 8f:c5:fe:94:40:31:43:a3:0a:93:c6:66:fa:df:fb:53:e9:14: 37:9c:85:19:a9:0b:43:45:87:2b:71:c2:f1:74:a5:14:88:3f: 22:11:7a:17:6e:00:ac:dd:d2:41:25:d4:7b:c8:5a:e7:cd:eb: ba:18:05:bc:c5:e1:9f:5f:d4:1c:70:4d:3d:79:eb:95:fc:8d: e5:e2:d9:29:a6:2b:74:d3:10:7f:2c:d6:a9:89:33:ca:5d:a0: 2c:8e:4a:26:2f:ee:0b:45:b5:9d:72:56:1b:91:4c:35:34:17: 56:9f:5e:99:2b:2d:2e:0e:12:27:9e:0c:9e:88:2d:c9:c5:6c: c8:d4:36:f3:34:f7:59:a6:6a:64:21:1e:27:27:f5:08:86:94: 1e:b8:5f:57:66:82:f4:11:e4:5d:82:2b:02:55:67:ff:e1:8f: 9c:dd:c8:ab:5a:23:19:10:10:d9:0f:ed:11:f1:16:a5:91:b3: 6a:9a:54:16:c4:6b:a5:6d:24:3b:97:6c:4b:79:62:e7:86:a8: b9:a3:da:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkO8/eb5rtLLD0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjY4MGNlYTQtYTVjNy00ZWI4LWFjYjQtNjc5NGUxZWFiMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfJ52NbftGgibIJONXMw0kMipKV1zIvYIosL dFoCyGG9giEc+j8VtKGHBdiJiG5DwZH0hzZlnyuJISLbDS8dD+USgHKz4uV86fa3 n4zqMja2PGAKJ5x5Sr7plxgve5Jkv2ojh4EnNshBNKBKKIn0bLCrrBVHnNinUymO Pg3qsa/9YQVV3cSDMvWHO0rG/HWkw0ZxF9aqpVVVeM4wDvP3CnnzgAHYvcogTwWU 1VQ+6qs/9ij4HxTis6z5e19U1C8Sd7Lb1SnfGhU1MiRFv9ybOE/bnIsR+KE7PLwE np6DPCpzah5tPQVAIi4/6CnifjhEOvGdpj9jpXKHXGLk8hyBgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5dU1vvt+zlBz8aWUerT06qQXKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzI3MmIwYjItNWJlMy0z MTk4LTlkMDctMTIyZjljZTlhZThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0VMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhehC6Sg1oiPJD5xn8k9M0QOLcfN+K/E1k6s2kwFfsXwOzXVEfOuHRT py6OJ2KwGSXwxKulFo/F/pRAMUOjCpPGZvrf+1PpFDechRmpC0NFhytxwvF0pRSI PyIRehduAKzd0kEl1HvIWufN67oYBbzF4Z9f1BxwTT1565X8jeXi2SmmK3TTEH8s 1qmJM8pdoCyOSiYv7gtFtZ1yVhuRTDU0F1afXpkrLS4OEieeDJ6ILcnFbMjUNvM0 91mmamQhHicn9QiGlB64X1dmgvQR5F2CKwJVZ//hj5zdyKtaIxkQENkP7RHxFqWR s2qaVBbEa6VtJDuXbEt5YueGqLmj2sQ= -----END CERTIFICATE-----Generated at Sat May 10 13:57:27 2025 by rpki-client