$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa File: 79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa (raw, json) Hash identifier: XB4LAjwBASFcKto0YZSy9FmoN/ENmhhqumw3mtOUtl4= Subject key identifier: 23:35:A5:F1:7B:D2:A8:D7:E6:68:66:B1:6D:E4:D1:4F:28:16:0B:5F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3D76C252E42A32943380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 74.11.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3d:76:c2:52:e4:2a:32:94:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=cc593ee0-ef3b-442a-838a-1083b89eac2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:ff:92:57:d4:38:59:5c:e9:bc:1f:7e:b3: 49:d3:56:8d:06:c0:fe:0a:06:93:dc:4d:a1:e5:6a: 28:80:bb:41:25:70:ee:af:46:b4:90:6c:b5:c8:f5: 90:8d:80:79:93:80:21:0f:5e:d2:50:1a:c0:f3:ec: 90:e1:25:65:b1:61:60:c7:86:35:be:33:8c:b5:97: 23:16:be:a6:1e:f0:2f:d0:b6:6a:a4:33:45:9d:29: 5d:68:30:56:60:1d:60:d1:c8:03:a4:99:ff:48:29: 8a:79:af:19:89:b8:b7:f7:41:e4:9f:bd:fb:37:fd: 90:e6:af:65:54:41:94:a7:a5:8e:42:d1:a7:61:4b: dd:6e:9b:71:20:82:5e:49:78:1e:3c:d4:c2:c0:2f: cf:31:bc:fd:72:3e:bb:fe:71:87:63:e3:28:f8:66: 31:0a:ec:86:a3:bc:97:6b:f6:17:23:18:e3:be:d6: 26:b9:27:11:74:b3:14:5c:71:4f:05:0c:41:c8:a2: 15:6a:76:67:01:51:64:5d:e8:01:40:61:17:e8:76: d1:dd:cb:da:cd:5d:64:ae:32:30:9a:f7:d2:97:0f: 55:cb:a1:42:84:bb:77:56:ce:34:00:dd:48:fa:a1: 27:00:30:5e:dc:f7:c2:b1:67:75:f8:b3:fc:04:fe: 90:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:35:A5:F1:7B:D2:A8:D7:E6:68:66:B1:6D:E4:D1:4F:28:16:0B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/79ac9c30-b80a-32eb-bfcb-552bb9f10fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.11.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f4:67:ce:85:1c:0b:61:cd:0d:0f:76:d7:22:28:6d:2d:5f: 22:5f:98:5f:51:6d:fa:22:b0:2e:38:81:19:37:ac:43:f4:08: 84:6f:3c:b9:e1:d3:58:cd:fa:e4:77:23:c5:c8:66:eb:21:30: e9:17:ca:50:b2:e2:22:39:76:95:18:87:19:73:cf:bb:21:c8: fc:89:d2:04:e9:ae:69:e5:b4:dc:a5:1c:ea:04:61:3f:1e:b8: 25:10:ab:b2:3b:0e:ef:4f:f7:58:97:52:53:6d:59:74:1c:b9: 23:99:40:4c:0c:44:3e:c9:6b:7a:5e:1a:ee:cc:07:aa:c0:4f: 68:c3:ad:65:1a:d4:84:95:2d:9a:2f:b5:17:7b:6e:16:5c:5c: d4:bb:79:ac:ac:d7:7d:4f:48:5b:79:62:a2:2c:24:ce:9e:3e: e5:de:d8:18:26:c6:39:f1:24:35:1d:b2:c5:8b:26:d2:94:2b: cc:2c:c1:af:33:a5:84:15:b2:20:fb:ac:40:68:a0:76:86:2c: 21:30:59:c3:ea:f0:82:3b:1b:95:2c:eb:91:90:f7:a1:94:f9: 4a:8f:eb:54:13:ca:67:dd:36:f7:ce:0a:25:a4:47:e2:a9:16: 57:a6:0a:7c:e4:aa:6e:81:47:5b:d1:8b:96:c9:72:41:36:4e: a1:bc:42:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSj12wlLkKjKUM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2M1OTNlZTAtZWYzYi00NDJhLTgzOGEtMTA4M2I4OWVhYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWD/klfUOFlc6bwffrNJ01aNBsD+CgaT3E2h 5WoogLtBJXDur0a0kGy1yPWQjYB5k4AhD17SUBrA8+yQ4SVlsWFgx4Y1vjOMtZcj Fr6mHvAv0LZqpDNFnSldaDBWYB1g0cgDpJn/SCmKea8Zibi390Hkn737N/2Q5q9l VEGUp6WOQtGnYUvdbptxIIJeSXgePNTCwC/PMbz9cj67/nGHY+Mo+GYxCuyGo7yX a/YXIxjjvtYmuScRdLMUXHFPBQxByKIVanZnAVFkXegBQGEX6HbR3cvazV1krjIw mvfSlw9Vy6FChLt3Vs40AN1I+qEnADBe3PfCsWd1+LP8BP6QiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM1pfF70qjX5mhmsW3k0U8oFgtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzlhYzljMzAtYjgwYS0z MmViLWJmY2ItNTUyYmI5ZjEwZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgvRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP0Z86FHAthzQ0PdtciKG0tXyJfmF9RbfoisC44gRk3rEP0CIRvPLnh 01jN+uR3I8XIZushMOkXylCy4iI5dpUYhxlzz7shyPyJ0gTprmnltNylHOoEYT8e uCUQq7I7Du9P91iXUlNtWXQcuSOZQEwMRD7Ja3peGu7MB6rAT2jDrWUa1ISVLZov tRd7bhZcXNS7eays131PSFt5YqIsJM6ePuXe2BgmxjnxJDUdssWLJtKUK8wswa8z pYQVsiD7rEBooHaGLCEwWcPq8II7G5Us65GQ96GU+UqP61QTymfdNvfOCiWkR+Kp FlemCnzkqm6BR1vRi5bJckE2TqG8Qsk= -----END CERTIFICATE-----Generated at Sat May 10 07:33:15 2025 by rpki-client