$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd3da91-f522-37f9-9be5-5278ae4ffdd3.roa File: 7dd3da91-f522-37f9-9be5-5278ae4ffdd3.roa (raw, json) Hash identifier: /lT2S94G4IcVIjsstqLT53dH9c/Bw5KRU8Z900p33D4= Subject key identifier: F0:29:E1:C3:29:C2:1E:E3:8F:EA:D2:80:57:21:0A:0E:B3:8F:93:4F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A156B972B0E7FE4055E00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd3da91-f522-37f9-9be5-5278ae4ffdd3.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 107.7.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:15:6b:97:2b:0e:7f:e4:05:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=55490289-e8dd-4b2b-9c2a-71f1295d6ab5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ab:7e:73:f0:9c:93:c4:1e:fe:77:6e:a8:27: e1:68:76:82:7e:04:f1:7b:2d:b0:3d:8e:6d:13:1d: d4:b1:1b:e1:c8:73:13:8b:3e:07:62:0b:7a:1a:c6: 04:2e:05:1c:9c:d4:22:ed:45:c6:ec:af:df:61:8d: 03:07:a8:19:8d:9f:29:f3:fb:23:b2:8d:01:74:92: 76:03:48:18:2e:f1:13:c1:26:b5:04:fa:b3:97:2b: 42:5b:77:12:53:9f:0f:27:6c:32:1f:6d:d5:6a:20: 95:e5:74:96:6e:d0:c6:85:c8:44:a5:01:ac:53:0e: ce:37:81:4d:4a:cd:9d:51:b3:d0:dc:c3:be:71:89: aa:96:fd:e0:49:86:b0:f6:40:88:c1:ed:49:0e:25: f2:12:89:56:0b:70:6d:68:f4:e7:aa:72:80:72:b7: 0e:80:09:b4:6b:05:25:de:a1:8d:b1:0c:86:5a:11: 17:23:51:68:03:5d:c0:75:d7:66:8d:11:1c:81:23: 27:85:75:11:48:43:39:d1:02:ec:0e:1b:95:fa:95: 88:be:d3:f1:9b:99:81:91:7a:60:5f:71:e6:5b:a1: 6c:d9:94:f1:5e:76:9e:04:c4:92:51:14:ef:84:92: 33:1c:d8:2e:cd:71:25:01:8d:23:e2:41:36:35:c7: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:29:E1:C3:29:C2:1E:E3:8F:EA:D2:80:57:21:0A:0E:B3:8F:93:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7dd3da91-f522-37f9-9be5-5278ae4ffdd3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 107.7.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bc:22:8c:65:f7:1f:a4:01:43:05:fe:1e:37:f1:d2:76:c9: 77:91:12:8f:07:0c:2c:70:52:95:b6:d5:fb:db:93:64:ff:f0: 8f:be:cd:43:14:39:19:cb:ca:98:26:d4:f3:fa:0d:47:af:8a: 89:06:1e:cc:74:36:a0:26:7b:08:46:38:91:84:3d:ca:fe:86: 68:75:f2:8c:39:e3:9f:c3:f7:91:3f:4c:c0:d4:91:11:52:c1: f0:69:6d:6f:fd:62:6c:f5:33:43:ba:83:cc:f2:49:b5:92:e0: a4:fc:b9:d2:7f:42:09:c3:ac:d3:f3:6b:c6:bd:7e:03:c2:c9: f5:ee:a3:86:14:b5:0e:6f:95:cb:e5:04:68:fc:19:3c:77:8e: d6:64:ca:3f:cd:b1:9a:3b:f0:72:6e:82:8a:35:c3:db:45:20: 55:d5:f0:4e:b3:f8:1b:1b:d9:00:b1:06:28:f7:df:c3:a9:e1: ba:59:8c:c9:7c:29:92:65:8e:e7:a9:4f:fe:e3:63:fd:8f:52: 62:fe:81:7c:61:f7:93:ac:c7:50:d2:56:1c:c2:cf:01:23:76: b0:ab:e4:3a:7e:37:62:73:da:49:4b:bd:cb:9e:1c:45:79:49: 33:07:68:01:0c:97:99:d7:ec:32:25:fa:34:62:a1:52:77:69: 77:51:a4:09 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxShVrlysOf+QFXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTU0OTAyODktZThkZC00YjJiLTljMmEtNzFmMTI5NWQ2YWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6t+c/Cck8Qe/nduqCfhaHaCfgTxey2wPY5t Ex3UsRvhyHMTiz4HYgt6GsYELgUcnNQi7UXG7K/fYY0DB6gZjZ8p8/sjso0BdJJ2 A0gYLvETwSa1BPqzlytCW3cSU58PJ2wyH23VaiCV5XSWbtDGhchEpQGsUw7ON4FN Ss2dUbPQ3MO+cYmqlv3gSYaw9kCIwe1JDiXyEolWC3BtaPTnqnKAcrcOgAm0awUl 3qGNsQyGWhEXI1FoA13AdddmjREcgSMnhXURSEM50QLsDhuV+pWIvtPxm5mBkXpg X3HmW6Fs2ZTxXnaeBMSSURTvhJIzHNguzXElAY0j4kE2NcfBbQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPAp4cMpwh7jj+rSgFchCg6zj5NPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2RkM2RhOTEtZjUyMi0z N2Y5LTliZTUtNTI3OGFlNGZmZGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAawcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASLwijGX3H6QBQwX+Hjfx0nbJd5ESjwcMLHBSlbbV+9uTZP/wj77NQxQ5 GcvKmCbU8/oNR6+KiQYezHQ2oCZ7CEY4kYQ9yv6GaHXyjDnjn8P3kT9MwNSREVLB 8Gltb/1ibPUzQ7qDzPJJtZLgpPy50n9CCcOs0/Nrxr1+A8LJ9e6jhhS1Dm+Vy+UE aPwZPHeO1mTKP82xmjvwcm6CijXD20UgVdXwTrP4GxvZALEGKPffw6nhulmMyXwp kmWO56lP/uNj/Y9SYv6BfGH3k6zHUNJWHMLPASN2sKvkOn43YnPaSUu9y54cRXlJ MwdoAQyXmdfsMiX6NGKhUndpd1GkCQ== -----END CERTIFICATE-----Generated at Sat May 10 19:44:19 2025 by rpki-client