$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa File: 7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa (raw, json) Hash identifier: oTeJE7pedB3qilELV6jU+UdZ8llPF7SNNQirTBD0oJI= Subject key identifier: 94:1F:5A:FD:B3:B3:F1:59:16:7A:2E:34:29:06:36:32:87:AF:45:3C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A27EEA3509C7302AA0230 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 54682 IP address blocks: 74.8.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:27:ee:a3:50:9c:73:02:aa:02:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=5ff3ce03-4f2f-4be1-b27e-fb818c93e810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8e:38:f3:f7:22:e6:31:6b:9b:2b:d2:f6:e4: 73:e2:21:f3:54:d0:4b:10:dd:7f:5f:88:98:84:45: f9:46:13:07:45:d9:e9:07:52:d9:b2:cc:7f:9e:50: 30:d6:69:e6:8d:5e:a0:e5:53:a6:32:ee:c1:04:c4: 28:87:3b:c8:f4:a4:fb:95:ca:4e:8b:c9:d9:d0:de: ff:0e:a4:b8:03:08:f9:ab:62:42:9e:b8:4b:de:1a: 92:33:a2:f6:a3:8e:d4:29:1d:29:06:c0:42:3e:c9: 59:d3:43:ae:5c:e1:55:37:81:4f:08:61:88:f2:5b: ba:04:72:8f:53:65:01:ff:ec:5d:c9:1c:24:75:c6: d9:f4:85:43:83:1f:e7:75:02:0c:9f:bd:f1:bd:c9: 85:93:ff:8c:8d:91:b6:1e:20:3c:fd:82:a3:d7:6f: a2:aa:32:33:f0:82:12:d5:34:fb:97:1b:65:bd:cd: f2:42:eb:21:50:95:56:bb:69:43:ca:9f:6a:9d:3b: 4c:1e:26:7b:4d:fd:c6:e5:91:61:f3:cf:9b:ea:d5: 2b:81:2c:d5:3c:62:66:5d:a0:50:5f:e6:f1:b6:94: 20:c7:e3:cf:e0:29:a7:7d:be:de:f0:cd:89:54:32: 3a:92:21:41:a9:d0:42:87:f6:4d:41:7d:8e:21:3a: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1F:5A:FD:B3:B3:F1:59:16:7A:2E:34:29:06:36:32:87:AF:45:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e28c4d6-fcb7-3244-adde-798e094a2d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:07:a7:70:fa:db:a1:f1:7d:2a:bb:56:f9:28:a9:63:94:d1: f4:dc:3e:c7:ce:07:1d:f4:90:5c:cf:ec:0a:8d:4c:4c:53:c6: 45:8d:a8:ac:7e:28:6b:fb:e9:97:a6:35:8a:15:f2:52:1c:b6: 10:91:23:c8:33:57:b0:c8:c2:9d:16:50:41:54:fc:62:d4:45: b3:35:d8:29:fa:6e:7b:52:67:d6:2f:ec:36:c9:7d:b7:ac:82: c5:34:68:f7:e9:36:17:bc:db:78:38:44:18:c1:2d:bc:6b:4f: 5d:b4:1a:21:57:bf:73:ab:df:d2:0d:54:88:bb:cc:f4:b0:42: 9b:4b:1a:e1:f5:29:d4:7c:c8:04:65:30:6c:0f:c1:18:76:1e: 63:41:95:94:b8:c1:0f:b8:05:b9:db:3a:9d:8b:e9:e8:53:5c: ff:55:16:b0:d8:31:53:49:e1:8f:5a:c7:c1:dd:b9:db:30:ca: 4b:9d:1f:35:3c:e1:bd:8f:e3:10:44:55:b9:63:06:21:1e:54: 0a:c8:3b:86:f0:70:48:d2:ce:36:3f:3d:36:b3:62:8e:7f:a3: 23:d6:bc:ea:b2:17:49:3b:65:e7:30:04:38:0e:31:62:27:ce: 64:d3:01:67:a2:2f:8f:d5:06:bf:2e:e6:ee:32:ee:0a:95:ef: 6e:87:4d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSifuo1CccwKqAjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NWZmM2NlMDMtNGYyZi00YmUxLWIyN2UtZmI4MThjOTNlODEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4448/ci5jFrmyvS9uRz4iHzVNBLEN1/X4iY hEX5RhMHRdnpB1LZssx/nlAw1mnmjV6g5VOmMu7BBMQohzvI9KT7lcpOi8nZ0N7/ DqS4Awj5q2JCnrhL3hqSM6L2o47UKR0pBsBCPslZ00OuXOFVN4FPCGGI8lu6BHKP U2UB/+xdyRwkdcbZ9IVDgx/ndQIMn73xvcmFk/+MjZG2HiA8/YKj12+iqjIz8IIS 1TT7lxtlvc3yQushUJVWu2lDyp9qnTtMHiZ7Tf3G5ZFh88+b6tUrgSzVPGJmXaBQ X+bxtpQgx+PP4Cmnfb7e8M2JVDI6kiFBqdBCh/ZNQX2OITpUawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQfWv2zs/FZFnouNCkGNjKHr0U8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2UyOGM0ZDYtZmNiNy0z MjQ0LWFkZGUtNzk4ZTA5NGEyZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgjRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACYHp3D626HxfSq7VvkoqWOU0fTcPsfOBx30kFzP7AqNTExTxkWNqKx+ KGv76ZemNYoV8lIcthCRI8gzV7DIwp0WUEFU/GLURbM12Cn6bntSZ9Yv7DbJfbes gsU0aPfpNhe823g4RBjBLbxrT120GiFXv3Or39INVIi7zPSwQptLGuH1KdR8yARl MGwPwRh2HmNBlZS4wQ+4BbnbOp2L6ehTXP9VFrDYMVNJ4Y9ax8HdudswykudHzU8 4b2P4xBEVbljBiEeVArIO4bwcEjSzjY/PTazYo5/oyPWvOqyF0k7ZecwBDgOMWIn zmTTAWeiL4/VBr8u5u4y7gqV726HTXQ= -----END CERTIFICATE-----Generated at Sat May 10 12:36:11 2025 by rpki-client