$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82f1d38b-6014-3887-bb40-ac974ba50d0f.roa File: 82f1d38b-6014-3887-bb40-ac974ba50d0f.roa (raw, json) Hash identifier: QoChsvjM9VHr7wABE05yZ3f91btQKtlJZ0yWdv6dh/Q= Subject key identifier: 91:2B:F3:33:16:37:6C:3C:8E:A4:3D:CF:90:B6:0B:CB:A8:90:99:B2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3C3B4269A576EAB9EF80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82f1d38b-6014-3887-bb40-ac974ba50d0f.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.40.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3c:3b:42:69:a5:76:ea:b9:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=b54ccf23-50a5-4ef0-b426-2b6cd7ddf53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c5:ba:fa:5d:6b:f7:dc:8e:e3:b3:e9:bb:3d: 1a:e9:ff:fa:3a:bd:26:db:42:0f:7e:4e:db:b8:da: b0:e5:32:6b:ca:0b:5e:51:c3:4c:ad:b1:c9:94:4e: e7:c3:1e:6f:b8:90:82:88:bd:53:b5:a4:69:fa:52: f9:61:ff:5a:c4:18:e3:23:f7:1d:8e:1a:a0:7c:d7: ff:13:5e:c7:9c:30:e7:f1:41:8f:b1:4c:ab:d3:e8: be:25:8b:d8:b0:77:55:17:05:61:09:cb:d2:05:cc: dc:c8:72:8c:37:24:88:23:ff:2b:65:f7:99:b5:d8: e8:83:03:a1:70:c6:36:19:34:2b:eb:b2:9b:78:17: 0a:45:be:38:87:50:b5:2c:2a:52:3d:40:72:36:2f: 5e:7e:b0:41:82:de:95:68:fd:a6:a3:60:e6:b7:0a: b0:4b:da:6c:95:3a:37:f3:ad:70:bb:7e:37:7c:66: 43:51:69:6e:e6:08:a7:21:17:7d:96:7b:5c:07:f5: a4:98:0d:cf:09:e5:2c:92:60:e4:30:83:7c:43:ca: 07:c0:75:9f:72:98:a0:b4:02:1d:af:84:7e:eb:85: 21:54:dd:98:ad:95:ab:f6:8e:d9:71:06:44:a8:c8: aa:65:28:40:89:da:9f:07:74:aa:1d:55:64:05:31: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:F3:33:16:37:6C:3C:8E:A4:3D:CF:90:B6:0B:CB:A8:90:99:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/82f1d38b-6014-3887-bb40-ac974ba50d0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:06:eb:dd:b2:09:f6:31:62:39:03:70:c6:e0:89:16:2d:8a: b2:9b:8f:ff:b8:76:bb:9b:af:69:1a:75:9e:b4:87:df:4a:9e: bb:cb:35:d1:6b:5b:ad:ca:d0:81:ee:55:03:9d:cf:f2:ff:ae: a2:80:02:12:f3:4a:48:79:1c:0f:dc:ed:98:e3:e5:08:88:05: 5b:1b:e3:be:40:41:d7:d6:f4:4f:ef:a5:85:4f:7c:9f:30:c5: 22:c1:28:52:4d:40:9e:12:7e:5f:70:c8:1b:2f:4f:f5:ee:be: 56:f8:09:74:4c:cd:90:f0:3e:71:66:f2:2c:c4:bd:16:5b:d7: 65:aa:88:71:04:f6:5e:01:f7:f5:da:4e:31:67:ab:67:68:c5: d4:2a:40:44:ed:ed:f6:64:90:da:bb:05:5b:95:d6:d7:45:f2: ea:82:59:89:5c:ce:5b:a6:5e:1d:00:91:36:de:e6:00:e1:cd: 88:fd:5e:93:4c:3e:0c:a1:58:81:02:f1:28:fb:28:96:63:81: a0:7b:dd:0f:34:db:9a:90:e6:1c:20:0b:51:d1:aa:43:dd:54: 62:94:32:e3:82:c5:cf:f8:ab:42:b4:fe:c6:bc:7e:d8:f1:0f: 41:36:45:00:00:45:f1:07:7f:b7:40:9c:0d:c0:57:69:47:a3: 72:13:b8:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjw7Qmmlduq574AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YjU0Y2NmMjMtNTBhNS00ZWYwLWI0MjYtMmI2Y2Q3ZGRmNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8W6+l1r99yO47Ppuz0a6f/6Or0m20IPfk7b uNqw5TJrygteUcNMrbHJlE7nwx5vuJCCiL1TtaRp+lL5Yf9axBjjI/cdjhqgfNf/ E17HnDDn8UGPsUyr0+i+JYvYsHdVFwVhCcvSBczcyHKMNySII/8rZfeZtdjogwOh cMY2GTQr67KbeBcKRb44h1C1LCpSPUByNi9efrBBgt6VaP2mo2DmtwqwS9pslTo3 861wu343fGZDUWlu5ginIRd9lntcB/WkmA3PCeUskmDkMIN8Q8oHwHWfcpigtAId r4R+64UhVN2YrZWr9o7ZcQZEqMiqZShAidqfB3SqHVVkBTH1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEr8zMWN2w8jqQ9z5C2C8uokJmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODJmMWQzOGItNjAxNC0z ODg3LWJiNDAtYWM5NzRiYTUwZDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSgoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEG692yCfYxYjkDcMbgiRYtirKbj/+4drubr2kadZ60h99KnrvLNdFr W63K0IHuVQOdz/L/rqKAAhLzSkh5HA/c7Zjj5QiIBVsb475AQdfW9E/vpYVPfJ8w xSLBKFJNQJ4Sfl9wyBsvT/Xuvlb4CXRMzZDwPnFm8izEvRZb12WqiHEE9l4B9/Xa TjFnq2doxdQqQETt7fZkkNq7BVuV1tdF8uqCWYlczlumXh0AkTbe5gDhzYj9XpNM PgyhWIEC8Sj7KJZjgaB73Q8025qQ5hwgC1HRqkPdVGKUMuOCxc/4q0K0/sa8ftjx D0E2RQAARfEHf7dAnA3AV2lHo3ITuBw= -----END CERTIFICATE-----Generated at Sun May 11 13:53:22 2025 by rpki-client