$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8988a5b0-dde6-3b33-98e3-be07b3292607.roa File: 8988a5b0-dde6-3b33-98e3-be07b3292607.roa (raw, json) Hash identifier: oUpVPxwmJYYEMj2DP1rynWhXixrM3RfGx/aWKjkr24M= Subject key identifier: A7:8C:84:89:80:D8:3C:87:ED:21:46:ED:A4:32:89:95:50:B1:3B:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A431B6A80A986DF4A63FA Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8988a5b0-dde6-3b33-98e3-be07b3292607.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 207.244.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:43:1b:6a:80:a9:86:df:4a:63:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=07936acc-1967-420e-a82f-486ec612d517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:09:cc:d9:a0:38:07:ab:78:b5:86:81:a5:06: 9d:51:5c:5d:d9:46:94:5e:51:bb:00:47:68:35:85: a4:85:22:0b:b5:06:30:a0:7f:c2:80:be:68:a0:16: dc:4b:64:69:cf:f9:30:e3:61:78:71:de:d1:e9:7e: 37:85:3f:37:01:34:8d:cf:72:17:57:6a:ee:00:a3: d2:3b:3e:33:34:ff:eb:df:5d:97:d2:22:40:64:9c: 1c:c1:b8:88:90:ee:2a:c4:51:19:71:2d:e9:cd:ef: 48:fc:c1:9a:1e:8b:e3:81:58:71:3e:db:e8:86:b7: 63:45:11:c3:53:12:b9:4a:e3:ce:77:17:a3:6d:df: 5a:da:43:5e:2f:e0:9b:1b:f3:2b:ce:57:2c:4e:47: f7:6a:f2:a8:cd:da:b6:90:08:90:90:ea:92:6a:4b: 38:5e:b9:9f:43:f2:b3:18:ad:bf:e7:bd:58:18:6e: fb:59:29:c7:20:8f:11:d2:94:a0:a1:27:77:4d:c1: 29:0c:a7:34:cf:5e:b6:c0:4d:a1:ac:21:77:ec:33: 6d:51:f8:cd:d5:09:95:2f:0b:b1:67:58:44:01:83: 52:ac:b3:1f:b7:1b:65:f7:8e:50:83:4b:a1:ad:1f: c4:f4:70:18:fb:e8:7b:18:bf:71:5b:8d:a3:d9:a8: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8C:84:89:80:D8:3C:87:ED:21:46:ED:A4:32:89:95:50:B1:3B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8988a5b0-dde6-3b33-98e3-be07b3292607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.244.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ff:6c:fb:0c:90:8f:95:90:5f:51:4b:30:ec:9f:b5:88:56: 6b:3b:f4:af:1d:6a:73:d8:e2:b1:01:40:fa:b7:4a:e8:73:f8: 3b:ec:7f:2a:e3:8f:c5:35:92:f7:ad:44:ba:57:6a:64:5e:b2: b5:12:e7:f0:8a:94:3f:51:f4:10:2d:c9:22:42:c3:f4:3a:05: 6c:48:ff:18:c0:53:87:41:a1:8a:a7:14:8a:34:57:8d:23:54: d5:2f:5d:73:4b:c7:8b:76:ee:28:6c:e9:d8:08:3a:a0:dd:1f: 45:83:1d:d4:95:70:16:2f:04:f1:9a:cb:92:c7:88:37:a2:b1: f8:8e:01:97:ed:35:0c:9c:36:15:18:c9:c7:5a:8a:c6:7c:25: 60:0f:27:f6:b4:da:87:57:a8:20:93:c3:e6:17:fc:74:63:5e: 91:d7:a6:c6:a9:6f:5d:e0:f4:de:2f:fa:88:29:8e:61:6e:17: 06:8d:98:2d:0c:fd:84:c7:ee:f3:2c:24:f4:75:27:09:7d:f8: 15:5d:95:45:65:17:22:89:a5:df:56:99:2d:f7:df:a0:77:47: 1e:30:38:ee:8c:75:0d:be:9b:5d:14:9b:cd:b3:6e:88:0d:6d: 25:c9:11:44:13:d4:22:ee:01:9e:71:55:ca:96:96:39:5e:b7: 2c:43:82:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkMbaoCpht9KY/owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDc5MzZhY2MtMTk2Ny00MjBlLWE4MmYtNDg2ZWM2MTJkNTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAnM2aA4B6t4tYaBpQadUVxd2UaUXlG7AEdo NYWkhSILtQYwoH/CgL5ooBbcS2Rpz/kw42F4cd7R6X43hT83ATSNz3IXV2ruAKPS Oz4zNP/r312X0iJAZJwcwbiIkO4qxFEZcS3pze9I/MGaHovjgVhxPtvohrdjRRHD UxK5SuPOdxejbd9a2kNeL+CbG/MrzlcsTkf3avKozdq2kAiQkOqSaks4XrmfQ/Kz GK2/571YGG77WSnHII8R0pSgoSd3TcEpDKc0z162wE2hrCF37DNtUfjN1QmVLwux Z1hEAYNSrLMftxtl945Qg0uhrR/E9HAY++h7GL9xW42j2ahZCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeMhImA2DyH7SFG7aQyiZVQsTsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvODk4OGE1YjAtZGRlNi0z YjMzLTk4ZTMtYmUwN2IzMjkyNjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz/SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD/bPsMkI+VkF9RSzDsn7WIVms79K8danPY4rEBQPq3Suhz+Dvsfyrj j8U1kvetRLpXamResrUS5/CKlD9R9BAtySJCw/Q6BWxI/xjAU4dBoYqnFIo0V40j VNUvXXNLx4t27ihs6dgIOqDdH0WDHdSVcBYvBPGay5LHiDeisfiOAZftNQycNhUY ycdaisZ8JWAPJ/a02odXqCCTw+YX/HRjXpHXpsapb13g9N4v+ogpjmFuFwaNmC0M /YTH7vMsJPR1Jwl9+BVdlUVlFyKJpd9WmS3336B3Rx4wOO6MdQ2+m10Um82zbogN bSXJEUQT1CLuAZ5xVcqWljletyxDgrk= -----END CERTIFICATE-----Generated at Sat May 10 13:28:24 2025 by rpki-client