$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92aba7a4-ce5a-348e-a5c4-341a36d3ccff.roa File: 92aba7a4-ce5a-348e-a5c4-341a36d3ccff.roa (raw, json) Hash identifier: 7emOvu8UzLeS2ycKyJoZXmXf8YYf4jp68mHgG2yYZmU= Subject key identifier: 94:CB:83:99:92:BF:9A:AA:B3:F6:E9:93:FF:5F:58:F3:AF:22:3F:A4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149FDDFFBC55BCAFA4DF140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92aba7a4-ce5a-348e-a5c4-341a36d3ccff.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.66.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:fd:df:fb:c5:5b:ca:fa:4d:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f26fc9bd-e526-49a3-854b-b4ef7d68ea24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:45:4c:10:3a:96:de:45:d0:ef:d4:dc:40:7f: 11:1e:9c:04:9a:c1:31:79:e9:6b:d8:9e:b2:c3:4a: 48:59:b7:a6:04:a6:7b:5e:cc:8b:e3:92:80:d1:99: 2f:07:b6:39:5d:21:75:63:1b:f0:a6:b5:e3:db:36: d8:66:f6:ab:71:ca:1f:8f:85:37:03:c6:30:a7:6e: 3e:a3:57:59:b0:6c:fa:e1:78:ee:6c:4d:e8:64:12: 17:0d:f7:30:37:8c:10:78:08:01:fa:81:4f:bd:7e: 7c:af:9f:bb:ff:da:ad:63:a1:dd:26:d6:9f:f3:6a: fd:2e:cb:a7:23:a5:df:26:8a:a3:df:af:77:28:97: 90:5f:8c:b8:18:81:e4:23:df:94:30:b1:be:d4:5a: c9:0e:77:d0:b5:96:ac:ce:c5:8f:65:1c:ec:f1:59: 57:df:84:23:15:d9:55:8f:26:f9:51:c9:9d:6d:f9: f0:c4:df:8f:dc:d7:58:27:d7:dc:02:14:ac:1e:e6: 1f:2f:2e:64:89:3c:39:63:04:20:e0:13:2c:46:b4: f1:70:ce:e0:e2:86:e8:ab:0e:f7:d6:fc:44:c2:0b: 2a:98:67:23:1e:a2:57:60:0c:8d:0e:da:c4:24:15: 43:20:14:d3:58:cf:73:9c:f3:a9:88:f3:cb:7e:59: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:CB:83:99:92:BF:9A:AA:B3:F6:E9:93:FF:5F:58:F3:AF:22:3F:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/92aba7a4-ce5a-348e-a5c4-341a36d3ccff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.26.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:27:c9:7f:0d:d8:df:0b:0f:bb:68:08:6b:45:3e:04:49:9f: 05:85:9e:7c:c3:84:b6:4e:d0:47:5b:2f:c5:fc:93:40:b1:b8: ef:c2:fc:59:b7:70:e7:1d:33:3a:e9:56:91:01:00:c0:8f:46: 5a:fb:b4:f7:3f:98:91:fc:33:47:20:b6:ce:fa:ed:66:5d:73: e7:33:f8:d2:fe:88:9a:58:62:1e:b1:c8:62:39:93:bb:ee:72: 7b:96:44:3e:14:4c:24:61:a6:6c:8e:57:75:74:2b:5e:d0:29: 30:37:76:b9:c3:e1:2f:6f:ac:e2:90:0a:6e:bb:e8:69:df:a7: 2b:eb:0c:6e:27:6a:7e:27:9f:48:17:d1:31:6e:9c:d5:f7:e0: 0c:4d:c1:f4:83:9f:ab:7c:fb:1c:ef:91:43:2c:5a:53:d1:68: 1b:d9:2f:9c:7d:2c:a8:60:13:86:86:2b:9f:bd:41:7f:7a:3d: 85:4f:a1:04:46:7e:5e:8a:71:0d:b7:eb:16:7d:e7:ac:92:58: a0:7d:53:6c:d0:72:da:af:a9:6c:5c:c0:0b:fe:77:5f:b8:a8: a1:88:f9:54:1b:9d:f9:96:9a:ae:31:4c:13:ca:f7:13:0f:d0: 07:1b:31:df:9a:6e:13:80:87:27:32:8e:f9:74:3d:a5:34:1e: 93:11:3a:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSf3f+8VbyvpN8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjI2ZmM5YmQtZTUyNi00OWEzLTg1NGItYjRlZjdkNjhlYTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0VMEDqW3kXQ79TcQH8RHpwEmsExeelr2J6y w0pIWbemBKZ7XsyL45KA0ZkvB7Y5XSF1YxvwprXj2zbYZvarccofj4U3A8Ywp24+ o1dZsGz64XjubE3oZBIXDfcwN4wQeAgB+oFPvX58r5+7/9qtY6HdJtaf82r9Lsun I6XfJoqj3693KJeQX4y4GIHkI9+UMLG+1FrJDnfQtZaszsWPZRzs8VlX34QjFdlV jyb5UcmdbfnwxN+P3NdYJ9fcAhSsHuYfLy5kiTw5YwQg4BMsRrTxcM7g4oboqw73 1vxEwgsqmGcjHqJXYAyNDtrEJBVDIBTTWM9znPOpiPPLflkBvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTLg5mSv5qqs/bpk/9fWPOvIj+kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTJhYmE3YTQtY2U1YS0z NDhlLWE1YzQtMzQxYTM2ZDNjY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUIaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4nyX8N2N8LD7toCGtFPgRJnwWFnnzDhLZO0EdbL8X8k0CxuO/C/Fm3 cOcdMzrpVpEBAMCPRlr7tPc/mJH8M0cgts767WZdc+cz+NL+iJpYYh6xyGI5k7vu cnuWRD4UTCRhpmyOV3V0K17QKTA3drnD4S9vrOKQCm676GnfpyvrDG4nan4nn0gX 0TFunNX34AxNwfSDn6t8+xzvkUMsWlPRaBvZL5x9LKhgE4aGK5+9QX96PYVPoQRG fl6KcQ236xZ956ySWKB9U2zQctqvqWxcwAv+d1+4qKGI+VQbnfmWmq4xTBPK9xMP 0AcbMd+abhOAhycyjvl0PaU0HpMROqQ= -----END CERTIFICATE-----Generated at Sat May 10 02:50:12 2025 by rpki-client