$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa File: a0faf63f-7c57-3279-8a19-b5c4db997e94.roa (raw, json) Hash identifier: S0S1yzmuyP5sKMnTT6FRrapasvHPkBubYiWtlJ2veN8= Subject key identifier: E2:30:30:96:0B:F7:E1:A9:DF:01:3A:A5:3C:4C:3D:57:4F:04:D3:F4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B9AA09F10DB723C1EF680700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.40.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:09:f1:0d:b7:23:c1:ef:68:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=9b1d9dcc-1ff2-4f34-980c-686412159af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:03:0b:84:b8:06:2b:99:27:1c:e4:e0:58:47: b4:ae:3b:65:3f:43:bd:82:1a:97:2d:b3:fe:8d:2b: 72:04:fe:1a:a7:08:84:b0:0d:48:46:2d:bd:7b:54: 13:3d:86:b5:24:c1:03:ad:49:bc:17:49:09:dc:e4: ae:91:a3:d4:12:2d:62:5c:ef:2e:66:80:25:89:8d: 4d:dc:29:03:ea:22:7c:60:92:eb:f8:ab:bc:28:19: d9:19:de:be:c7:06:46:66:ab:74:a9:06:a5:0b:ea: e8:86:a7:96:b0:24:cf:af:da:6f:51:4d:8e:97:ff: b8:a1:5c:db:75:cd:3b:d2:e7:ee:07:62:c1:48:c6: b2:5b:fd:07:3f:f3:76:e9:32:3b:d4:ec:8e:ed:30: 2b:48:40:45:7a:1d:9d:67:cf:3c:07:f3:45:7e:c1: bc:3c:db:36:34:b4:8e:87:e9:94:2e:9a:5a:91:92: 33:4e:94:af:04:c6:32:e0:cb:e6:09:ba:24:64:bc: 91:20:83:c6:65:d0:c5:10:7f:6f:13:5e:56:34:fb: d0:91:47:ab:f0:1f:22:cb:8b:4a:03:02:56:d2:bb: 76:0b:52:71:5e:dd:b8:ea:ee:c8:58:5d:5b:cd:d8: 0d:7e:89:41:fb:7e:b6:28:fa:72:c6:fd:21:ca:10: 6c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:30:30:96:0B:F7:E1:A9:DF:01:3A:A5:3C:4C:3D:57:4F:04:D3:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a0faf63f-7c57-3279-8a19-b5c4db997e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:89:a9:6b:98:d0:04:7d:c9:16:f1:c0:03:67:29:c8:be:29: ee:b0:1b:a8:c4:ee:6f:56:b6:1b:99:07:fe:ff:07:f1:9a:c3: 0c:d6:07:a7:a5:41:33:6a:64:ed:24:cb:e4:86:c0:d0:9c:d1: 97:dd:58:68:2c:5d:f4:d8:48:e9:6a:45:8f:34:6e:7f:a8:72: 5c:c9:b3:bd:94:c2:4a:a5:61:16:c5:a7:41:08:00:ae:74:87: 15:d8:5a:67:86:3c:58:e2:29:0f:e2:88:22:0b:a9:de:0c:df: eb:5f:d6:87:17:9d:4d:21:72:8e:89:8e:24:fc:96:fa:45:e3: fc:f1:dc:4c:7a:9d:6a:f7:02:af:e2:2f:96:77:a0:98:18:91: f4:2d:30:8b:aa:83:0d:1b:8c:b5:3e:f7:85:77:b8:83:65:2c: 43:8c:f6:2c:86:65:b0:6d:be:37:07:e1:54:d7:19:d0:f4:1c: 1f:ab:f6:12:7d:81:34:d0:d3:ae:d8:c9:d9:22:32:4f:13:f5: ed:c7:ef:eb:5e:c3:17:95:20:d2:b6:61:43:12:da:7e:76:3d: d1:dc:ef:f3:51:cc:42:d6:c6:ce:bb:d3:f2:6d:16:1f:15:f0: 4c:a6:a3:ef:5c:e6:cb:44:d0:74:f9:ba:47:a3:d1:09:e7:1a: 7c:80:e2:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgnxDbcjwe9oBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk OWIxZDlkY2MtMWZmMi00ZjM0LTk4MGMtNjg2NDEyMTU5YWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAMLhLgGK5knHOTgWEe0rjtlP0O9ghqXLbP+ jStyBP4apwiEsA1IRi29e1QTPYa1JMEDrUm8F0kJ3OSukaPUEi1iXO8uZoAliY1N 3CkD6iJ8YJLr+Ku8KBnZGd6+xwZGZqt0qQalC+rohqeWsCTPr9pvUU2Ol/+4oVzb dc070ufuB2LBSMayW/0HP/N26TI71OyO7TArSEBFeh2dZ888B/NFfsG8PNs2NLSO h+mULppakZIzTpSvBMYy4MvmCbokZLyRIIPGZdDFEH9vE15WNPvQkUer8B8iy4tK AwJW0rt2C1JxXt246u7IWF1bzdgNfolB+362KPpyxv0hyhBs7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIwMJYL9+Gp3wE6pTxMPVdPBNP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTBmYWY2M2YtN2M1Ny0z Mjc5LThhMTktYjVjNGRiOTk3ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqJqWuY0AR9yRbxwANnKci+Ke6wG6jE7m9WthuZB/7/B/GawwzWB6el QTNqZO0ky+SGwNCc0ZfdWGgsXfTYSOlqRY80bn+oclzJs72UwkqlYRbFp0EIAK50 hxXYWmeGPFjiKQ/iiCILqd4M3+tf1ocXnU0hco6JjiT8lvpF4/zx3Ex6nWr3Aq/i L5Z3oJgYkfQtMIuqgw0bjLU+94V3uINlLEOM9iyGZbBtvjcH4VTXGdD0HB+r9hJ9 gTTQ067YydkiMk8T9e3H7+tewxeVINK2YUMS2n52PdHc7/NRzELWxs670/JtFh8V 8Eymo+9c5stE0HT5ukej0QnnGnyA4rE= -----END CERTIFICATE-----Generated at Sat May 10 13:14:37 2025 by rpki-client