$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa File: ad644014-d396-3311-b8f5-c0be900b9032.roa (raw, json) Hash identifier: Ky+VCaejX6+QC8KjNxY8Ii1gZ87CknfhGEcHAkK/Qp0= Subject key identifier: 86:D3:B9:66:1C:CE:5C:8C:9C:8D:CC:22:AD:8D:6A:49:19:20:AD:7C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605E7E08D85C8A9E313980 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 207.91.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5e:7e:08:d8:5c:8a:9e:31:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=83963737-339a-4c59-aa6b-540b81fca76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:31:67:b4:6f:db:35:26:e8:8c:47:5d:b6:29: 3d:cb:f3:be:be:3c:27:e6:80:d8:70:87:df:80:23: 17:52:b0:2e:69:6d:a8:40:1d:5b:9f:10:2b:5e:bb: 7e:ca:cc:6a:7e:70:8b:bd:ce:71:ca:8b:f4:5e:4e: 9d:b4:28:4b:c5:73:ea:f7:81:6b:46:98:92:1d:ea: 5f:54:50:29:c6:f4:15:a7:10:a7:c7:47:43:6d:4f: 04:b2:eb:73:f3:29:7d:11:5d:ca:3f:9d:ab:dd:c1: b8:2b:73:2a:ee:32:c9:46:17:f9:d9:0d:7c:c2:bb: 54:e1:53:cf:35:14:e5:62:b0:04:51:5e:e1:5b:7a: 9e:6f:7f:c7:9b:ba:17:0f:1d:db:5d:81:0e:97:19: 70:d2:6b:99:57:0b:40:38:a1:c9:de:33:8c:42:ff: 8a:fc:0d:f9:74:e1:3c:27:bb:5d:f9:c2:d1:a9:c7: 33:1f:98:0d:e0:e4:9f:13:b0:7c:c7:26:f1:f3:f9: c1:4e:54:a7:3c:d5:5c:24:75:f4:fe:b7:28:5f:fc: f2:53:a8:ca:8d:26:64:30:d6:20:b6:2a:64:ee:01: 35:0a:f4:09:a4:05:7e:b2:54:1e:2a:7d:59:17:82: 52:42:fd:8a:34:db:7c:69:14:14:da:ce:0c:35:5e: 5e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D3:B9:66:1C:CE:5C:8C:9C:8D:CC:22:AD:8D:6A:49:19:20:AD:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ad644014-d396-3311-b8f5-c0be900b9032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:54:0d:a9:d0:0b:43:7b:02:be:b2:11:4e:46:f6:36:3d:78: be:40:a3:81:b6:11:5b:9c:48:39:4f:97:92:15:79:58:66:bf: 2e:83:68:c8:c7:99:a9:e1:e2:e2:85:16:2e:61:45:4d:ea:15: c8:8f:01:cd:b8:b3:d6:2e:07:26:69:3a:77:4a:89:25:08:f0: fd:dd:58:11:84:e5:f1:18:d0:fb:8a:0c:0f:e8:20:a8:54:83: 11:fe:a9:60:6f:63:fa:b6:b4:59:78:9c:f1:4f:ec:c9:24:cd: b0:9b:4d:8c:ce:59:5f:76:d7:ff:53:9c:05:db:9b:17:c3:20: 54:18:de:23:f4:6e:5d:5d:b8:25:cb:08:66:62:39:a4:0e:65: 1e:ea:74:5d:1e:a7:d6:1e:3e:f5:b5:01:94:e8:19:6c:a3:68: 2c:f2:be:6e:c9:44:dd:6a:fa:f1:58:a7:c5:2d:13:49:e7:a2: c6:3a:ed:5e:06:1f:0e:83:b4:87:36:ab:3f:93:f4:c0:16:fb: 3a:c4:f9:94:17:f7:ce:fb:c5:96:76:d9:cc:72:c6:c0:2f:56: 9a:25:10:7f:65:f1:2f:c7:ef:c2:0f:71:48:a4:29:73:05:d2: c9:05:20:15:26:9b:86:45:da:ca:e3:28:7b:e5:a8:43:2c:df: ed:46:a9:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF5+CNhcip4xOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk ODM5NjM3MzctMzM5YS00YzU5LWFhNmItNTQwYjgxZmNhNzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTFntG/bNSbojEddtik9y/O+vjwn5oDYcIff gCMXUrAuaW2oQB1bnxArXrt+ysxqfnCLvc5xyov0Xk6dtChLxXPq94FrRpiSHepf VFApxvQVpxCnx0dDbU8Esutz8yl9EV3KP52r3cG4K3Mq7jLJRhf52Q18wrtU4VPP NRTlYrAEUV7hW3qeb3/Hm7oXDx3bXYEOlxlw0muZVwtAOKHJ3jOMQv+K/A35dOE8 J7td+cLRqcczH5gN4OSfE7B8xybx8/nBTlSnPNVcJHX0/rcoX/zyU6jKjSZkMNYg tipk7gE1CvQJpAV+slQeKn1ZF4JSQv2KNNt8aRQU2s4MNV5e9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbTuWYczlyMnI3MIq2NakkZIK18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWQ2NDQwMTQtZDM5Ni0z MzExLWI4ZjUtYzBiZTkwMGI5MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz1swMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9UDanQC0N7Ar6yEU5G9jY9eL5Ao4G2EVucSDlPl5IVeVhmvy6DaMjH manh4uKFFi5hRU3qFciPAc24s9YuByZpOndKiSUI8P3dWBGE5fEY0PuKDA/oIKhU gxH+qWBvY/q2tFl4nPFP7MkkzbCbTYzOWV921/9TnAXbmxfDIFQY3iP0bl1duCXL CGZiOaQOZR7qdF0ep9YePvW1AZToGWyjaCzyvm7JRN1q+vFYp8UtE0nnosY67V4G Hw6DtIc2qz+T9MAW+zrE+ZQX9877xZZ22cxyxsAvVpolEH9l8S/H78IPcUikKXMF 0skFIBUmm4ZF2srjKHvlqEMs3+1Gqao= -----END CERTIFICATE-----Generated at Tue Jul 1 18:28:50 2025 by rpki-client