$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa File: c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa (raw, json) Hash identifier: Y0oUHacTnHj42m7UY4zXyr0ySCCv2QtF1xHi2i4+H68= Subject key identifier: 2C:0C:0C:73:E5:73:B3:A2:0A:20:6F:DE:C3:DE:40:C2:73:19:C9:33 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A18D00930F059DCBB97F0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.92.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:18:d0:09:30:f0:59:dc:bb:97:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=98d6913b-665f-464b-b7a9-e63dff6e11f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:57:bb:45:5e:af:fa:57:8f:f9:cc:4e:e9: 20:1b:98:85:91:bc:bf:11:28:33:4e:a8:ef:b4:c1: 45:56:ff:59:43:13:d8:3c:38:58:ff:f7:fa:27:97: da:f9:05:fd:2f:0c:f4:d1:a1:f0:a1:53:00:e5:3a: 90:b8:df:86:4d:ac:a1:26:fe:16:26:c6:79:ca:dd: 2d:2d:6a:52:56:f7:70:77:ec:c4:f8:48:5d:0d:e6: 24:64:15:58:df:65:3a:63:3d:cb:c7:24:8b:39:77: 86:31:c5:a3:ca:f0:5d:66:30:ce:7f:44:0f:27:ff: fe:87:fb:27:db:d2:38:2d:6e:6e:d4:9b:4e:43:5f: d3:39:6e:c6:6e:05:ac:4b:48:c2:98:06:b1:7f:96: 55:17:3f:9b:24:14:bb:75:3b:1c:4e:bb:75:48:3f: 97:ae:c2:83:c0:ce:93:18:ca:3d:10:45:aa:fd:5c: 8e:77:c2:1a:04:08:ed:b6:9e:bd:53:6c:7a:f4:0d: 9b:b5:1f:9c:0e:f8:c4:ec:93:7e:95:8a:47:9b:8f: 3a:66:af:c6:64:fe:23:ea:f1:d0:49:e5:7e:85:be: 8d:5c:7c:40:89:bf:c8:8a:c2:2e:38:99:64:30:8a: ad:f8:99:e3:4b:5a:d3:19:15:e1:40:63:52:a9:50: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0C:0C:73:E5:73:B3:A2:0A:20:6F:DE:C3:DE:40:C2:73:19:C9:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c7c09719-8a7b-380d-b72e-f3a01bc2b650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.92.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:d6:6e:33:33:38:dc:21:da:07:52:59:51:bc:93:30:a5:69: ba:db:98:b3:50:b4:92:f1:fa:52:82:62:30:a2:e4:df:8d:f2: c1:cb:71:88:c2:18:80:45:4a:db:9f:a8:57:50:fc:8e:f2:bd: af:19:fe:4e:9f:b0:19:26:76:88:6a:b2:e2:b5:75:46:45:e2: 98:27:74:62:d1:97:62:04:33:bd:b6:41:54:60:74:83:fe:04: 6d:77:0e:17:42:5e:cb:c9:da:67:a3:da:ff:6c:37:1c:e7:78: 1e:8b:37:03:a0:c7:fe:68:6e:5a:2d:20:63:74:d1:e2:83:b4: a2:2c:ed:6c:9a:46:0d:0b:ca:28:65:05:f8:dd:e0:4b:b7:9e: 7a:a3:5d:4c:a0:3b:24:6e:66:11:14:7e:f7:cd:42:2d:a1:59: 47:b9:66:54:9d:40:b9:5e:17:cd:a1:6c:20:5d:5e:f8:72:3d: bc:b2:b1:d6:19:72:af:62:93:f0:4a:fe:01:e1:22:0d:ad:18: 98:93:f1:5c:71:a1:d8:36:34:10:7f:8d:34:86:b0:a7:e2:21: 81:61:55:90:2c:03:44:25:2a:5a:c2:76:9a:04:af:af:13:56: cf:87:94:9e:39:96:21:c5:55:da:c8:a8:1b:5a:f9:fd:64:75: 8c:1b:d2:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShjQCTDwWdy7l/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OThkNjkxM2ItNjY1Zi00NjRiLWI3YTktZTYzZGZmNmUxMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRNXu0Ver/pXj/nMTukgG5iFkby/ESgzTqjv tMFFVv9ZQxPYPDhY//f6J5fa+QX9Lwz00aHwoVMA5TqQuN+GTayhJv4WJsZ5yt0t LWpSVvdwd+zE+EhdDeYkZBVY32U6Yz3LxySLOXeGMcWjyvBdZjDOf0QPJ//+h/sn 29I4LW5u1JtOQ1/TOW7GbgWsS0jCmAaxf5ZVFz+bJBS7dTscTrt1SD+XrsKDwM6T GMo9EEWq/VyOd8IaBAjttp69U2x69A2btR+cDvjE7JN+lYpHm486Zq/GZP4j6vHQ SeV+hb6NXHxAib/IisIuOJlkMIqt+JnjS1rTGRXhQGNSqVCi+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwMDHPlc7OiCiBv3sPeQMJzGckzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzdjMDk3MTktOGE3Yi0z ODBkLWI3MmUtZjNhMDFiYzJiNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0VwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE7WbjMzONwh2gdSWVG8kzClabrbmLNQtJLx+lKCYjCi5N+N8sHLcYjC GIBFStufqFdQ/I7yva8Z/k6fsBkmdohqsuK1dUZF4pgndGLRl2IEM722QVRgdIP+ BG13DhdCXsvJ2mej2v9sNxzneB6LNwOgx/5oblotIGN00eKDtKIs7WyaRg0Lyihl Bfjd4Eu3nnqjXUygOyRuZhEUfvfNQi2hWUe5ZlSdQLleF82hbCBdXvhyPbyysdYZ cq9ik/BK/gHhIg2tGJiT8Vxxodg2NBB/jTSGsKfiIYFhVZAsA0QlKlrCdpoEr68T Vs+HlJ45liHFVdrIqBta+f1kdYwb0t8= -----END CERTIFICATE-----Generated at Fri May 9 02:58:59 2025 by rpki-client