$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa File: d7b45522-19e4-3b2e-845e-1856072f9fd4.roa (raw, json) Hash identifier: hblflJ8G2qMvWCYTCP9fPbK4r5djnFyaReksTCMqj3E= Subject key identifier: 7F:4F:65:6A:1E:55:37:54:75:BB:94:95:5D:DB:23:26:0A:BE:83:3A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4443FA439D7E8E3C6380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 209.156.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:44:43:fa:43:9d:7e:8e:3c:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=ccd20a45-8107-4fa4-8461-e56d9473c4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:cf:84:9a:b8:ec:f9:dc:19:fb:e3:78:93: cd:22:d5:35:5d:f3:eb:b7:c0:72:eb:46:a0:31:50: 74:c6:a3:2a:a2:8a:f2:3c:8e:0e:4b:9d:b9:2c:26: 6f:f9:a1:75:a3:23:7f:a9:18:66:2d:3a:38:91:ad: 50:9d:09:b6:d9:51:06:c6:f8:51:08:23:08:ef:27: a4:ce:88:db:f8:66:6a:da:ba:5e:66:1b:ea:eb:39: 29:bf:df:2b:69:ba:3f:6e:8d:57:48:d1:d5:68:d7: e3:5a:1e:59:5d:ff:4c:3c:d7:a1:bc:d0:96:d3:bf: 05:14:e4:65:da:9a:f0:51:12:5a:89:8c:e0:cc:38: 88:29:8b:cf:53:85:9b:78:47:19:1a:a3:59:4e:09: 1c:3d:34:5e:5f:a7:d9:4f:61:cf:7f:c9:f8:bb:c6: 30:3e:b6:0f:49:d0:5f:c8:32:ce:6a:58:87:a7:fc: f4:d0:c7:c4:6e:16:c8:62:e9:5b:e9:ef:f3:19:2c: 50:67:c8:32:0b:fa:ac:08:70:66:32:c4:32:28:95: 78:0d:7f:55:4b:35:6a:ab:00:b1:62:a5:61:22:59: 8a:31:f0:a1:9c:66:ab:79:00:12:9b:7a:d1:ae:60: 4a:06:3a:6e:dc:66:d8:91:2f:05:71:9f:22:de:ab: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:4F:65:6A:1E:55:37:54:75:BB:94:95:5D:DB:23:26:0A:BE:83:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d7b45522-19e4-3b2e-845e-1856072f9fd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 209.156.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4e:8a:23:e5:87:35:3e:c1:4d:6d:80:ba:34:d5:94:9f:31: fe:a8:76:3c:ed:e1:e7:14:fb:c3:5f:32:e9:fc:69:19:cf:e6: 53:fa:0e:4d:da:53:00:04:9a:bf:e0:72:9b:23:1f:94:7e:f0: 1f:2b:21:07:5f:bb:6b:fb:e2:29:b8:b0:0e:18:64:09:75:15: a7:f5:b2:c5:41:a1:d0:05:13:df:51:8c:60:06:e8:b7:91:ff: 7c:ef:1c:52:45:51:68:2a:72:c3:68:36:50:9d:77:fc:4d:8e: 92:d2:46:d9:27:25:82:d3:a4:68:d4:d1:c6:da:72:d3:89:d8: 14:5d:25:d2:8a:06:e0:14:24:40:4d:d1:8e:39:c1:db:29:c0: 27:c1:b1:de:50:3f:44:6d:8e:e2:70:67:61:2e:37:d6:44:e6: bd:8e:2d:f5:fa:df:7b:0f:9e:73:de:4a:23:4e:01:cf:a5:cf: 8b:40:35:29:54:2a:49:84:ca:7b:60:9c:00:74:3c:69:87:27: 50:c6:94:50:ee:75:9d:1d:1b:8a:a1:e8:88:6b:5c:bb:c6:80: f8:35:5d:8a:74:93:08:97:d2:00:12:99:2e:c3:f4:f3:41:b3: c9:01:84:51:50:e5:d6:55:0c:53:4e:13:f3:1b:6b:7f:56:63: 1f:6f:61:4b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSkRD+kOdfo48Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk Y2NkMjBhNDUtODEwNy00ZmE0LTg0NjEtZTU2ZDk0NzNjNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBbPhJq47PncGfvjeJPNItU1XfPrt8By60ag MVB0xqMqooryPI4OS525LCZv+aF1oyN/qRhmLTo4ka1QnQm22VEGxvhRCCMI7yek zojb+GZq2rpeZhvq6zkpv98rabo/bo1XSNHVaNfjWh5ZXf9MPNehvNCW078FFORl 2prwURJaiYzgzDiIKYvPU4WbeEcZGqNZTgkcPTReX6fZT2HPf8n4u8YwPrYPSdBf yDLOaliHp/z00MfEbhbIYulb6e/zGSxQZ8gyC/qsCHBmMsQyKJV4DX9VSzVqqwCx YqVhIlmKMfChnGareQASm3rRrmBKBjpu3GbYkS8FcZ8i3qsrawIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH9PZWoeVTdUdbuUlV3bIyYKvoM6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDdiNDU1MjItMTllNC0z YjJlLTg0NWUtMTg1NjA3MmY5ZmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0ZwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAB06KI+WHNT7BTW2AujTVlJ8x/qh2PO3h5xT7w18y6fxpGc/mU/oOTdpT AASav+BymyMflH7wHyshB1+7a/viKbiwDhhkCXUVp/WyxUGh0AUT31GMYAbot5H/ fO8cUkVRaCpyw2g2UJ13/E2OktJG2SclgtOkaNTRxtpy04nYFF0l0ooG4BQkQE3R jjnB2ynAJ8Gx3lA/RG2O4nBnYS431kTmvY4t9frfew+ec95KI04Bz6XPi0A1KVQq SYTKe2CcAHQ8aYcnUMaUUO51nR0biqHoiGtcu8aA+DVdinSTCJfSABKZLsP080Gz yQGEUVDl1lUMU04T8xtrf1ZjH29hSw== -----END CERTIFICATE-----Generated at Fri May 9 02:46:04 2025 by rpki-client