$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa File: db1a757d-af18-3aaa-9e08-520d47c74438.roa (raw, json) Hash identifier: 8j4nuL2mjjZVlKoq7EfNsZHEtOoSbnhByxPbbPvq8wk= Subject key identifier: 01:7F:5D:62:45:CB:09:78:89:77:AD:D3:CF:53:8F:05:1F:15:A2:EA Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A4A4FA84FBD55C5BEFD20 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 29877 IP address blocks: 74.207.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:4a:4f:a8:4f:bd:55:c5:be:fd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=feab367f-0301-4c3d-89ef-68268efbf651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:79:69:78:42:37:d8:ea:6b:50:85:f2:87: 69:90:a4:be:88:4a:9f:6d:3d:05:39:66:50:b4:29: 58:48:a3:9b:bc:15:3d:8f:eb:d5:0e:a0:09:5b:6f: 89:4e:26:a6:59:38:28:20:4a:b5:fc:ef:d9:60:76: d8:a1:fe:e5:de:f4:e3:e8:ea:01:a5:4b:cd:4c:ae: f7:78:b7:4d:0f:e3:d0:ce:1e:76:11:93:39:e7:42: b6:77:1b:0b:ff:9a:ee:8d:33:ab:2c:25:da:c0:b4: e1:00:7f:8f:4b:49:1c:bb:6d:db:27:31:8e:88:5b: f9:7c:6e:82:c9:8c:47:27:49:08:be:a7:a1:dd:57: 9e:fa:b7:38:02:10:d4:a3:38:f0:81:f6:71:f7:27: 25:fa:a2:64:35:99:e6:a0:16:4b:a7:93:f8:41:a6: cd:06:65:8e:7e:ee:02:c5:66:27:be:57:da:c7:dd: b5:a4:09:ec:f2:ac:1f:4f:68:3a:f6:05:0f:46:f4: 53:6f:90:a1:16:a0:53:80:a0:db:88:47:e1:71:1b: 16:29:62:a0:43:e3:f5:8f:35:d3:dd:2d:db:c1:dc: 56:fc:ea:3a:01:92:d4:b6:d9:d1:6b:10:bb:c0:33: 7e:67:ad:65:e6:0c:1f:ae:4e:9b:db:b1:da:8c:52: be:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:7F:5D:62:45:CB:09:78:89:77:AD:D3:CF:53:8F:05:1F:15:A2:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db1a757d-af18-3aaa-9e08-520d47c74438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.207.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:28:98:bc:aa:19:91:9b:21:68:c6:fc:b1:56:6c:ec:ca:ca: bc:08:8d:c8:95:1a:35:69:92:49:6c:f8:74:fa:10:7f:49:19: 37:aa:d4:39:9c:bb:92:13:ee:72:20:db:5c:0b:5b:69:3c:58: 24:a6:dc:40:16:a0:97:06:68:02:98:93:d9:50:df:ac:b6:f8: d7:0c:2e:bb:6f:62:4f:f7:d7:1a:4e:2c:99:15:33:d2:37:c4: 9d:ea:2e:b3:e9:7e:38:5a:33:7b:ac:79:17:1c:d2:e5:ef:99: 9d:54:f9:00:e5:ef:04:6d:18:c0:d9:3f:b4:ec:f1:cf:18:c8: 40:fc:a9:b7:09:7a:31:cc:cc:ea:dd:e6:88:58:c2:4a:2d:bf: 5e:23:7a:ba:9d:85:60:2c:b7:61:53:64:79:98:01:27:49:8c: 86:0a:ac:a8:18:1b:fb:fd:38:d6:aa:d5:e8:34:79:8f:85:98: 44:6b:85:ec:f4:e8:4c:ba:ef:4c:3d:f6:f8:a7:c3:a8:49:a8: 9b:35:dc:14:b7:63:f5:b9:c2:af:47:9c:75:e4:00:83:f3:c1: c8:eb:44:10:95:e7:56:87:ea:29:b4:a1:5d:51:69:33:5f:6d: 8c:62:ed:5c:c1:e8:f9:2d:7b:76:9d:fd:39:70:64:3a:77:12: 38:95:c5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkpPqE+9VcW+/SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZmVhYjM2N2YtMDMwMS00YzNkLTg5ZWYtNjgyNjhlZmJmNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFF5aXhCN9jqa1CF8odpkKS+iEqfbT0FOWZQ tClYSKObvBU9j+vVDqAJW2+JTiamWTgoIEq1/O/ZYHbYof7l3vTj6OoBpUvNTK73 eLdND+PQzh52EZM550K2dxsL/5rujTOrLCXawLThAH+PS0kcu23bJzGOiFv5fG6C yYxHJ0kIvqeh3Vee+rc4AhDUozjwgfZx9ycl+qJkNZnmoBZLp5P4QabNBmWOfu4C xWYnvlfax921pAns8qwfT2g69gUPRvRTb5ChFqBTgKDbiEfhcRsWKWKgQ+P1jzXT 3S3bwdxW/Oo6AZLUttnRaxC7wDN+Z61l5gwfrk6b27HajFK+2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAF/XWJFywl4iXet089TjwUfFaLqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGIxYTc1N2QtYWYxOC0z YWFhLTllMDgtNTIwZDQ3Yzc0NDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDSs/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIomLyqGZGbIWjG/LFWbOzKyrwIjciVGjVpkkls+HT6EH9JGTeq1Dmc u5IT7nIg21wLW2k8WCSm3EAWoJcGaAKYk9lQ36y2+NcMLrtvYk/31xpOLJkVM9I3 xJ3qLrPpfjhaM3useRcc0uXvmZ1U+QDl7wRtGMDZP7Ts8c8YyED8qbcJejHMzOrd 5ohYwkotv14jerqdhWAst2FTZHmYASdJjIYKrKgYG/v9ONaq1eg0eY+FmERrhez0 6Ey670w99vinw6hJqJs13BS3Y/W5wq9HnHXkAIPzwcjrRBCV51aH6im0oV1RaTNf bYxi7VzB6Pkte3ad/TlwZDp3EjiVxVY= -----END CERTIFICATE-----Generated at Sat May 10 13:36:49 2025 by rpki-client