$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa File: db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa (raw, json) Hash identifier: L8LYwwIahrF0jhTxuVmwR8Zhd6FlaAPo0nyvrCWTpvg= Subject key identifier: D3:2E:08:29:1C:CE:9A:B5:DF:63:C7:1B:05:0C:23:FA:B7:E7:69:51 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A132C731C419773CF0900 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.40.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:13:2c:73:1c:41:97:73:cf:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=0ce213ec-6f23-478b-ae68-a92d7a1dbec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:2d:5b:54:d8:8c:d0:6c:ca:6a:6a:b5:33: 76:56:25:c8:f4:4b:c7:f0:50:36:48:84:be:0a:2e: c7:b0:79:73:f8:fd:b3:42:2d:8f:f7:c4:24:32:c9: a2:ce:92:77:36:c6:44:95:83:17:00:d4:98:f8:5e: 4e:75:b1:3a:49:08:25:d0:21:dd:f0:80:e1:7e:03: 61:ad:a0:dc:dc:87:1d:c3:fa:33:5d:94:29:22:fb: bf:92:84:98:5c:4f:c2:72:2f:78:81:28:d4:34:d3: 74:7d:4e:b9:7c:30:84:27:17:73:b7:66:85:5f:9f: 1b:41:78:3a:3d:97:8d:41:54:b2:09:78:82:e7:02: 6c:b0:0b:72:a9:a6:30:c4:88:22:5d:24:62:a4:af: 5f:43:0f:df:b1:5a:60:af:76:7e:1a:2e:21:62:7e: fd:b3:60:1b:ab:33:59:34:45:15:6c:c3:64:db:69: 2d:3e:1d:60:52:c6:a8:33:37:e0:c9:71:84:d4:9e: af:26:6d:4c:b0:63:62:8d:59:1f:23:29:7a:16:2f: 99:df:31:6c:22:53:7c:5b:d0:19:7d:22:a4:0f:af: ea:94:e9:14:99:4e:96:48:af:e0:b9:9a:2a:17:02: 1d:fa:6c:32:a0:49:8d:66:0a:33:a7:3e:0a:38:b4: 3b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2E:08:29:1C:CE:9A:B5:DF:63:C7:1B:05:0C:23:FA:B7:E7:69:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db9df8ab-2e0e-3ea2-9a79-08488cb001ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:d9:37:e9:85:b1:30:ca:c7:e8:d0:ca:6a:1b:db:27:9f:c2: 5a:8b:40:b1:3e:6d:b1:40:a0:3f:90:c9:23:26:56:1e:d8:fd: b4:4b:c3:3f:da:70:e9:71:11:c6:2c:16:c1:e9:e0:88:33:be: a5:01:f7:12:4b:de:a3:79:f9:2c:c8:61:dc:c1:cb:c6:37:3f: 4d:5d:5d:74:57:22:61:69:5d:88:ab:b2:d6:e3:4d:78:7f:73: f3:d3:df:1c:1d:c9:d1:3d:fb:00:d4:84:4d:4b:0f:80:91:17: 6a:18:7f:d1:db:30:7b:dc:42:61:83:44:fa:b4:3b:d6:54:2b: e4:9f:b7:46:6b:51:35:61:8e:39:2b:a4:8d:52:64:de:35:34: 10:c0:35:83:c1:ad:c2:51:6a:fc:56:ad:87:a5:de:ef:8f:23: f1:92:e6:88:30:7e:c3:f1:cc:76:49:80:c4:59:df:9f:88:ab: d6:ad:08:2a:06:ef:90:5d:f3:37:51:e5:90:e0:64:9f:4f:fa: 72:ae:26:a9:6a:14:f3:d6:92:83:2f:81:e0:f5:08:2b:3d:46: fa:d3:3f:ae:3c:00:c5:45:56:33:a2:21:31:1b:1d:57:d7:00: 69:54:54:37:49:94:49:a2:83:7d:7c:a5:47:4f:1b:e5:f0:98: 67:22:1d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShMscxxBl3PPCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MGNlMjEzZWMtNmYyMy00NzhiLWFlNjgtYTkyZDdhMWRiZWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy8tW1TYjNBsympqtTN2ViXI9EvH8FA2SIS+ Ci7HsHlz+P2zQi2P98QkMsmizpJ3NsZElYMXANSY+F5OdbE6SQgl0CHd8IDhfgNh raDc3Icdw/ozXZQpIvu/koSYXE/Cci94gSjUNNN0fU65fDCEJxdzt2aFX58bQXg6 PZeNQVSyCXiC5wJssAtyqaYwxIgiXSRipK9fQw/fsVpgr3Z+Gi4hYn79s2AbqzNZ NEUVbMNk22ktPh1gUsaoMzfgyXGE1J6vJm1MsGNijVkfIyl6Fi+Z3zFsIlN8W9AZ fSKkD6/qlOkUmU6WSK/guZoqFwId+mwyoEmNZgozpz4KOLQ7EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMuCCkczpq132PHGwUMI/q352lRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI5ZGY4YWItMmUwZS0z ZWEyLTlhNzktMDg0ODhjYjAwMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXZN+mFsTDKx+jQymob2yefwlqLQLE+bbFAoD+QySMmVh7Y/bRLwz/a cOlxEcYsFsHp4IgzvqUB9xJL3qN5+SzIYdzBy8Y3P01dXXRXImFpXYirstbjTXh/ c/PT3xwdydE9+wDUhE1LD4CRF2oYf9HbMHvcQmGDRPq0O9ZUK+Sft0ZrUTVhjjkr pI1SZN41NBDANYPBrcJRavxWrYel3u+PI/GS5ogwfsPxzHZJgMRZ35+Iq9atCCoG 75Bd8zdR5ZDgZJ9P+nKuJqlqFPPWkoMvgeD1CCs9RvrTP648AMVFVjOiITEbHVfX AGlUVDdJlEmig318pUdPG+XwmGciHQE= -----END CERTIFICATE-----Generated at Fri May 9 02:38:39 2025 by rpki-client