$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df69c9e2-6958-3ece-a6ee-f92a49fd889d.roa File: df69c9e2-6958-3ece-a6ee-f92a49fd889d.roa (raw, json) Hash identifier: IeYRCAj/XFjIsKbodFEf2VneaxlMOxUnPM7KojdCbrA= Subject key identifier: 42:2A:B6:5C:5F:2E:48:C0:5B:9A:8C:B0:70:A1:65:36:68:51:38:A2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A42B83A49A1EA2DBE2940 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df69c9e2-6958-3ece-a6ee-f92a49fd889d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 207.106.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:42:b8:3a:49:a1:ea:2d:be:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=550ab870-bd35-4641-b1bc-685515876b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9e:65:05:4d:87:0c:6a:f3:7a:b2:e9:62:34: 26:44:6a:66:48:49:25:7e:ea:5a:ab:2a:b3:bc:63: 15:8c:c5:62:d5:55:16:41:25:c8:98:9a:bf:76:de: 67:12:45:cd:c5:17:a9:af:d9:be:fe:3c:3d:b4:2e: 0d:0f:3f:63:3c:2a:3a:b0:8b:8d:cc:03:2c:b4:68: 03:67:45:9d:c3:f7:60:da:98:8f:fe:65:8e:3a:66: b7:e1:b6:6e:17:46:5a:c2:99:a3:78:7a:11:2a:f1: e7:59:0b:d1:55:96:72:29:98:5c:87:1b:1a:80:5b: 77:95:1a:5c:c2:ab:84:75:5d:29:d0:b0:58:c4:7f: 8d:8b:93:8e:ad:60:38:dc:90:1e:d5:f8:d4:f3:3d: 17:90:df:ac:f0:9a:12:68:81:0e:8e:40:49:8b:44: 44:3c:ad:dc:d3:bc:e4:40:69:85:ff:eb:b5:54:aa: 5a:3d:14:2d:6e:c9:57:e2:76:68:04:b3:d5:b4:26: 91:ad:93:55:ad:63:19:d9:8b:5f:d7:ce:96:da:a1: e2:8f:9d:81:6c:b8:44:6b:62:24:e5:40:82:94:1c: 96:e8:88:36:69:08:0a:58:1e:e3:f8:1a:01:45:e8: f4:47:e1:ee:7d:5e:92:d8:f8:15:06:cd:48:94:0a: 5f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2A:B6:5C:5F:2E:48:C0:5B:9A:8C:B0:70:A1:65:36:68:51:38:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/df69c9e2-6958-3ece-a6ee-f92a49fd889d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.106.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ef:4e:9b:e6:a3:40:63:db:81:b2:98:bf:f9:33:cb:4c:af: 4f:0f:ca:f2:52:ef:5d:c8:99:8b:fd:8e:66:de:3d:8d:46:40: 68:cb:53:0b:1e:e1:f0:64:5e:9d:0b:77:ae:97:d7:fb:92:37: d8:ea:4a:8c:a4:ed:41:df:6e:89:f5:05:00:b2:2f:5f:53:59: e1:75:ab:1c:e8:1b:c6:25:07:f0:dd:89:28:99:33:ef:0a:98: 2c:43:80:a0:54:3d:72:b1:0a:a9:07:99:ee:61:fb:c0:b0:18: 7b:c2:6c:b0:73:82:ea:9e:df:d7:0a:bc:7e:75:bd:fd:66:d1: bc:a9:2c:67:86:c2:22:74:d4:40:00:0b:69:bc:f7:bd:db:60: 90:d0:9f:76:b3:67:cd:56:64:6b:c9:30:e2:19:96:46:13:d0: 49:95:22:e7:54:d6:af:44:f2:d8:9c:1e:1e:f8:5b:21:b3:8c: bf:56:b2:60:fb:32:6a:bb:9c:37:fd:da:07:b8:61:8d:6a:a1: ea:42:72:15:5b:6c:91:dd:a1:32:3e:de:18:a5:12:10:9a:44: 86:af:2f:d8:90:bc:06:8b:ec:de:46:6d:af:cf:23:f2:6c:47: 65:a0:2a:10:28:3d:1e:60:23:88:e2:4a:d2:fa:98:b8:ee:d6: 92:58:22:de -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmxSkK4Okmh6i2+KUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NTUwYWI4NzAtYmQzNS00NjQxLWIxYmMtNjg1NTE1ODc2YjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp5lBU2HDGrzerLpYjQmRGpmSEklfupaqyqz vGMVjMVi1VUWQSXImJq/dt5nEkXNxRepr9m+/jw9tC4NDz9jPCo6sIuNzAMstGgD Z0Wdw/dg2piP/mWOOma34bZuF0ZawpmjeHoRKvHnWQvRVZZyKZhchxsagFt3lRpc wquEdV0p0LBYxH+Ni5OOrWA43JAe1fjU8z0XkN+s8JoSaIEOjkBJi0REPK3c07zk QGmF/+u1VKpaPRQtbslX4nZoBLPVtCaRrZNVrWMZ2Ytf186W2qHij52BbLhEa2Ik 5UCClByW6Ig2aQgKWB7j+BoBRej0R+HufV6S2PgVBs1IlApf7wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEIqtlxfLkjAW5qMsHChZTZoUTiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGY2OWM5ZTItNjk1OC0z ZWNlLWE2ZWUtZjkyYTQ5ZmQ4ODlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAz2owVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAa+9Om+ajQGPbgbKYv/kzy0yvTw/K8lLvXciZi/2OZt49jUZAaMtTCx7h 8GRenQt3rpfX+5I32OpKjKTtQd9uifUFALIvX1NZ4XWrHOgbxiUH8N2JKJkz7wqY LEOAoFQ9crEKqQeZ7mH7wLAYe8JssHOC6p7f1wq8fnW9/WbRvKksZ4bCInTUQAAL abz3vdtgkNCfdrNnzVZka8kw4hmWRhPQSZUi51TWr0Ty2JweHvhbIbOMv1ayYPsy arucN/3aB7hhjWqh6kJyFVtskd2hMj7eGKUSEJpEhq8v2JC8Bovs3kZtr88j8mxH ZaAqECg9HmAjiOJK0vqYuO7Wklgi3g== -----END CERTIFICATE-----Generated at Fri May 9 02:54:36 2025 by rpki-client