$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa File: edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa (raw, json) Hash identifier: 7mpCWHCnxxFS1/aa+9kAIdO+reOaa7j/KY1Q22RUsQc= Subject key identifier: CD:67:CB:00:70:FF:73:E9:54:D1:BF:5C:0E:94:FB:52:72:F9:85:93 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B149F878061D30E0A63C7800 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 207.155.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:f8:78:06:1d:30:e0:a6:3c:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=06327c53-ce61-4b55-a559-a360c6637af5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e8:43:35:76:39:54:8b:89:d1:e0:ab:09:fa: b1:5b:29:94:6a:d7:3b:6f:64:54:7c:03:ce:ac:ac: c4:c6:8f:fe:e3:f1:18:33:ee:10:0c:38:10:da:a0: 71:b2:46:f4:1c:28:e7:5e:a4:07:12:bc:14:bc:0b: 9d:89:20:1d:bb:0e:f6:6a:d9:9c:ba:9e:ba:1d:2c: 69:79:31:ae:36:69:11:e6:13:da:a9:47:00:9f:8b: c1:ad:2b:eb:d0:56:42:f6:50:95:16:d9:cd:0f:f5: 17:6c:b0:dc:94:76:85:2e:f2:0e:7c:ff:3f:a5:33: 64:9f:eb:11:cb:b1:1b:f1:71:f6:72:19:5a:b9:90: 22:51:32:6a:ea:a3:c6:9e:fc:ec:52:61:9f:98:fe: 1a:be:15:10:09:61:f5:8e:2d:d4:3d:2f:1d:12:86: 6e:e0:d8:ef:7e:27:f5:dc:cb:1c:21:dd:63:ac:76: a4:0e:8a:9c:44:2a:11:1f:8d:1a:ef:fc:6b:be:e2: 8e:6f:ce:ed:50:20:b1:7c:b1:12:43:84:3d:20:b4: 67:0a:b1:a1:7e:ef:d5:46:e6:78:f2:9b:ad:d8:3d: b5:ae:bf:48:72:21:5a:58:d0:15:fb:64:3d:b4:79: 6d:22:fa:83:bd:e8:b2:01:7d:d9:02:c0:43:22:65: c3:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:67:CB:00:70:FF:73:E9:54:D1:BF:5C:0E:94:FB:52:72:F9:85:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/edf5e9f2-6c92-33b4-abff-a2fecb2ca306.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.155.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:c4:c7:3d:f8:16:ad:b1:48:e7:69:33:eb:b8:c2:84:a6:29: d1:bb:9c:f5:ca:dd:2c:79:2e:9a:69:0b:04:35:e4:16:b3:af: bb:5e:0c:14:f5:11:48:b2:da:65:bc:f6:55:28:5b:45:72:4c: 8c:0f:0a:c3:c8:0a:24:a6:bf:91:d1:fb:0d:06:31:b0:8e:55: 81:1e:89:00:fd:78:75:62:fc:80:e7:17:37:36:47:ec:9a:3d: f9:51:cf:49:80:5d:d0:28:da:cf:33:c2:f2:4d:4c:f5:ed:45: f8:cd:b0:d8:62:b4:51:39:84:8e:ce:1e:13:46:dc:16:1d:0b: a5:25:33:0a:48:91:30:2b:84:5b:2e:f9:60:4b:fc:fd:0d:f5: 3f:d9:9c:96:04:b2:2b:bc:1b:18:46:10:a9:2e:2f:f9:3f:de: 7d:b9:90:b1:5c:06:46:a4:28:34:d3:7b:ba:03:98:97:43:97: 44:55:a7:75:91:b6:e9:82:c3:ff:49:cc:a1:11:55:82:9e:3e: f9:a2:1d:16:ed:91:38:fd:c4:5d:ca:d8:97:13:e0:3d:a0:e2: a4:34:05:ee:a2:14:7b:13:31:4f:2c:ce:54:7f:50:d9:8f:99: 9f:62:c4:ec:4b:11:5b:a7:79:ff:89:ba:e8:e7:b7:32:2e:1a: f9:e1:56:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSfh4Bh0w4KY8eAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MDYzMjdjNTMtY2U2MS00YjU1LWE1NTktYTM2MGM2NjM3YWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApehDNXY5VIuJ0eCrCfqxWymUatc7b2RUfAPO rKzExo/+4/EYM+4QDDgQ2qBxskb0HCjnXqQHErwUvAudiSAduw72atmcup66HSxp eTGuNmkR5hPaqUcAn4vBrSvr0FZC9lCVFtnND/UXbLDclHaFLvIOfP8/pTNkn+sR y7Eb8XH2chlauZAiUTJq6qPGnvzsUmGfmP4avhUQCWH1ji3UPS8dEoZu4Njvfif1 3MscId1jrHakDoqcRCoRH40a7/xrvuKOb87tUCCxfLESQ4Q9ILRnCrGhfu/VRuZ4 8put2D21rr9IciFaWNAV+2Q9tHltIvqDveiyAX3ZAsBDImXDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1nywBw/3PpVNG/XA6U+1Jy+YWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZWRmNWU5ZjItNmM5Mi0z M2I0LWFiZmYtYTJmZWNiMmNhMzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz5sIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfExz34Fq2xSOdpM+u4woSmKdG7nPXK3Sx5LpppCwQ15Bazr7teDBT1 EUiy2mW89lUoW0VyTIwPCsPICiSmv5HR+w0GMbCOVYEeiQD9eHVi/IDnFzc2R+ya PflRz0mAXdAo2s8zwvJNTPXtRfjNsNhitFE5hI7OHhNG3BYdC6UlMwpIkTArhFsu +WBL/P0N9T/ZnJYEsiu8GxhGEKkuL/k/3n25kLFcBkakKDTTe7oDmJdDl0RVp3WR tumCw/9JzKERVYKePvmiHRbtkTj9xF3K2JcT4D2g4qQ0Be6iFHsTMU8szlR/UNmP mZ9ixOxLEVunef+JuujntzIuGvnhVnY= -----END CERTIFICATE-----Generated at Fri May 9 02:43:38 2025 by rpki-client