$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f89adaa8-1f59-3437-b799-0b16e759f5a8.roa File: f89adaa8-1f59-3437-b799-0b16e759f5a8.roa (raw, json) Hash identifier: r/oDl4pGErAV1Ng2QxJMn16+L2I+d/KH9SJnC/H2HB4= Subject key identifier: D4:A3:E3:FD:96:3B:B2:66:DD:6F:5F:88:DA:AE:99:E9:31:62:B3:B6 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3C472694C94A054884E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f89adaa8-1f59-3437-b799-0b16e759f5a8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 69.40.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3c:47:26:94:c9:4a:05:48:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=30400c96-c6a2-4bfd-9154-b859a6c94fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8d:17:55:e9:72:fd:23:2a:80:f8:42:6d:5b: c9:da:26:d8:9c:47:c5:a6:aa:f6:4c:c4:4a:41:b6: 70:d7:21:5c:cf:35:fd:c7:6f:55:2d:cb:ac:25:64: cf:b0:fe:cd:49:a7:31:0a:83:dc:0e:b7:6c:74:78: a1:a9:d9:a0:3a:01:68:69:ab:67:0d:51:5b:56:02: 6a:a6:1a:2e:c3:8a:b6:c5:67:e1:0f:b5:76:bc:ac: cb:b0:cd:51:b3:d9:cd:c3:b4:07:2b:61:ea:3d:14: 52:d8:5a:9c:04:c1:1a:fa:5c:1c:93:6b:81:db:24: dc:a3:01:cf:d4:8d:07:56:1c:c3:6a:9f:c3:d3:31: 82:74:ee:f8:14:1f:f7:67:d0:4c:1f:4c:a4:5d:13: b5:45:2c:4d:f5:99:eb:12:2a:59:6b:fd:ea:f1:62: 7c:d2:73:97:c8:fe:cd:cc:e6:09:2a:86:50:23:5b: d4:2f:3c:10:84:3c:06:1f:4e:9f:b0:7b:b2:38:5a: 28:52:f7:69:21:c7:81:0b:d5:47:b4:d9:d6:de:92: 35:ef:69:96:e1:1e:4c:18:5f:3a:14:5f:29:7a:6f: 88:7b:62:5a:c5:cc:92:39:94:b5:a9:1a:ca:d7:c4: 9d:4f:60:1b:4b:f9:83:c3:e0:19:3d:66:fe:f9:5e: fa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A3:E3:FD:96:3B:B2:66:DD:6F:5F:88:DA:AE:99:E9:31:62:B3:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f89adaa8-1f59-3437-b799-0b16e759f5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e7:b1:4e:02:a9:52:69:87:b2:25:0d:78:72:24:5b:03:50: 3a:ff:f6:6f:08:fb:81:98:1d:2b:11:c7:0a:69:b9:40:5b:15: ac:70:0a:af:a7:2e:20:9b:fd:0a:5e:b3:35:c7:58:f4:84:de: de:6d:c6:4e:a0:11:f8:68:59:26:00:8f:2b:a9:a3:93:47:b8: 1c:41:d0:50:56:1b:98:4f:a5:29:af:b3:dd:50:06:f3:5a:74: 51:7a:51:a1:4c:ff:53:f7:c3:62:1d:e0:84:98:b2:ca:85:82: a6:e3:79:6e:19:b1:cd:64:c6:14:8b:c7:5c:cb:57:56:24:13: a4:ce:64:87:c6:98:d2:11:a7:a4:b3:06:b0:c0:ac:c9:05:a5: e5:5a:5c:fb:cf:99:79:1a:4b:89:89:14:1d:fb:c7:77:d5:3e: 48:47:ae:88:24:8f:ce:7b:c0:11:48:c7:60:eb:c6:30:7c:7d: 13:e7:8e:83:0d:ce:0a:84:3e:b7:87:7b:47:d1:6b:71:a7:e2: 0c:75:27:b9:f9:de:dd:e5:5a:9f:48:56:0d:d5:f6:97:7c:ca: eb:16:78:94:de:00:33:02:33:04:86:e9:e8:1e:f0:7f:df:af: b6:56:fe:00:ca:a8:26:1d:c2:14:9e:43:ee:3b:50:0d:e1:5b: 30:40:39:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjxHJpTJSgVIhOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk MzA0MDBjOTYtYzZhMi00YmZkLTkxNTQtYjg1OWE2Yzk0ZmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6I0XVely/SMqgPhCbVvJ2ibYnEfFpqr2TMRK QbZw1yFczzX9x29VLcusJWTPsP7NSacxCoPcDrdsdHihqdmgOgFoaatnDVFbVgJq phouw4q2xWfhD7V2vKzLsM1Rs9nNw7QHK2HqPRRS2FqcBMEa+lwck2uB2yTcowHP 1I0HVhzDap/D0zGCdO74FB/3Z9BMH0ykXRO1RSxN9ZnrEipZa/3q8WJ80nOXyP7N zOYJKoZQI1vULzwQhDwGH06fsHuyOFooUvdpIceBC9VHtNnW3pI172mW4R5MGF86 FF8pem+Ie2JaxcySOZS1qRrK18SdT2AbS/mDw+AZPWb++V76gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSj4/2WO7Jm3W9fiNqumekxYrO2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjg5YWRhYTgtMWY1OS0z NDM3LWI3OTktMGIxNmU3NTlmNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERSjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfnsU4CqVJph7IlDXhyJFsDUDr/9m8I+4GYHSsRxwppuUBbFaxwCq+n LiCb/QpeszXHWPSE3t5txk6gEfhoWSYAjyupo5NHuBxB0FBWG5hPpSmvs91QBvNa dFF6UaFM/1P3w2Id4ISYssqFgqbjeW4Zsc1kxhSLx1zLV1YkE6TOZIfGmNIRp6Sz BrDArMkFpeVaXPvPmXkaS4mJFB37x3fVPkhHrogkj857wBFIx2DrxjB8fRPnjoMN zgqEPreHe0fRa3Gn4gx1J7n53t3lWp9IVg3V9pd8yusWeJTeADMCMwSG6ege8H/f r7ZW/gDKqCYdwhSeQ+47UA3hWzBAOWk= -----END CERTIFICATE-----Generated at Thu May 8 03:20:30 2025 by rpki-client