$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdf3a957-fff8-3c1a-b02a-2c8342762040.roa File: fdf3a957-fff8-3c1a-b02a-2c8342762040.roa (raw, json) Hash identifier: oL9unCzKBTMWNJ11h7t7UPU7tgmrmwVgxCdIX9o8Cz0= Subject key identifier: 79:EF:87:65:C7:01:39:6C:51:AC:31:8A:56:0F:34:47:08:CF:00:9F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A2107F0BE5EBB04B5A660 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdf3a957-fff8-3c1a-b02a-2c8342762040.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7349 IP address blocks: 207.10.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:21:07:f0:be:5e:bb:04:b5:a6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=9709bdd8-054a-4bdf-a343-f9298698e2f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f1:16:82:6d:4d:d1:dc:fe:38:b2:0e:ff:f6: a5:88:18:b1:53:70:ae:d0:7a:a4:c3:b9:d0:74:4d: 7b:07:41:4e:6a:bb:95:1d:d1:ea:4a:86:2f:f9:a4: 2f:e8:cb:c5:99:e7:f5:2f:03:c2:cb:98:a2:79:dd: 13:93:c0:a2:8e:2b:32:48:63:26:58:c4:5f:18:36: 8f:4d:f4:7c:5f:ff:65:5b:77:fd:26:b2:17:99:6e: 06:c0:63:a6:b6:30:09:b7:2f:c2:20:5f:40:ac:ac: 56:af:be:48:9b:22:90:70:c9:0c:de:e6:0e:93:53: e9:13:d7:84:e0:49:94:bb:4e:d8:8f:da:27:44:72: da:f8:3e:45:b1:e3:9d:a9:ac:e7:6f:b0:bb:ec:cf: 18:e4:84:3d:d8:18:c8:9d:05:6e:f9:8b:1c:da:5c: 46:9a:75:96:6e:93:bb:1e:b7:79:65:2e:b0:6d:2f: 30:66:ed:7c:bc:10:0e:c7:cc:23:e3:bb:be:dd:84: fc:8a:93:14:80:ef:6b:fc:5f:ea:70:ee:af:13:b6: d8:4c:a8:42:b7:c2:a5:0f:74:ab:ab:33:74:dc:87: be:69:14:db:2f:14:59:1d:d9:1a:88:0e:c8:93:0d: 69:c1:df:ee:51:57:b5:23:3a:6f:3a:21:bf:6c:c3: cd:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:EF:87:65:C7:01:39:6C:51:AC:31:8A:56:0F:34:47:08:CF:00:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fdf3a957-fff8-3c1a-b02a-2c8342762040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.10.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:03:ab:93:ca:0b:64:ac:73:ed:e3:aa:80:56:0d:bd:d5:a2: 3f:6c:e3:49:6f:03:27:28:fd:bc:63:6d:9e:c0:73:98:dd:4f: ef:b6:2d:c5:b6:84:be:f9:28:64:03:4c:73:1c:9e:25:86:00: db:87:98:87:71:97:01:61:35:34:90:3f:8f:65:b5:e9:44:be: 24:85:1d:b5:93:bf:77:63:4a:95:fe:54:b1:c4:63:02:bc:65: 2d:01:b2:40:1f:87:fd:76:71:21:c3:d5:d9:25:21:a7:ba:be: 6e:f9:ed:81:e0:1f:9d:12:5c:b2:ac:60:eb:31:79:7a:d9:4a: b7:24:12:be:17:de:98:71:ba:47:2b:81:4b:1d:77:cd:29:5b: 1c:fa:8a:ba:53:90:f8:fe:bf:de:f0:bd:4c:ec:67:0a:1d:bd: 17:d7:10:f6:49:75:03:84:20:f5:be:3a:45:03:11:de:3b:19: 14:60:e1:5d:e1:84:5f:ec:82:c5:03:1e:4a:5a:40:7e:cd:8b: df:e1:a0:68:84:11:da:5a:e5:5d:23:ee:91:10:e6:0f:ea:b4: 75:42:44:e7:50:9f:ee:cb:ad:aa:85:f0:a9:5b:aa:77:9a:13: d8:b6:6c:4e:a2:56:5e:ad:5d:2a:86:04:46:87:ef:1f:3d:55: fc:75:45:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSiEH8L5euwS1pmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTcwOWJkZDgtMDU0YS00YmRmLWEzNDMtZjkyOTg2OThlMmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufEWgm1N0dz+OLIO//aliBixU3Cu0Hqkw7nQ dE17B0FOaruVHdHqSoYv+aQv6MvFmef1LwPCy5iied0Tk8CijisySGMmWMRfGDaP TfR8X/9lW3f9JrIXmW4GwGOmtjAJty/CIF9ArKxWr75ImyKQcMkM3uYOk1PpE9eE 4EmUu07Yj9onRHLa+D5FseOdqaznb7C77M8Y5IQ92BjInQVu+Ysc2lxGmnWWbpO7 Hrd5ZS6wbS8wZu18vBAOx8wj47u+3YT8ipMUgO9r/F/qcO6vE7bYTKhCt8KlD3Sr qzN03Ie+aRTbLxRZHdkaiA7Ikw1pwd/uUVe1IzpvOiG/bMPNEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnvh2XHATlsUawxilYPNEcIzwCfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmRmM2E5NTctZmZmOC0z YzFhLWIwMmEtMmM4MzQyNzYyMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzwqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJADq5PKC2Ssc+3jqoBWDb3Voj9s40lvAyco/bxjbZ7Ac5jdT++2LcW2 hL75KGQDTHMcniWGANuHmIdxlwFhNTSQP49ltelEviSFHbWTv3djSpX+VLHEYwK8 ZS0BskAfh/12cSHD1dklIae6vm757YHgH50SXLKsYOsxeXrZSrckEr4X3phxukcr gUsdd80pWxz6irpTkPj+v97wvUzsZwodvRfXEPZJdQOEIPW+OkUDEd47GRRg4V3h hF/sgsUDHkpaQH7Ni9/hoGiEEdpa5V0j7pEQ5g/qtHVCROdQn+7LraqF8Klbqnea E9i2bE6iVl6tXSqGBEaH7x89Vfx1ReE= -----END CERTIFICATE-----Generated at Sat May 10 18:48:54 2025 by rpki-client