$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa File: 48e35af3-3f19-327b-a342-5b5e29f9df5f.roa (raw, json) Hash identifier: IFLVzxUMC9AfU0o7RNyTUiqOiLxe0i/6jp8xCqi8f08= Subject key identifier: D7:AF:C6:06:8D:4F:A2:9B:94:2B:09:1A:7A:2A:C8:F9:BF:E6:8C:30 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D4306CADD980DDCAC9975600 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 207.91.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:6c:ad:d9:80:dd:ca:c9:97:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=6bdd81c2-6390-4bc7-ac04-4d10bd70ef60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:02:56:d4:15:66:08:d6:0c:d2:a0:12:12: cc:b5:6f:e0:c8:01:96:f3:67:da:13:84:9a:8d:1e: 54:1b:86:33:90:c7:55:77:f2:71:9b:b3:6f:56:c6: 0e:a7:30:38:b4:5c:1c:cd:e2:97:ea:c2:a6:84:1f: d7:ed:84:35:91:18:c6:60:89:b3:6a:88:a3:d5:15: eb:8d:7c:7f:c6:0c:74:f7:68:ea:8c:65:00:b8:14: fd:e8:68:a2:16:3b:a5:50:be:43:42:fe:2b:eb:57: da:59:a7:c5:96:29:b1:b8:37:48:80:7f:00:80:02: cd:5c:3e:cf:46:1e:ef:c4:e1:08:a6:ad:d5:f3:c6: 06:50:95:71:d7:58:a3:d7:9b:24:11:2a:7e:64:b4: f4:ad:51:be:2c:2f:4f:b8:08:c4:18:6d:ce:27:c1: 46:94:9e:a8:ce:16:e5:c7:9c:77:c7:9f:90:79:9b: 06:6c:d2:d5:11:0f:5f:31:80:d4:5a:b2:4e:f2:75: e4:4b:d3:6c:93:84:db:bd:e2:28:a2:18:66:6d:9b: be:f3:ed:ce:b8:aa:53:03:61:29:e3:e9:27:85:b6: 46:2d:c8:35:51:39:b6:ad:40:8d:16:c2:1b:ed:8c: 36:fe:41:05:7b:f9:87:ba:b9:b0:98:68:f1:d6:66: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AF:C6:06:8D:4F:A2:9B:94:2B:09:1A:7A:2A:C8:F9:BF:E6:8C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/48e35af3-3f19-327b-a342-5b5e29f9df5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 207.91.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:41:f6:1d:e3:77:cc:a6:ee:1f:ba:e8:4e:89:de:1b:21:0a: 27:ca:df:f0:ae:05:37:aa:88:45:85:56:e4:ed:b7:18:dd:3c: a9:9a:f9:9e:a5:9b:d2:81:f8:f8:1c:09:78:8b:a3:57:7d:0d: b6:52:93:37:a4:cb:1d:eb:97:0f:a8:be:5a:c2:58:16:e0:d7: fe:a2:8a:ee:37:85:d6:ee:25:58:64:02:a5:29:02:7a:ce:75: 49:76:80:9e:84:b6:ef:e5:0b:7e:e7:e9:45:f2:94:a8:09:77: d9:9c:92:cb:6e:ef:38:08:48:96:b4:e7:a1:21:61:64:72:14: 5d:6c:3c:90:da:06:61:6b:c8:67:80:61:4d:17:a4:da:c6:7e: f7:d4:3c:50:bd:94:a1:4c:96:1d:60:ca:b5:24:ad:48:50:c3: eb:4b:5d:02:63:61:52:a5:e5:e1:8b:e2:e2:e2:db:37:ec:54: 9f:e7:83:14:41:87:5a:6e:2b:6a:7e:e7:32:bc:7c:e0:c1:3d: 43:c3:f6:63:de:34:92:88:31:20:0f:73:4a:e1:80:19:dd:27: ee:6c:45:b8:66:a7:e5:f4:9f:cb:fd:79:0f:da:b1:af:e9:0c: 1a:28:96:31:63:b7:7e:5d:ac:7c:46:98:4e:7f:80:5c:28:83: 5d:09:f8:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGyt2YDdysmXVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NmJkZDgxYzItNjM5MC00YmM3LWFjMDQtNGQxMGJkNzBlZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiQCVtQVZgjWDNKgEhLMtW/gyAGW82faE4Sa jR5UG4YzkMdVd/Jxm7NvVsYOpzA4tFwczeKX6sKmhB/X7YQ1kRjGYImzaoij1RXr jXx/xgx092jqjGUAuBT96GiiFjulUL5DQv4r61faWafFlimxuDdIgH8AgALNXD7P Rh7vxOEIpq3V88YGUJVx11ij15skESp+ZLT0rVG+LC9PuAjEGG3OJ8FGlJ6ozhbl x5x3x5+QeZsGbNLVEQ9fMYDUWrJO8nXkS9Nsk4TbveIoohhmbZu+8+3OuKpTA2Ep 4+knhbZGLcg1UTm2rUCNFsIb7Yw2/kEFe/mHurmwmGjx1mZFawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNevxgaNT6KblCsJGnoqyPm/5owwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNDhlMzVhZjMtM2YxOS0z MjdiLWEzNDItNWI1ZTI5ZjlkZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz1sQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxB9h3jd8ym7h+66E6J3hshCifK3/CuBTeqiEWFVuTttxjdPKma+Z6l m9KB+PgcCXiLo1d9DbZSkzekyx3rlw+ovlrCWBbg1/6iiu43hdbuJVhkAqUpAnrO dUl2gJ6Etu/lC37n6UXylKgJd9mckstu7zgISJa056EhYWRyFF1sPJDaBmFryGeA YU0XpNrGfvfUPFC9lKFMlh1gyrUkrUhQw+tLXQJjYVKl5eGL4uLi2zfsVJ/ngxRB h1puK2p+5zK8fODBPUPD9mPeNJKIMSAPc0rhgBndJ+5sRbhmp+X0n8v9eQ/asa/p DBooljFjt35drHxGmE5/gFwog10J+Pc= -----END CERTIFICATE-----Generated at Sun Jun 15 19:53:04 2025 by rpki-client