$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad2259b-bf26-35d7-b0ce-2b8e3639b756.roa File: dad2259b-bf26-35d7-b0ce-2b8e3639b756.roa (raw, json) Hash identifier: MMeV5WtTWT5v+huyl+ceiLjY6Gb7Q5Lx/Jxfejyb/6I= Subject key identifier: FC:37:E4:24:54:32:8E:95:99:E4:44:5E:21:E3:86:DD:19:F1:B9:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848D0ABBF06F4D1AE3ECAF04480 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad2259b-bf26-35d7-b0ce-2b8e3639b756.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 7029 IP address blocks: 69.40.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:bf:06:f4:d1:ae:3e:ca:f0:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=52d03d9e-2f9f-4549-a30a-49bffe01a6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:02:7a:31:9c:4a:d6:55:b0:86:e2:8f:31: 65:92:55:d9:32:ba:a8:4d:fc:89:10:d0:64:dc:ce: 35:0c:1f:25:a7:b8:b1:fb:89:48:30:1d:d2:e3:bb: 86:5b:20:63:df:67:77:8e:db:e2:6c:bb:80:9b:04: dd:3d:4a:20:e1:c3:31:ce:77:6d:2f:47:a7:d3:83: f9:49:48:a4:8a:d4:de:4b:34:81:71:8e:c0:ff:60: 29:b2:3e:18:5a:86:26:13:7c:aa:42:68:9f:fd:ba: 60:23:c5:59:61:7a:3e:f8:29:a6:a7:6f:49:fb:8c: 58:98:59:c0:f5:32:be:3b:d1:57:0f:bb:51:34:b8: b7:fd:cc:fa:eb:f5:ff:23:26:c9:33:af:e0:ca:cb: 2b:37:6f:c8:b5:f8:1b:02:41:16:98:85:fd:bb:45: d8:6b:fb:3e:2e:bc:b1:1a:48:c7:a8:7b:a7:6c:fa: 98:ee:0d:bb:e9:d9:f3:49:06:6d:09:59:8e:cf:9a: 9f:96:23:4c:b2:c4:0a:94:66:8c:00:07:12:b7:24: 69:37:6f:98:83:62:f3:52:f9:35:7d:26:ec:af:db: f8:e3:df:9e:55:56:71:f0:48:73:00:da:ed:1b:1a: 6d:b5:29:06:b4:19:e1:28:fe:bb:09:31:0f:b2:c2: 5a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:37:E4:24:54:32:8E:95:99:E4:44:5E:21:E3:86:DD:19:F1:B9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/dad2259b-bf26-35d7-b0ce-2b8e3639b756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:bc:2a:b7:28:1a:ba:2f:21:cf:61:99:75:ea:95:96:4e:3b: 85:2f:b2:ad:41:10:33:76:0e:42:51:a2:d9:13:27:65:79:fc: 72:92:d3:4a:4d:92:ea:de:9c:7d:83:96:f5:9e:c6:26:b5:28: 8c:21:56:93:ec:9b:30:86:9f:93:08:7c:78:ba:fb:e7:a0:55: b5:fa:8e:27:59:c4:64:c4:61:8e:51:68:db:1c:85:93:92:c8: e7:af:38:fb:c1:b0:69:25:f9:0e:77:1f:34:7e:0f:79:cb:aa: cd:07:fe:9d:e4:82:7e:a5:19:2f:b3:c9:16:15:a6:92:ed:ba: 6b:ed:f5:83:e6:bb:43:3a:63:55:68:a2:5b:89:ff:97:a0:96: 63:4d:76:e1:f6:d1:13:c2:eb:ad:24:62:41:59:2c:d1:93:c5: e7:3b:de:27:45:a6:d1:51:ba:0a:d4:62:da:41:f2:b5:8b:69: ef:31:1f:fa:c0:f7:03:24:2a:57:31:21:7b:39:60:7f:53:cb: 19:11:81:4c:64:e9:44:b7:e3:14:99:6f:e8:20:f3:56:21:83: 74:66:68:8d:ea:c5:48:4c:0e:13:d2:b7:09:3e:73:a7:44:83: a3:37:0d:72:ee:49:e5:88:15:c1:01:e2:eb:a1:e3:7b:67:0a: 3e:52:9b:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq78G9NGuPsrwRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NTJkMDNkOWUtMmY5Zi00NTQ5LWEzMGEtNDliZmZlMDFhNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvECejGcStZVsIbijzFlklXZMrqoTfyJENBk 3M41DB8lp7ix+4lIMB3S47uGWyBj32d3jtvibLuAmwTdPUog4cMxzndtL0en04P5 SUikitTeSzSBcY7A/2Apsj4YWoYmE3yqQmif/bpgI8VZYXo++Cmmp29J+4xYmFnA 9TK+O9FXD7tRNLi3/cz66/X/IybJM6/gyssrN2/ItfgbAkEWmIX9u0XYa/s+Lryx GkjHqHunbPqY7g276dnzSQZtCVmOz5qfliNMssQKlGaMAAcStyRpN2+Yg2LzUvk1 fSbsr9v449+eVVZx8EhzANrtGxpttSkGtBnhKP67CTEPssJaIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPw35CRUMo6VmeREXiHjht0Z8bnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGFkMjI1OWItYmYyNi0z NWQ3LWIwY2UtMmI4ZTM2MzliNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERShAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK8KrcoGrovIc9hmXXqlZZOO4Uvsq1BEDN2DkJRotkTJ2V5/HKS00pN kurenH2DlvWexia1KIwhVpPsmzCGn5MIfHi6++egVbX6jidZxGTEYY5RaNschZOS yOevOPvBsGkl+Q53HzR+D3nLqs0H/p3kgn6lGS+zyRYVppLtumvt9YPmu0M6Y1Vo oluJ/5eglmNNduH20RPC660kYkFZLNGTxec73idFptFRugrUYtpB8rWLae8xH/rA 9wMkKlcxIXs5YH9TyxkRgUxk6US34xSZb+gg81Yhg3RmaI3qxUhMDhPStwk+c6dE g6M3DXLuSeWIFcEB4uuh43tnCj5Sm1o= -----END CERTIFICATE-----Generated at Mon Apr 28 08:22:52 2025 by rpki-client