$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa File: 7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa (raw, json) Hash identifier: 4rmo71CiZ+JwUoviBUYgv0yh/f2WIj3EFTZtAA7Mc6E= Subject key identifier: 63:ED:32:88:9F:10:78:70:3C:AA:D7:C6:21:E7:7A:94:85:47:E1:E8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849780F19E397FC6EC5D8A88DC8 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa Signing time: Wed 09 Apr 2025 13:01:01 +0000 ROA not before: Wed 09 Apr 2025 13:01:01 +0000 ROA not after: Tue 08 Jul 2025 13:01:01 +0000 asID: 7029 IP address blocks: 139.55.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:78:0f:19:e3:97:fc:6e:c5:d8:a8:8d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 9 13:01:01 2025 GMT Not After : Jul 8 13:01:01 2025 GMT Subject: CN=87231547-1c36-45c6-a7df-45f4dc71654d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:01:b2:5f:e7:fc:41:30:c1:4c:4f:02:5d:8e: cd:4e:d2:78:9c:13:9a:ea:9f:87:0a:41:cc:81:3f: 72:b3:00:4e:86:43:57:64:0c:26:ea:5e:51:69:fe: a9:a1:bb:15:b1:1d:2b:31:f3:d8:a7:f4:62:86:01: f9:78:ca:6e:e9:ea:a0:b7:b7:19:e3:ed:3f:db:fe: 27:5d:04:85:11:b0:7b:c9:22:aa:a7:f0:aa:55:0a: 02:0d:99:ec:0c:0b:cd:17:95:b9:f8:b3:67:e4:c1: 42:78:4a:83:df:30:f9:44:d6:98:49:9b:cf:8a:01: 06:02:60:37:f9:ff:71:01:12:f7:03:89:89:3c:76: f1:02:4f:3e:42:21:50:d3:93:8b:ba:f4:4d:3c:f7: 60:42:3d:46:4a:0f:34:3a:47:fb:80:10:82:b7:34: cb:4d:26:02:62:41:32:ef:81:e6:7c:fe:0d:f0:e3: 0f:94:fa:8e:cb:2e:ab:28:c4:31:fb:d2:8c:95:7c: ec:e0:ca:99:86:2e:bd:ac:1e:83:0f:89:58:94:49: 91:ec:64:a1:82:91:88:81:59:77:4e:00:59:7e:9d: 75:97:66:48:1a:4e:b4:b8:ac:50:d3:fd:39:15:2c: 8d:1e:af:84:05:0f:94:64:cc:19:26:11:64:65:1a: 6c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:ED:32:88:9F:10:78:70:3C:AA:D7:C6:21:E7:7A:94:85:47:E1:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7e4911fe-8ac0-3d0e-b1c1-48e6adbce856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 139.55.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:04:29:f1:30:80:93:32:0e:7b:eb:b2:c2:47:4d:8e:30:e3: 08:62:b3:76:7c:d6:a4:b9:de:ef:64:db:37:1e:53:0b:75:dc: 37:0c:ed:bb:0c:5f:20:54:4c:b5:75:07:81:4e:d1:f0:4c:be: 63:2e:52:88:ae:aa:cd:47:cc:a8:ef:33:82:6b:28:5e:9d:4e: 23:6d:69:15:d0:1b:9e:0d:21:6a:c4:4f:67:42:ef:7f:12:c9: 40:63:91:d9:70:ed:88:fa:5e:7a:d3:f0:5b:fb:f0:2a:66:d1: 0d:d2:69:42:17:65:28:f5:ef:13:df:52:ca:16:8c:12:80:d7: 56:ef:55:a9:7b:4f:1a:db:a4:a0:92:b3:bf:4d:41:fa:ba:37: 9b:ab:44:47:d1:6a:f8:9f:74:05:4e:06:35:18:9a:b2:af:94: 94:cc:8c:69:2d:54:43:a3:f9:ec:53:96:93:22:86:74:1b:26: 42:1c:e0:28:2f:88:b7:03:52:36:53:b5:55:ec:a3:67:58:75: 38:eb:af:6d:31:35:13:7c:7e:64:bb:9e:39:35:ad:d7:be:a9: 36:be:ff:b7:18:3f:54:77:7a:ef:23:9c:e3:d0:89:0f:71:60: cf:42:20:41:5b:cc:2a:fb:a3:ce:60:0f:54:84:c5:47:cc:41: fb:c1:a3:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl4Dxnjl/xuxdiojcgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQwOTEzMDEwMVoXDTI1MDcwODEzMDEwMVowLzEtMCsGA1UEAxMk ODcyMzE1NDctMWMzNi00NWM2LWE3ZGYtNDVmNGRjNzE2NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwGyX+f8QTDBTE8CXY7NTtJ4nBOa6p+HCkHM gT9yswBOhkNXZAwm6l5Raf6pobsVsR0rMfPYp/RihgH5eMpu6eqgt7cZ4+0/2/4n XQSFEbB7ySKqp/CqVQoCDZnsDAvNF5W5+LNn5MFCeEqD3zD5RNaYSZvPigEGAmA3 +f9xARL3A4mJPHbxAk8+QiFQ05OLuvRNPPdgQj1GSg80Okf7gBCCtzTLTSYCYkEy 74HmfP4N8OMPlPqOyy6rKMQx+9KMlXzs4MqZhi69rB6DD4lYlEmR7GShgpGIgVl3 TgBZfp11l2ZIGk60uKxQ0/05FSyNHq+EBQ+UZMwZJhFkZRpsgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPtMoifEHhwPKrXxiHnepSFR+HoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2U0OTExZmUtOGFjMC0z ZDBlLWIxYzEtNDhlNmFkYmNlODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEizcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8EKfEwgJMyDnvrssJHTY4w4whis3Z81qS53u9k2zceUwt13DcM7bsM XyBUTLV1B4FO0fBMvmMuUoiuqs1HzKjvM4JrKF6dTiNtaRXQG54NIWrET2dC738S yUBjkdlw7Yj6XnrT8Fv78Cpm0Q3SaUIXZSj17xPfUsoWjBKA11bvVal7TxrbpKCS s79NQfq6N5urREfRavifdAVOBjUYmrKvlJTMjGktVEOj+exTlpMihnQbJkIc4Cgv iLcDUjZTtVXso2dYdTjrr20xNRN8fmS7njk1rde+qTa+/7cYP1R3eu8jnOPQiQ9x YM9CIEFbzCr7o85gD1SExUfMQfvBo/8= -----END CERTIFICATE-----Generated at Sat Apr 12 10:21:25 2025 by rpki-client