$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa File: 06774f75-4e9d-33b3-9002-846b6551e953.roa (raw, json) Hash identifier: w9RP7u5bV2Hkawgrs3Uoz6buG4sXgOj1eR+EvP4zhYQ= Subject key identifier: 98:96:47:7C:5F:5F:E3:4D:BA:D3:76:7B:22:AE:F7:CE:52:71:93:4C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D843F287FF5A3AF15400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22944 IP address blocks: 67.140.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:43:f2:87:ff:5a:3a:f1:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=65ee16fc-218a-41c7-abb8-a5de437372fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:8c:ba:fd:4b:c7:cd:7e:27:1b:c4:67:7d: 61:0a:4d:68:89:78:19:74:29:65:9e:0a:b0:ca:14: 7d:8f:88:4a:ab:7d:db:1c:8f:e0:88:ce:6d:95:ac: 93:c3:de:d1:5e:00:69:37:e1:cb:35:b6:51:10:d4: cb:8e:a1:5d:77:ec:85:6e:17:ec:83:fb:be:0d:6c: 69:18:f9:69:71:6e:18:6d:3a:5c:63:82:ac:94:24: c6:50:c4:a3:2b:1b:ac:3e:d1:6f:cb:82:82:b0:ed: bf:ae:a6:1c:d9:83:d1:8f:bc:19:ca:20:a9:1a:9e: 96:ac:8e:ef:39:08:7a:56:af:75:3a:8a:60:51:b7: 71:cf:f5:69:c2:df:7d:bb:cd:e9:90:0a:b6:00:65: 18:4c:f0:ee:90:39:98:3f:3e:57:7d:8e:bf:75:49: 81:b4:61:c2:80:9c:7c:62:e6:33:77:dd:a8:de:71: 69:da:c0:c0:b7:46:e6:a7:0e:76:3a:b9:18:1d:c1: 1a:ae:5c:cb:8e:f7:34:82:fd:4b:1e:1c:dc:9e:56: ee:4b:be:c4:ae:10:e1:4a:67:5a:c8:04:55:26:ae: ad:48:b5:00:95:33:e5:b5:67:a7:e9:03:e7:e5:dc: 3f:e5:e9:44:2b:96:16:17:86:6b:c2:f6:b1:fc:ca: d0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:96:47:7C:5F:5F:E3:4D:BA:D3:76:7B:22:AE:F7:CE:52:71:93:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/06774f75-4e9d-33b3-9002-846b6551e953.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:6a:b1:44:c5:fd:da:c8:9c:16:ba:54:b2:a4:37:82:f2:fc: ff:5d:c0:5a:af:70:be:02:dd:97:be:d5:82:d2:a0:9e:26:2b: 0f:01:c3:f4:01:bd:17:c2:06:6b:a3:99:0c:e9:c8:a3:85:a9: b3:9f:ac:41:46:46:ff:f2:7a:9b:9b:55:34:e9:f2:d2:80:bd: f9:86:b3:67:dd:7f:74:77:6e:e3:f8:41:fd:3a:81:a7:83:40: 75:d7:4b:a5:1f:9c:32:53:07:eb:fa:8b:08:1a:80:93:58:6d: 82:e6:b4:15:f2:17:ed:cb:6d:f3:29:57:f2:c6:03:34:ac:3b: 3a:d0:4e:22:72:f7:d5:02:ca:27:0a:f5:08:de:53:63:fc:73: 57:d5:ba:cc:80:0f:dd:bb:53:d5:67:b8:ca:58:ac:b8:b6:46: 9c:0e:40:39:3b:45:30:59:d4:93:7e:b7:1c:a9:9b:e4:94:1d: 1d:32:2e:1e:4f:af:47:58:5c:5d:28:8a:bb:e9:ae:c8:e6:b2: 1d:c2:b5:32:8b:a2:b6:d6:f2:af:fb:70:d6:c4:af:81:87:83: 9f:33:7a:6d:3e:4c:3b:23:65:fa:be:cc:42:de:66:72:43:50: fc:74:7c:72:70:03:b2:9d:e0:49:e4:a1:af:a1:8e:4f:bb:05: c7:b8:27:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNhD8of/WjrxVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk NjVlZTE2ZmMtMjE4YS00MWM3LWFiYjgtYTVkZTQzNzM3MmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtWMuv1Lx81+JxvEZ31hCk1oiXgZdCllngqw yhR9j4hKq33bHI/giM5tlayTw97RXgBpN+HLNbZRENTLjqFdd+yFbhfsg/u+DWxp GPlpcW4YbTpcY4KslCTGUMSjKxusPtFvy4KCsO2/rqYc2YPRj7wZyiCpGp6WrI7v OQh6Vq91OopgUbdxz/Vpwt99u83pkAq2AGUYTPDukDmYPz5XfY6/dUmBtGHCgJx8 YuYzd92o3nFp2sDAt0bmpw52OrkYHcEarlzLjvc0gv1LHhzcnlbuS77ErhDhSmda yARVJq6tSLUAlTPltWen6QPn5dw/5elEK5YWF4Zrwvax/MrQtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiWR3xfX+NNutN2eyKu985ScZNMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDY3NzRmNzUtNGU5ZC0z M2IzLTkwMDItODQ2YjY1NTFlOTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ4y9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhqsUTF/drInBa6VLKkN4Ly/P9dwFqvcL4C3Ze+1YLSoJ4mKw8Bw/QB vRfCBmujmQzpyKOFqbOfrEFGRv/yepubVTTp8tKAvfmGs2fdf3R3buP4Qf06gaeD QHXXS6UfnDJTB+v6iwgagJNYbYLmtBXyF+3LbfMpV/LGAzSsOzrQTiJy99UCyicK 9QjeU2P8c1fVusyAD927U9VnuMpYrLi2RpwOQDk7RTBZ1JN+txypm+SUHR0yLh5P r0dYXF0oirvprsjmsh3CtTKLorbW8q/7cNbEr4GHg58zem0+TDsjZfq+zELeZnJD UPx0fHJwA7Kd4Enkoa+hjk+7Bce4J7E= -----END CERTIFICATE-----Generated at Thu Aug 7 04:40:36 2025 by rpki-client