$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa File: 11e7b337-02b9-3773-b8d3-007a653255a7.roa (raw, json) Hash identifier: tBN02qD/wqOxxDPKxFSVmjuchLZ0LrNWdv2WKVHNWUk= Subject key identifier: 92:98:FE:0E:31:4C:D3:D9:73:85:0A:2A:C4:14:01:72:FD:06:4D:23 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1654C6C17D0070ABB597580 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 67.141.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4c:6c:17:d0:07:0a:bb:59:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=65443c0d-a178-4626-8e9a-8568cca2f290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:d3:3c:56:8b:41:0b:35:37:a0:af:01:13:47: 81:ec:0c:ad:b4:55:c8:24:fd:29:5b:2d:96:ef:44: 7a:9a:0b:90:7c:8c:38:4b:b5:ca:96:50:18:b3:bb: f2:ec:d3:66:7c:18:62:ec:2a:55:d1:21:08:c0:15: 21:af:69:c1:e1:ba:ec:75:41:41:29:c9:fb:ad:a5: 46:73:c1:ce:b7:b9:b8:89:9a:87:f6:1e:34:ee:7f: 9e:b4:83:7a:83:42:60:d7:7b:d2:78:5d:bd:81:2b: 99:7e:41:f2:b7:3d:e5:fc:c5:73:07:3b:a0:e1:57: c4:73:e5:d8:1a:d8:fd:e4:52:ad:ed:90:12:00:dc: 35:42:8f:41:19:62:db:5b:28:af:77:d7:48:ce:f9: 7f:d6:e2:db:c8:80:25:5a:3c:35:c4:97:79:9a:05: 09:15:f8:f4:48:ea:22:dd:2f:b6:58:fb:97:d0:c9: b6:0f:dc:2e:a9:98:d3:2a:bd:17:1a:7e:c4:5c:5a: 2b:3e:ee:84:22:0c:98:f6:d5:fc:4c:5b:84:08:d2: 34:fb:20:f9:02:39:e3:f8:cd:06:77:8d:b9:73:7f: 83:bd:b7:d7:51:82:f1:02:24:0c:40:7c:01:f5:20: 26:81:91:2a:e6:13:ac:66:08:3d:ab:1e:0f:30:69: 80:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:98:FE:0E:31:4C:D3:D9:73:85:0A:2A:C4:14:01:72:FD:06:4D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/11e7b337-02b9-3773-b8d3-007a653255a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:94:d6:d2:0f:77:48:d8:64:61:46:5b:2d:96:e8:a7:21:fa: 23:d0:39:e7:05:b6:ce:74:5b:b4:76:1e:f8:ef:af:ef:a7:29: 5c:e3:29:1e:da:2a:4a:5e:18:86:e4:c8:41:b5:72:3c:e4:a3: a9:d2:0c:ef:de:c4:b1:c0:11:c0:c5:0a:19:b8:76:3d:82:33: a3:f2:a2:a5:6a:0b:28:67:8d:cf:ae:f4:d3:ea:50:5c:fb:99: e4:17:cf:c6:60:2a:0e:5d:fb:a6:c0:0a:3a:dd:da:09:a6:fe: a5:30:7b:bc:47:77:1f:87:f8:24:69:41:6d:d5:89:a9:0a:5e: 87:d2:53:2a:9b:4f:00:8b:2c:a6:37:28:63:ea:6f:6c:4f:f7: ad:fd:d5:3a:44:46:47:69:71:3c:57:be:c1:a3:e4:77:61:a3: c2:7d:c3:60:42:3d:6b:98:94:af:be:c2:48:0a:80:1c:be:cc: 14:b7:e2:76:d4:9e:86:cb:15:e1:68:a7:a0:98:1b:df:2a:c1: 39:a8:e2:33:d8:da:4e:fe:99:95:5d:2d:11:02:6c:80:13:91: 07:0d:8c:5d:88:e5:24:80:c7:c7:83:9b:55:ce:07:de:c3:2f: 78:c5:68:35:04:74:b3:ff:c1:b9:04:26:14:29:b4:4a:79:63: 29:2e:10:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZUxsF9AHCrtZdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NjU0NDNjMGQtYTE3OC00NjI2LThlOWEtODU2OGNjYTJmMjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidM8VotBCzU3oK8BE0eB7AyttFXIJP0pWy2W 70R6mguQfIw4S7XKllAYs7vy7NNmfBhi7CpV0SEIwBUhr2nB4brsdUFBKcn7raVG c8HOt7m4iZqH9h407n+etIN6g0Jg13vSeF29gSuZfkHytz3l/MVzBzug4VfEc+XY Gtj95FKt7ZASANw1Qo9BGWLbWyivd9dIzvl/1uLbyIAlWjw1xJd5mgUJFfj0SOoi 3S+2WPuX0Mm2D9wuqZjTKr0XGn7EXForPu6EIgyY9tX8TFuECNI0+yD5Ajnj+M0G d425c3+DvbfXUYLxAiQMQHwB9SAmgZEq5hOsZgg9qx4PMGmAzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKY/g4xTNPZc4UKKsQUAXL9Bk0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTFlN2IzMzctMDJiOS0z NzczLWI4ZDMtMDA3YTY1MzI1NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ438MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyU1tIPd0jYZGFGWy2W6Kch+iPQOecFts50W7R2Hvjvr++nKVzjKR7a KkpeGIbkyEG1cjzko6nSDO/exLHAEcDFChm4dj2CM6PyoqVqCyhnjc+u9NPqUFz7 meQXz8ZgKg5d+6bACjrd2gmm/qUwe7xHdx+H+CRpQW3ViakKXofSUyqbTwCLLKY3 KGPqb2xP96391TpERkdpcTxXvsGj5Hdho8J9w2BCPWuYlK++wkgKgBy+zBS34nbU nobLFeFop6CYG98qwTmo4jPY2k7+mZVdLRECbIATkQcNjF2I5SSAx8eDm1XOB97D L3jFaDUEdLP/wbkEJhQptEp5YykuEAM= -----END CERTIFICATE-----Generated at Mon Jun 16 14:59:23 2025 by rpki-client