$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa File: 21e30966-1560-3fc3-86b8-d02897b182db.roa (raw, json) Hash identifier: sg2dzFT2Mj++XJMst85k9JKAdcrCjdzB1kK2qJWywuE= Subject key identifier: 95:51:EB:E8:08:D9:4D:9F:54:58:4D:44:83:E7:B1:EB:85:0B:99:EB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8FA67EDFF65DF272D000 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 69.40.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8f:a6:7e:df:f6:5d:f2:72:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=324bec86-d597-4ee8-9d09-5fcfcbea3656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:02:f0:12:c8:b3:37:95:59:f9:4e:27:e9:3b: 0a:2c:12:9a:e9:95:6e:d1:3e:c6:2b:1d:52:15:3c: 84:81:d4:70:6f:da:e7:48:6c:e0:cd:c9:d5:33:1c: 6b:ed:cb:7a:08:3a:72:9b:25:81:99:cd:72:97:78: 9b:56:79:be:a6:f3:03:4a:c6:a5:45:28:c5:ee:80: b4:0f:07:8c:3e:be:4f:dc:91:89:a6:33:34:06:ea: 40:a5:38:37:96:e2:87:b1:17:ac:59:63:3f:44:99: bd:15:c3:dd:c0:dc:69:0e:50:41:f9:40:77:e7:00: 37:d9:2b:2a:71:58:e1:e6:c7:3b:ee:d0:ec:0b:46: f0:16:9e:7f:79:ec:e1:c1:3c:f1:f6:94:d4:46:27: 51:0a:66:82:27:d8:f1:92:1a:57:7d:af:2e:95:51: 9b:f0:bb:da:b4:cc:4d:68:52:b2:43:81:1b:db:35: 6e:bf:ed:4b:97:51:71:e8:48:3f:d3:37:d4:a7:0b: f3:2a:13:07:8b:3e:21:ba:94:bb:6f:f1:a7:f5:4a: ef:a1:3b:2a:f3:cf:6e:e3:f5:f5:f5:06:7d:60:ee: 05:ae:f3:11:28:2c:76:8e:44:17:29:13:93:5a:4b: a2:28:62:7d:37:3b:03:f4:56:c2:af:be:9a:34:b5: c2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:51:EB:E8:08:D9:4D:9F:54:58:4D:44:83:E7:B1:EB:85:0B:99:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/21e30966-1560-3fc3-86b8-d02897b182db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.40.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cb:f6:b3:28:e0:04:50:f0:81:23:e7:bb:09:55:0a:05:f1: 52:11:21:a7:53:1a:51:29:19:b4:55:08:bb:46:9a:bf:12:1e: 13:f2:99:6c:7f:13:1e:b3:75:05:58:d7:a2:e5:8a:db:7a:ce: e3:0e:34:7d:bb:3b:85:33:f4:e8:84:04:30:72:01:cc:e4:6c: 47:28:65:f2:e9:35:cf:5e:76:8f:99:74:62:bd:79:3d:7c:eb: f7:c8:17:b2:ea:6d:46:69:96:0d:85:67:6f:74:70:c0:10:8f: a6:74:df:1c:2b:39:c2:43:c7:b2:d0:3a:80:ee:e3:50:d3:ea: a8:be:62:38:7e:2c:0b:9b:10:9a:15:ea:1b:00:bd:5c:9c:fd: 13:84:6d:cf:de:ea:51:2a:01:92:4e:ab:f6:03:24:3e:04:3b: d4:30:d4:74:b4:9e:18:26:59:49:1e:23:f0:49:83:9a:72:ce: 63:0b:57:d9:1c:ba:4c:85:3f:b8:32:2e:c0:14:7a:3b:79:a0: b8:d4:6b:a9:12:15:85:0a:b8:68:86:27:85:83:f5:6c:5d:ba: 8d:7c:20:f3:2e:95:b2:b5:4c:fc:88:80:3a:52:7a:a7:23:5f: 59:ee:d7:c4:39:11:b6:e0:76:bd:40:9c:b6:0f:01:c5:fc:5d: b1:59:9b:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qo+mft/2XfJy0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MzI0YmVjODYtZDU5Ny00ZWU4LTlkMDktNWZjZmNiZWEzNjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggLwEsizN5VZ+U4n6TsKLBKa6ZVu0T7GKx1S FTyEgdRwb9rnSGzgzcnVMxxr7ct6CDpymyWBmc1yl3ibVnm+pvMDSsalRSjF7oC0 DweMPr5P3JGJpjM0BupApTg3luKHsResWWM/RJm9FcPdwNxpDlBB+UB35wA32Ssq cVjh5sc77tDsC0bwFp5/eezhwTzx9pTURidRCmaCJ9jxkhpXfa8ulVGb8LvatMxN aFKyQ4Eb2zVuv+1Ll1Fx6Eg/0zfUpwvzKhMHiz4hupS7b/Gn9UrvoTsq889u4/X1 9QZ9YO4FrvMRKCx2jkQXKROTWkuiKGJ9NzsD9FbCr76aNLXCHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVR6+gI2U2fVFhNRIPnseuFC5nrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjFlMzA5NjYtMTU2MC0z ZmMzLTg2YjgtZDAyODk3YjE4MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRSg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjL9rMo4ARQ8IEj57sJVQoF8VIRIadTGlEpGbRVCLtGmr8SHhPymWx/ Ex6zdQVY16Llitt6zuMONH27O4Uz9OiEBDByAczkbEcoZfLpNc9edo+ZdGK9eT18 6/fIF7LqbUZplg2FZ290cMAQj6Z03xwrOcJDx7LQOoDu41DT6qi+Yjh+LAubEJoV 6hsAvVyc/ROEbc/e6lEqAZJOq/YDJD4EO9Qw1HS0nhgmWUkeI/BJg5pyzmMLV9kc ukyFP7gyLsAUejt5oLjUa6kSFYUKuGiGJ4WD9Wxduo18IPMulbK1TPyIgDpSeqcj X1nu18Q5Ebbgdr1AnLYPAcX8XbFZmyU= -----END CERTIFICATE-----Generated at Mon Jun 16 20:06:27 2025 by rpki-client