$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa File: 37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa (raw, json) Hash identifier: RzWVFSz2LQMVy+K4Md+NAULzO6sFYSrnsR5CAEeueTE= Subject key identifier: 30:11:5D:EF:74:06:CE:F2:FA:C5:3D:7B:C3:3E:12:5F:11:94:73:CC Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1866D2406564464FFB80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 67.140.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:18:66:d2:40:65:64:46:4f:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=f44d06f5-4edb-49f6-9257-8bbf4a68930b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:44:06:04:86:e4:de:66:0e:2c:cf:f2:9a:0b: 38:86:b5:51:4d:78:10:58:49:7c:dc:a5:40:89:74: 44:89:dd:43:cb:c6:43:89:cc:db:50:0b:70:9d:b0: 41:a3:2a:64:02:52:ed:bc:34:3f:24:3b:7a:08:0c: b3:e0:5c:f9:89:9d:4c:a6:29:49:a6:a9:0f:30:2d: f1:91:b3:45:54:a8:df:39:e4:f9:29:81:ed:74:58: d6:ad:a3:70:07:47:5a:02:0d:3b:d2:be:22:29:f8: 2e:28:14:07:d1:aa:8d:1f:0d:25:8c:a5:9f:10:2b: 01:f5:a5:2e:03:76:55:3f:17:0f:3f:46:a0:8d:2b: a3:39:d4:8a:53:92:04:ad:bd:65:58:1b:86:ad:cb: 13:58:54:24:58:e5:b0:26:2c:68:d0:ba:d6:32:8d: 31:a9:db:10:e1:cd:b5:3a:f4:f8:80:37:f5:91:ce: 48:2d:49:28:ef:d9:c4:17:cf:26:af:fb:5f:34:4e: 1b:61:85:95:d7:a8:f6:fd:f8:62:9c:0f:f6:7f:d6: 8f:ee:06:17:39:a7:bf:6c:f6:71:94:80:95:c7:57: b9:a6:cf:12:f1:17:d1:7e:fd:68:d8:eb:6c:fb:06: 4e:4e:9a:76:5e:b0:62:bf:e6:74:7d:ff:10:82:eb: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:11:5D:EF:74:06:CE:F2:FA:C5:3D:7B:C3:3E:12:5F:11:94:73:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/37e393bd-b58d-3a5c-b1bb-8ef6e61b9a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c1:62:e4:a0:d6:8c:98:fd:89:70:6e:47:02:98:7c:73:b0: e2:55:5a:4d:a6:4c:b2:97:8c:00:c7:73:57:3a:82:48:38:6a: 1f:db:81:e7:92:6c:2e:88:c2:ef:06:58:ee:55:de:60:2d:6a: ee:db:a2:b3:76:1e:ab:0d:fb:33:c3:08:96:e2:9f:90:c3:33: e1:f8:29:e0:6b:3f:d6:76:73:7b:4c:73:06:50:c9:4b:79:47: 30:9c:3f:85:42:83:4a:5f:c0:41:30:03:c6:b6:66:dd:94:56: 3f:e6:4f:62:12:df:9d:2b:53:f6:ae:51:f1:7c:bf:96:79:db: e8:cd:24:be:51:77:53:69:c1:79:2b:7a:7b:0a:4b:66:bd:e7: 1f:7c:7b:59:32:b9:d8:8a:5c:e7:db:52:f9:6e:d2:35:eb:c2: 2b:74:e5:e4:33:2c:b4:4c:86:4b:13:63:a9:4e:28:b6:ec:3c: 77:85:30:a5:0c:08:55:00:16:e3:84:07:82:5e:58:bb:a3:d8: 65:16:cf:89:8c:38:fe:bb:2a:86:36:f8:f5:8b:31:30:ad:a5: c8:f9:ad:94:b6:53:f1:c4:a7:46:88:ec:07:8a:bb:ee:ae:96: a6:62:56:c5:ef:1a:eb:d2:ef:db:03:70:b9:b5:80:7c:0f:27: b7:06:1f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhhm0kBlZEZP+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZjQ0ZDA2ZjUtNGVkYi00OWY2LTkyNTctOGJiZjRhNjg5MzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUQGBIbk3mYOLM/ymgs4hrVRTXgQWEl83KVA iXREid1Dy8ZDiczbUAtwnbBBoypkAlLtvDQ/JDt6CAyz4Fz5iZ1MpilJpqkPMC3x kbNFVKjfOeT5KYHtdFjWraNwB0daAg070r4iKfguKBQH0aqNHw0ljKWfECsB9aUu A3ZVPxcPP0agjSujOdSKU5IErb1lWBuGrcsTWFQkWOWwJixo0LrWMo0xqdsQ4c21 OvT4gDf1kc5ILUko79nEF88mr/tfNE4bYYWV16j2/fhinA/2f9aP7gYXOae/bPZx lICVx1e5ps8S8RfRfv1o2Ots+wZOTpp2XrBiv+Z0ff8QgutALwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDARXe90Bs7y+sU9e8M+El8RlHPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzdlMzkzYmQtYjU4ZC0z YTVjLWIxYmItOGVmNmU2MWI5YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ4xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzBYuSg1oyY/YlwbkcCmHxzsOJVWk2mTLKXjADHc1c6gkg4ah/bgeeS bC6Iwu8GWO5V3mAtau7borN2HqsN+zPDCJbin5DDM+H4KeBrP9Z2c3tMcwZQyUt5 RzCcP4VCg0pfwEEwA8a2Zt2UVj/mT2IS350rU/auUfF8v5Z52+jNJL5Rd1NpwXkr ensKS2a95x98e1kyudiKXOfbUvlu0jXrwit05eQzLLRMhksTY6lOKLbsPHeFMKUM CFUAFuOEB4JeWLuj2GUWz4mMOP67KoY2+PWLMTCtpcj5rZS2U/HEp0aI7AeKu+6u lqZiVsXvGuvS79sDcLm1gHwPJ7cGH5Y= -----END CERTIFICATE-----Generated at Sun Jun 15 19:55:14 2025 by rpki-client