$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c82fb87-d12c-37b4-971f-da17a3ad8d6e.roa File: 8c82fb87-d12c-37b4-971f-da17a3ad8d6e.roa (raw, json) Hash identifier: JlsnXjlIOhdeEblOOdvmTzUbj0XYufx57SztDeHxiho= Subject key identifier: 22:4C:B4:1D:DC:A6:47:63:5E:79:86:F9:2D:1C:D6:3F:93:60:52:68 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584953C420EA50830ED4EA40B2C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c82fb87-d12c-37b4-971f-da17a3ad8d6e.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 7029 IP address blocks: 67.62.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:20:ea:50:83:0e:d4:ea:40:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=d057d64c-c0f5-49f4-85f2-e4051c19e149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:bb:a3:07:f6:f4:c9:10:96:70:dc:e7:e0: ad:78:9a:40:3d:31:75:a1:45:ab:ac:17:8f:9c:3f: cf:2b:51:ab:4c:2d:31:c9:49:5a:c1:20:0b:e4:2a: 41:bf:72:a6:de:8c:d3:0e:ec:45:59:1c:4c:aa:54: c0:c8:cc:7a:5e:7b:fc:61:96:51:6a:c8:87:5f:29: 4d:7d:0b:4c:e4:68:14:e5:7c:9a:15:f6:fb:f8:15: ef:b0:02:84:ea:48:e7:8e:30:41:bf:e7:27:b1:ab: 84:51:b1:b3:56:e8:01:ae:2c:00:7d:ed:79:f3:2a: 87:aa:5a:8a:be:28:1a:4a:38:8e:bc:e8:db:2b:f5: 7a:3f:08:05:d7:7d:5d:37:5d:96:5c:9a:4d:4a:d7: c2:7a:ad:40:f9:cf:e9:bf:a3:a3:af:86:0a:2a:67: d6:c0:9d:6b:84:4c:29:f8:7b:eb:00:7e:2e:11:8c: c2:01:91:0d:d3:1c:ef:95:cf:81:b0:71:85:a0:6d: 08:a9:c7:61:33:93:d1:a9:58:3e:6b:13:0b:3f:c8: f1:af:89:da:b8:1f:98:a2:0a:29:85:69:93:24:d9: b6:34:22:91:a1:a4:78:79:d0:c5:df:62:28:9c:42: b0:1b:d9:da:0e:e0:7d:35:12:63:de:13:d1:f9:c9: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4C:B4:1D:DC:A6:47:63:5E:79:86:F9:2D:1C:D6:3F:93:60:52:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/8c82fb87-d12c-37b4-971f-da17a3ad8d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.62.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:84:ea:0a:1a:00:6f:c9:4e:77:f7:9d:df:da:95:91:4f:8f: bc:02:95:c9:7f:6e:cf:20:66:a3:cd:ad:21:01:6d:c0:6f:2d: db:dc:2f:e6:34:32:e8:52:0b:03:07:61:25:dd:53:32:fd:db: 6b:e9:0d:a2:fb:3b:21:8c:23:02:1a:4b:7d:58:b0:5b:fc:af: db:35:b2:c1:74:78:43:fd:bd:79:98:b1:31:a7:41:2f:67:96: 76:fa:ad:00:b1:2c:63:3d:89:33:41:b5:39:9c:87:53:cf:a0: 41:8a:3c:b5:47:1c:ee:53:0e:8a:6b:b8:1e:9e:c9:23:00:fc: 5a:47:b0:6b:1c:27:9b:e3:a3:bf:bb:6e:9a:ef:be:49:b4:8e: 1f:80:3e:0d:83:0a:30:2d:75:93:3c:c5:de:c0:63:26:a7:55: c7:16:23:99:fc:14:16:57:c5:8e:67:5e:bb:e9:87:46:a1:48: 53:d0:20:12:17:0a:40:eb:22:c0:38:5b:c8:94:ac:79:42:43: 69:ff:5d:ea:3d:48:03:7f:f6:08:5e:ab:4a:71:83:6a:0c:e6: 93:97:24:21:c4:95:c3:16:64:c0:2b:af:f1:cf:be:4c:91:ed: ed:06:d2:1f:13:c3:b1:82:9d:57:f3:77:6e:b6:85:d4:3a:40: 4e:df:c0:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxCDqUIMO1OpAssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDA1N2Q2NGMtYzBmNS00OWY0LTg1ZjItZTQwNTFjMTllMTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3S7owf29MkQlnDc5+CteJpAPTF1oUWrrBeP nD/PK1GrTC0xyUlawSAL5CpBv3Km3ozTDuxFWRxMqlTAyMx6Xnv8YZZRasiHXylN fQtM5GgU5XyaFfb7+BXvsAKE6kjnjjBBv+cnsauEUbGzVugBriwAfe158yqHqlqK vigaSjiOvOjbK/V6PwgF131dN12WXJpNStfCeq1A+c/pv6Ojr4YKKmfWwJ1rhEwp +HvrAH4uEYzCAZEN0xzvlc+BsHGFoG0IqcdhM5PRqVg+axMLP8jxr4nauB+Yogop hWmTJNm2NCKRoaR4edDF32IonEKwG9naDuB9NRJj3hPR+cmfzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJMtB3cpkdjXnmG+S0c1j+TYFJoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOGM4MmZiODctZDEyYy0z N2I0LTk3MWYtZGExN2EzYWQ4ZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQz7DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSE6goaAG/JTnf3nd/alZFPj7wClcl/bs8gZqPNrSEBbcBvLdvcL+Y0 MuhSCwMHYSXdUzL922vpDaL7OyGMIwIaS31YsFv8r9s1ssF0eEP9vXmYsTGnQS9n lnb6rQCxLGM9iTNBtTmch1PPoEGKPLVHHO5TDopruB6eySMA/FpHsGscJ5vjo7+7 bprvvkm0jh+APg2DCjAtdZM8xd7AYyanVccWI5n8FBZXxY5nXrvph0ahSFPQIBIX CkDrIsA4W8iUrHlCQ2n/Xeo9SAN/9gheq0pxg2oM5pOXJCHElcMWZMArr/HPvkyR 7e0G0h8Tw7GCnVfzd262hdQ6QE7fwFQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:11 2025 by rpki-client