$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9200fe7e-847f-37b3-8046-f5d776f67a2f.roa File: 9200fe7e-847f-37b3-8046-f5d776f67a2f.roa (raw, json) Hash identifier: vhgwMIx8iTTn9C1xRmVJ06XestcdHXyzNNnZxgeZYD4= Subject key identifier: 76:75:69:A5:FE:E9:9A:84:10:95:26:09:B0:57:5A:E3:E1:B8:3F:8C Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D801CC6D954213748380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9200fe7e-847f-37b3-8046-f5d776f67a2f.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 22773 IP address blocks: 67.141.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d8:01:cc:6d:95:42:13:74:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=86992537-f551-45c4-8147-2b54fee1da57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:d2:a6:87:c1:ac:34:46:03:0b:bc:58:1a: 17:7b:71:d8:1d:60:03:6a:c5:d2:f1:cf:3b:89:a6: 28:29:8c:ab:29:53:52:78:58:75:35:8f:8b:f9:13: af:7f:60:4e:4e:44:8c:41:34:9b:a3:fe:d9:09:24: db:5d:cb:06:19:0b:0e:39:98:01:ab:51:17:41:eb: 42:3c:a9:a7:60:51:74:a4:e6:a9:cf:a1:11:bd:ce: 23:1a:20:93:1d:22:ea:d3:4c:89:4c:1f:bc:f0:bf: 45:bc:66:72:a2:e7:56:9a:c0:bd:7e:e1:4a:53:fa: ba:e4:f0:a0:ad:55:9d:b9:cf:1c:78:3a:27:8e:52: a9:bc:cc:bf:24:08:01:63:bc:d4:e2:f1:ab:2c:50: ee:de:1d:be:30:2e:65:c7:60:ca:b1:58:56:5f:55: e9:f8:58:f8:a9:0d:ae:4d:0f:e6:27:22:a0:d4:50: 2a:5d:23:bf:3c:2f:dc:64:47:b0:4f:5e:b4:6a:fe: 67:74:e9:e0:ef:0f:db:cd:a7:df:0d:36:2b:c8:d6: b4:88:2c:ef:a8:0f:36:a5:e1:e7:ea:40:35:5c:f9: 0c:b8:32:b1:4c:ec:69:f2:83:83:5d:9b:b4:f6:57: 2b:93:b0:41:62:ff:10:bd:b6:ec:76:fe:08:8b:a5: c0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:75:69:A5:FE:E9:9A:84:10:95:26:09:B0:57:5A:E3:E1:B8:3F:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/9200fe7e-847f-37b3-8046-f5d776f67a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:fc:b6:9e:c2:76:79:5a:6b:58:94:46:e2:04:18:68:1e:aa: ca:48:af:6e:c4:72:59:7a:a4:67:b4:be:bf:0d:e6:e4:fc:86: f8:ea:ff:14:9c:b0:3a:98:51:2a:8a:0a:b6:09:08:08:0f:2b: 35:8a:82:a2:4b:a6:09:ab:31:99:99:d6:d1:d6:04:e9:38:84: f7:b2:70:5c:d1:6f:27:35:1a:04:27:6f:db:fd:2b:a8:77:f5: f0:a2:16:e2:b5:44:b7:d2:56:3b:86:3d:77:4f:ab:ed:a5:fb: 66:94:9d:c1:6a:71:70:5a:29:79:21:e3:12:a6:1e:a0:98:3b: ee:36:88:c4:37:6a:60:d2:53:4f:ad:a7:18:2b:98:59:9b:36: dd:b3:bc:72:59:38:72:b1:c4:68:b9:1b:23:71:38:39:f5:07: 0f:bc:f3:b5:61:16:e9:f1:cb:82:04:13:c6:38:ab:5f:45:a8: 1a:e9:1a:8d:4e:6e:76:9c:92:25:af:1b:81:ea:0b:06:c2:73: 6a:ea:3d:ca:f3:b4:be:c0:51:07:f9:e6:2a:ad:95:88:da:28: 2b:43:d5:4a:93:3f:25:a9:50:43:07:e2:da:ff:ed:92:8d:64: a3:21:1f:1b:76:9a:18:13:3a:71:bc:3c:c4:01:48:c3:89:81: 3f:f7:37:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNgBzG2VQhN0g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk ODY5OTI1MzctZjU1MS00NWM0LTgxNDctMmI1NGZlZTFkYTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/7SpofBrDRGAwu8WBoXe3HYHWADasXS8c87 iaYoKYyrKVNSeFh1NY+L+ROvf2BOTkSMQTSbo/7ZCSTbXcsGGQsOOZgBq1EXQetC PKmnYFF0pOapz6ERvc4jGiCTHSLq00yJTB+88L9FvGZyoudWmsC9fuFKU/q65PCg rVWduc8ceDonjlKpvMy/JAgBY7zU4vGrLFDu3h2+MC5lx2DKsVhWX1Xp+Fj4qQ2u TQ/mJyKg1FAqXSO/PC/cZEewT160av5ndOng7w/bzaffDTYryNa0iCzvqA82peHn 6kA1XPkMuDKxTOxp8oODXZu09lcrk7BBYv8Qvbbsdv4Ii6XApQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZ1aaX+6ZqEEJUmCbBXWuPhuD+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTIwMGZlN2UtODQ3Zi0z N2IzLTgwNDYtZjVkNzc2ZjY3YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ41+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAv8tp7Cdnlaa1iURuIEGGgeqspIr27Ecll6pGe0vr8N5uT8hvjq/xSc sDqYUSqKCrYJCAgPKzWKgqJLpgmrMZmZ1tHWBOk4hPeycFzRbyc1GgQnb9v9K6h3 9fCiFuK1RLfSVjuGPXdPq+2l+2aUncFqcXBaKXkh4xKmHqCYO+42iMQ3amDSU0+t pxgrmFmbNt2zvHJZOHKxxGi5GyNxODn1Bw+887VhFunxy4IEE8Y4q19FqBrpGo1O bnackiWvG4HqCwbCc2rqPcrztL7AUQf55iqtlYjaKCtD1UqTPyWpUEMH4tr/7ZKN ZKMhHxt2mhgTOnG8PMQBSMOJgT/3N2E= -----END CERTIFICATE-----Generated at Wed Aug 6 09:34:12 2025 by rpki-client