$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa File: aa95e6bd-2010-3425-a8ae-10940c333c97.roa (raw, json) Hash identifier: L8Cj2u+ak4/LHk7Y9eF3n5SM5Rw4oSXbormRs1c+miI= Subject key identifier: 32:98:A9:71:E3:BF:3E:5D:DE:B7:F4:D6:3C:59:45:8E:7A:4B:FA:C4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA969552755EA8339B7B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 76.161.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:96:95:52:75:5e:a8:33:9b:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=830da5c7-7de4-4363-b29d-aa0ef1e8454f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:41:0b:5d:2a:7c:3b:9f:89:f2:39:48:80: 3e:0d:46:29:2a:31:f7:0b:e9:a1:cc:f8:91:d1:09: f5:e1:6f:43:8b:2d:04:0f:85:38:cc:f7:fb:ca:29: cf:b8:66:5f:79:ec:b1:ef:f6:88:18:84:41:52:22: b6:4f:a7:8c:48:95:c6:fb:ea:7f:77:e8:ef:54:ca: 0f:f9:81:33:c1:d2:f5:2a:b8:66:1e:4b:0e:90:eb: a4:68:33:73:2a:6e:61:5a:0b:74:4f:2a:46:03:95: 3a:0c:2c:e3:db:ee:6c:de:86:97:84:01:be:e1:84: 8d:00:e1:ff:d3:d5:38:6a:a3:90:c9:b6:fc:a6:68: 5b:d2:24:27:bb:88:88:08:34:65:5b:4a:68:2c:99: 9f:41:df:6d:ca:b1:c7:8e:97:6e:fc:5f:e2:4a:1c: 72:0e:cd:e3:67:d3:c4:1e:14:31:80:0d:45:53:fb: ed:42:72:24:70:50:56:08:7d:48:1d:6a:a2:25:4a: 0a:9d:6f:83:36:73:a9:7f:7d:17:40:c2:bc:66:ae: 9e:e2:37:38:e3:4a:1e:a7:4f:c9:b6:45:fa:3b:49: d6:29:3f:91:af:d7:4d:c1:1a:89:b8:59:0a:0b:47: b5:bb:d1:e0:48:3d:50:41:e7:df:22:f0:9f:85:f0: e2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:98:A9:71:E3:BF:3E:5D:DE:B7:F4:D6:3C:59:45:8E:7A:4B:FA:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/aa95e6bd-2010-3425-a8ae-10940c333c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 76.161.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:01:f9:c6:9a:13:1e:29:fb:f8:2d:b3:c1:73:85:2a:da:87: d9:91:64:71:82:b9:0b:78:c9:e8:10:65:d0:18:77:51:c7:5e: 5f:16:54:06:70:3b:38:cd:1d:bb:47:ce:31:41:9e:83:fa:60: 3c:72:f8:f2:ba:49:e5:26:e6:27:70:f4:a6:07:88:bc:35:74: 48:db:3a:00:67:34:32:58:d6:ee:47:33:7d:8a:e3:10:d2:e6: 1c:f9:d6:bf:ae:42:4a:69:97:7e:e8:24:4d:c9:f9:a3:d3:ce: ec:b0:0d:28:ec:25:7b:b8:b4:e8:a9:67:b7:03:71:67:db:95: 88:8d:f0:d9:45:b9:59:ff:07:2e:b8:41:9f:f4:3f:49:62:02: 0a:2e:2c:1e:43:33:c0:cd:d4:87:c9:05:a2:32:5f:ed:16:db: e3:77:f1:4e:fe:15:ac:35:35:df:d1:56:6a:b7:b7:ed:9e:67: e4:d3:85:af:25:ba:c2:74:60:c9:24:70:b8:2e:92:2f:a3:9b: cb:88:9a:71:45:ac:e9:75:71:aa:b7:0c:6c:68:24:59:71:b6: 35:51:58:b1:da:3f:7c:14:f3:35:bc:4c:28:49:89:0d:cd:47: a6:92:fa:66:46:1d:f1:18:45:78:f8:3d:c2:3e:ea:ae:ad:9b: ae:87:f1:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qpaVUnVeqDObe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ODMwZGE1YzctN2RlNC00MzYzLWIyOWQtYWEwZWYxZTg0NTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkolBC10qfDufifI5SIA+DUYpKjH3C+mhzPiR 0Qn14W9Diy0ED4U4zPf7yinPuGZfeeyx7/aIGIRBUiK2T6eMSJXG++p/d+jvVMoP +YEzwdL1KrhmHksOkOukaDNzKm5hWgt0TypGA5U6DCzj2+5s3oaXhAG+4YSNAOH/ 09U4aqOQybb8pmhb0iQnu4iICDRlW0poLJmfQd9tyrHHjpdu/F/iShxyDs3jZ9PE HhQxgA1FU/vtQnIkcFBWCH1IHWqiJUoKnW+DNnOpf30XQMK8Zq6e4jc440oep0/J tkX6O0nWKT+Rr9dNwRqJuFkKC0e1u9HgSD1QQeffIvCfhfDiHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKYqXHjvz5d3rf01jxZRY56S/rEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWE5NWU2YmQtMjAxMC0z NDI1LWE4YWUtMTA5NDBjMzMzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATKE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgB+caaEx4p+/gts8FzhSrah9mRZHGCuQt4yegQZdAYd1HHXl8WVAZw OzjNHbtHzjFBnoP6YDxy+PK6SeUm5idw9KYHiLw1dEjbOgBnNDJY1u5HM32K4xDS 5hz51r+uQkppl37oJE3J+aPTzuywDSjsJXu4tOipZ7cDcWfblYiN8NlFuVn/By64 QZ/0P0liAgouLB5DM8DN1IfJBaIyX+0W2+N38U7+Faw1Nd/RVmq3t+2eZ+TTha8l usJ0YMkkcLguki+jm8uImnFFrOl1caq3DGxoJFlxtjVRWLHaP3wU8zW8TChJiQ3N R6aS+mZGHfEYRXj4PcI+6q6tm66H8R8= -----END CERTIFICATE-----Generated at Mon Jun 16 14:50:31 2025 by rpki-client