$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa File: b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa (raw, json) Hash identifier: TKq5vlRx24g//CpBeLnJhQWqcvxGeggwE20m/4L2mWw= Subject key identifier: 0B:00:FA:39:F6:E8:56:76:3C:3C:EB:38:C0:F8:C2:91:C7:56:B8:DE Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8F6E1F8F152F09853780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 67.141.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8f:6e:1f:8f:15:2f:09:85:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=8ece839c-90eb-4d29-8cdb-3d2d53172c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:46:e1:e2:37:e3:4b:11:64:38:c4:bf:f0: b7:c9:30:6d:9c:2b:6a:04:08:0b:0f:e7:03:2a:89: 69:bc:9b:ec:b1:27:9a:89:ee:42:5c:43:2b:91:21: e8:3d:7f:ac:e6:24:7f:de:eb:07:02:bd:05:4f:b0: e2:f7:5b:54:4d:5a:7b:ac:a0:ee:f1:03:6a:36:7d: 51:df:fe:3b:fa:86:b0:59:ca:e5:bc:d4:58:fe:1b: 9e:d4:ca:a0:4e:c8:97:f4:cc:ae:51:7e:62:e7:5c: a0:0a:27:6c:ab:ae:49:c7:9a:13:85:ae:c7:6e:33: 1d:6c:ab:e8:76:b9:3b:15:5d:80:08:41:ed:25:6d: ee:50:a3:b6:0b:63:96:07:d1:b5:d5:c3:ea:2b:7d: b5:59:0f:17:48:93:a9:33:2a:c8:ce:16:cb:cc:f6: 6c:9a:e0:e2:55:98:e0:d3:b9:cf:01:08:60:ad:6c: 43:37:b6:f4:bc:4d:4c:c0:f8:fd:89:02:42:da:0f: 29:60:02:e7:30:a7:7f:de:93:b0:69:78:eb:78:61: 72:95:df:a4:0d:8b:a8:eb:1f:bb:cc:32:be:88:44: a6:04:9b:52:77:d4:46:ae:0e:ae:6a:13:28:c3:bb: 13:a0:ed:bb:da:87:32:d8:99:0a:53:2d:9e:2b:91: c1:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:00:FA:39:F6:E8:56:76:3C:3C:EB:38:C0:F8:C2:91:C7:56:B8:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b49609c0-bf3e-39c7-9416-d3cf19fe8071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:9d:40:59:43:8d:94:a5:3a:40:18:ed:b6:af:9c:4a:1f:d4: 96:05:de:38:93:56:d1:65:4c:d7:29:fb:1d:fc:66:28:74:4f: 3f:d9:a4:4d:6c:ec:fc:2b:bd:d7:09:01:af:53:02:eb:53:a5: b8:9e:35:9f:51:76:46:cd:68:d8:7c:73:ef:ea:9c:99:00:9d: d9:f0:ab:4d:aa:1f:16:79:6a:4c:f6:24:ed:21:bc:14:e7:81: 75:b0:93:e3:12:06:55:41:b0:25:6a:d5:ad:1c:58:df:6b:37: 0d:f5:0e:46:b0:d9:3e:f1:5b:0e:38:ce:fb:63:0e:8a:b7:fa: 49:3b:23:6a:48:b7:ae:78:1c:89:01:51:40:21:48:86:a5:e2: 46:7e:67:0c:02:85:26:36:5f:7f:0e:a8:a8:ca:c8:83:77:8e: 60:4f:e7:70:48:3e:b3:ed:53:13:e0:4f:69:d6:62:3d:f9:e4: 9c:fb:e4:b5:5d:c5:6c:de:19:04:7c:92:a9:ec:01:e7:12:4b: 31:d5:2b:42:e1:6b:fc:fa:9e:dc:76:aa:f5:ab:62:a0:0b:4a: e3:8f:c5:64:11:87:c8:f1:a5:5c:50:e1:bd:61:be:2f:5b:08: f8:dd:4f:51:0c:2c:86:e6:5f:9e:3b:b0:ed:d1:23:a6:7d:32: 13:77:33:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qo9uH48VLwmFN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OGVjZTgzOWMtOTBlYi00ZDI5LThjZGItM2QyZDUzMTcyYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAtG4eI340sRZDjEv/C3yTBtnCtqBAgLD+cD KolpvJvssSeaie5CXEMrkSHoPX+s5iR/3usHAr0FT7Di91tUTVp7rKDu8QNqNn1R 3/47+oawWcrlvNRY/hue1MqgTsiX9MyuUX5i51ygCidsq65Jx5oTha7HbjMdbKvo drk7FV2ACEHtJW3uUKO2C2OWB9G11cPqK321WQ8XSJOpMyrIzhbLzPZsmuDiVZjg 07nPAQhgrWxDN7b0vE1MwPj9iQJC2g8pYALnMKd/3pOwaXjreGFyld+kDYuo6x+7 zDK+iESmBJtSd9RGrg6uahMow7sToO272ocy2JkKUy2eK5HBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAsA+jn26FZ2PDzrOMD4wpHHVrjeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjQ5NjA5YzAtYmYzZS0z OWM3LTk0MTYtZDNjZjE5ZmU4MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ41XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+dQFlDjZSlOkAY7bavnEof1JYF3jiTVtFlTNcp+x38Zih0Tz/ZpE1s 7PwrvdcJAa9TAutTpbieNZ9RdkbNaNh8c+/qnJkAndnwq02qHxZ5akz2JO0hvBTn gXWwk+MSBlVBsCVq1a0cWN9rNw31Dkaw2T7xWw44zvtjDoq3+kk7I2pIt654HIkB UUAhSIal4kZ+ZwwChSY2X38OqKjKyIN3jmBP53BIPrPtUxPgT2nWYj355Jz75LVd xWzeGQR8kqnsAecSSzHVK0Lha/z6ntx2qvWrYqALSuOPxWQRh8jxpVxQ4b1hvi9b CPjdT1EMLIbmX547sO3RI6Z9MhN3M7w= -----END CERTIFICATE-----Generated at Sun Jun 15 13:21:53 2025 by rpki-client