$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa File: b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa (raw, json) Hash identifier: TF+HJTqolqXOT+58+IcZNT42Ye75esadpR3cPP827Ks= Subject key identifier: 92:FE:27:95:D3:28:DC:6F:FA:3C:30:40:A5:9F:92:41:4F:22:1A:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A90A0D77F1FAB5E9E7CCF4780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa Signing time: Sat 19 Jul 2025 01:00:49 +0000 ROA not before: Sat 19 Jul 2025 01:00:49 +0000 ROA not after: Fri 17 Oct 2025 01:00:49 +0000 asID: 14455 IP address blocks: 67.151.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:90:a0:d7:7f:1f:ab:5e:9e:7c:cf:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 19 01:00:49 2025 GMT Not After : Oct 17 01:00:49 2025 GMT Subject: CN=cb2ed2c2-29c0-44e0-b549-ff9aff386232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:41:58:b8:91:52:d9:b9:0c:d9:e9:0b:11:10: a6:33:02:63:e3:b8:08:1b:34:2b:25:1f:9c:4c:7c: 9c:85:71:cc:7d:e8:e2:b5:e0:9a:0e:80:e0:75:ca: c4:85:bd:ce:68:f4:17:db:ea:54:52:f1:d5:f9:49: 2f:ce:15:93:3a:51:50:f6:65:ad:af:03:ef:09:3c: 53:3d:84:60:20:14:a9:fd:a8:6b:fa:14:98:7a:ed: d5:78:b2:a1:c3:93:0c:d5:cf:3b:d4:ab:16:cf:a0: 9b:32:a9:9c:19:08:41:37:b2:56:a4:6d:d1:30:8f: 22:26:6e:44:b5:32:74:97:74:f4:58:a7:53:87:e0: 49:ab:9a:36:f9:d3:ce:32:bb:5a:f7:81:17:d7:14: 8e:05:32:f1:96:a2:03:87:b0:f8:0c:4d:f1:b3:3c: f2:5c:55:a3:1a:25:96:5c:26:01:5f:46:68:ac:5b: 53:8d:78:54:67:31:fb:c8:8f:52:85:f6:d2:5d:bf: 28:8c:5f:b8:79:d2:c0:2c:ac:9d:6e:71:32:8a:5f: 2f:23:c6:51:69:b8:ef:42:a8:fd:12:84:e2:d7:d9: 0e:3d:9b:2d:4d:8c:d7:ac:8a:0b:c8:dc:a6:32:d8: 48:9c:2e:26:d2:98:7d:04:b0:b7:b3:72:50:47:85: 56:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FE:27:95:D3:28:DC:6F:FA:3C:30:40:A5:9F:92:41:4F:22:1A:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b8899b6b-9fa9-3914-bf61-b1d21a0e7524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:84:6b:dd:b8:1a:50:63:48:fb:d1:e0:04:01:a9:eb:ea:92: 71:05:da:16:21:7a:d8:4b:be:da:98:0a:bf:48:7d:9c:01:f4: 21:65:a3:2c:ef:a0:22:d7:b1:30:35:f2:4f:37:5e:d7:06:68: 34:06:2c:ed:d3:a8:ba:bb:2d:0e:ad:08:ca:9e:64:22:24:14: 61:d8:0e:dd:8e:e7:19:32:2c:62:af:47:0d:4d:12:ce:bc:ee: 2b:45:f5:45:72:c3:ef:89:0a:0a:01:81:63:cd:ad:10:79:60: ca:98:50:f2:40:17:ef:9c:6c:ce:51:ad:9c:35:5d:cc:2e:dd: bf:04:f4:d9:03:bc:71:8b:a1:fc:aa:7f:80:21:5d:c9:38:93: b7:d6:5a:63:d7:78:d6:9e:63:6a:7a:2f:fd:47:a8:e1:82:27: 22:7f:79:d4:0f:58:3b:f6:fd:ea:b8:51:89:bd:2b:56:35:38: 42:23:bd:ec:20:03:20:a7:e0:a9:34:4f:28:fd:d5:57:65:09: 7c:fb:74:25:cb:8c:a6:cd:3b:1f:42:8d:61:0d:5c:44:74:00: 70:79:4e:1f:20:74:cd:ec:57:02:60:4b:48:56:8d:2c:c8:bb: 83:c7:b5:c9:48:0e:75:bd:4b:a2:58:aa:7d:2a:88:d5:b7:e9: a9:a3:86:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoNd/H6tennzPR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk Y2IyZWQyYzItMjljMC00NGUwLWI1NDktZmY5YWZmMzg2MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0FYuJFS2bkM2ekLERCmMwJj47gIGzQrJR+c THychXHMfejiteCaDoDgdcrEhb3OaPQX2+pUUvHV+UkvzhWTOlFQ9mWtrwPvCTxT PYRgIBSp/ahr+hSYeu3VeLKhw5MM1c871KsWz6CbMqmcGQhBN7JWpG3RMI8iJm5E tTJ0l3T0WKdTh+BJq5o2+dPOMrta94EX1xSOBTLxlqIDh7D4DE3xszzyXFWjGiWW XCYBX0ZorFtTjXhUZzH7yI9ShfbSXb8ojF+4edLALKydbnEyil8vI8ZRabjvQqj9 EoTi19kOPZstTYzXrIoLyNymMthInC4m0ph9BLC3s3JQR4VW4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJL+J5XTKNxv+jwwQKWfkkFPIhpeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjg4OTliNmItOWZhOS0z OTE0LWJmNjEtYjFkMjFhMGU3NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5fzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyEa924GlBjSPvR4AQBqevqknEF2hYhethLvtqYCr9IfZwB9CFloyzv oCLXsTA18k83XtcGaDQGLO3TqLq7LQ6tCMqeZCIkFGHYDt2O5xkyLGKvRw1NEs68 7itF9UVyw++JCgoBgWPNrRB5YMqYUPJAF++cbM5RrZw1Xcwu3b8E9NkDvHGLofyq f4AhXck4k7fWWmPXeNaeY2p6L/1HqOGCJyJ/edQPWDv2/eq4UYm9K1Y1OEIjvewg AyCn4Kk0Tyj91VdlCXz7dCXLjKbNOx9CjWENXER0AHB5Th8gdM3sVwJgS0hWjSzI u4PHtclIDnW9S6JYqn0qiNW36amjhpY= -----END CERTIFICATE-----Generated at Thu Aug 7 01:56:17 2025 by rpki-client