$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc865112-94e8-3c12-900e-62cfc3e36083.roa File: cc865112-94e8-3c12-900e-62cfc3e36083.roa (raw, json) Hash identifier: OzQOkGRNQ4KPb8fsa/glVu+ErkV+ik18HdJQ/TfY9qk= Subject key identifier: C7:AA:A1:8E:7D:FA:22:AD:93:A9:68:91:0A:DA:3F:63:0C:7F:C0:19 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849FCAA8F611ABB972B39ABF500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc865112-94e8-3c12-900e-62cfc3e36083.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 7029 IP address blocks: 67.141.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:8f:61:1a:bb:97:2b:39:ab:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=2b5f9080-6eb6-439e-bb44-cb171c2102d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3c:d2:88:1d:cc:a1:81:53:31:80:1b:b4:7f: 0a:b0:7c:61:aa:c4:94:3f:c6:07:81:13:81:97:20: de:a4:98:be:ff:68:f7:04:00:a1:fc:f1:5c:f8:b3: b9:93:dd:16:b8:32:00:b2:19:68:39:9f:47:e2:ab: 4b:50:0f:19:d4:f8:5e:d2:5b:cb:a0:80:c0:cf:2b: 92:6e:0b:50:e1:38:00:75:ce:07:0e:0e:3f:ab:f1: 4b:52:d6:3b:14:d1:61:41:8f:e8:3d:05:30:51:93: 9c:44:95:70:75:f1:50:a8:a0:a5:cd:ff:68:98:5a: 9b:53:94:60:39:98:29:6c:fd:fe:18:67:68:88:b6: 16:f2:6e:f0:79:c0:ba:6f:e1:80:46:72:c9:d6:12: d0:06:a3:27:3e:43:71:df:81:a3:0c:57:4b:64:f5: 19:d7:48:6d:3f:3a:dc:b0:08:a7:05:04:54:fc:ba: 2c:2b:c7:6b:24:f9:96:02:c3:f5:ef:fb:5f:48:44: 83:bd:e3:75:49:8d:38:7f:0f:1c:9a:74:ac:34:ca: fc:23:1c:ad:4b:40:db:41:1f:12:a6:18:c9:d7:80: f1:db:c6:27:f0:c9:82:98:fb:63:29:2f:90:cb:70: b4:70:a3:bb:18:2c:13:7e:b4:87:a9:21:5d:58:f3: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AA:A1:8E:7D:FA:22:AD:93:A9:68:91:0A:DA:3F:63:0C:7F:C0:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cc865112-94e8-3c12-900e-62cfc3e36083.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ab:90:66:f2:a6:66:e5:62:ce:1d:33:ad:61:39:89:71:34: 44:be:6d:63:97:ab:44:60:b9:07:a9:22:3f:c8:39:ec:98:09: cb:81:f5:eb:f8:26:57:9c:52:32:c9:fd:10:73:c4:80:22:92: 5c:b3:8e:d4:57:49:df:09:4d:1f:c3:56:a8:4e:85:90:aa:c7: bf:15:76:39:71:91:bc:bd:65:64:68:7e:80:ca:9d:0a:62:89: f6:51:de:e4:37:8e:1a:f3:9f:79:63:06:f5:b8:60:fc:42:f1: 16:14:e3:c2:0f:83:61:66:ac:97:eb:b9:02:13:75:96:5e:4e: b0:6a:c7:91:7a:7f:e7:de:32:9a:1e:67:be:a2:a2:c3:48:1e: 45:7e:96:8f:d5:a8:c7:b9:e2:46:b2:82:b4:a8:d8:b6:42:2c: 2c:fe:9f:50:32:0f:f2:4f:bb:0e:93:fb:28:72:84:7d:5a:61: 76:ae:79:42:64:4d:e0:f7:37:00:1e:a0:77:f9:81:58:84:c0: 85:b8:44:33:c8:07:5e:60:8c:34:c0:d6:ee:66:8b:77:65:5c: 74:3a:03:36:ab:dc:8d:5c:00:22:f6:26:cd:13:c7:43:00:73: fc:7a:3f:a7:a2:a6:95:02:6b:4b:b5:4a:c2:c8:40:b7:0b:84: 91:de:cc:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qo9hGruXKzmr9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MmI1ZjkwODAtNmViNi00MzllLWJiNDQtY2IxNzFjMjEwMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDzSiB3MoYFTMYAbtH8KsHxhqsSUP8YHgROB lyDepJi+/2j3BACh/PFc+LO5k90WuDIAshloOZ9H4qtLUA8Z1Phe0lvLoIDAzyuS bgtQ4TgAdc4HDg4/q/FLUtY7FNFhQY/oPQUwUZOcRJVwdfFQqKClzf9omFqbU5Rg OZgpbP3+GGdoiLYW8m7wecC6b+GARnLJ1hLQBqMnPkNx34GjDFdLZPUZ10htPzrc sAinBQRU/LosK8drJPmWAsP17/tfSESDveN1SY04fw8cmnSsNMr8IxytS0DbQR8S phjJ14Dx28Yn8MmCmPtjKS+Qy3C0cKO7GCwTfrSHqSFdWPOW+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMeqoY59+iKtk6lokQraP2MMf8AZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2M4NjUxMTItOTRlOC0z YzEyLTkwMGUtNjJjZmMzZTM2MDgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ41WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWrkGbypmblYs4dM61hOYlxNES+bWOXq0RguQepIj/IOeyYCcuB9ev4 JlecUjLJ/RBzxIAiklyzjtRXSd8JTR/DVqhOhZCqx78Vdjlxkby9ZWRofoDKnQpi ifZR3uQ3jhrzn3ljBvW4YPxC8RYU48IPg2FmrJfruQITdZZeTrBqx5F6f+feMpoe Z76iosNIHkV+lo/VqMe54kaygrSo2LZCLCz+n1AyD/JPuw6T+yhyhH1aYXaueUJk TeD3NwAeoHf5gViEwIW4RDPIB15gjDTA1u5mi3dlXHQ6Azar3I1cACL2Js0Tx0MA c/x6P6eippUCa0u1SsLIQLcLhJHezNY= -----END CERTIFICATE-----Generated at Sun Jun 15 13:14:34 2025 by rpki-client