$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa File: cff704e6-6037-3379-841b-631795dec5ac.roa (raw, json) Hash identifier: V5ePD6IiNo9x7cNwxOt16kivCEsI9arsDk8s2TRmjRY= Subject key identifier: 56:08:64:51:FB:CC:D5:97:34:A3:35:46:98:11:AC:84:07:DC:D2:F0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A1190E9375369EAD08B40 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 67.140.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:11:90:e9:37:53:69:ea:d0:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=ec203952-614f-4238-8a76-efe929b72526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b0:5c:62:43:a0:5b:3c:e3:6b:84:39:e1:f8: 45:f8:3b:8f:7b:0c:d0:86:1b:13:03:83:55:41:50: 39:31:66:55:ee:e0:4a:2e:29:c2:2c:35:df:46:94: 5b:7e:7a:48:60:99:10:93:bc:a5:ff:ee:fd:28:ab: 0f:6d:e9:92:dd:b9:be:c1:f3:88:c8:81:1c:5a:88: 0b:17:8f:45:a7:ca:2f:ba:22:f4:1f:c6:c1:a1:32: 11:7f:97:fe:8d:d7:03:12:8d:07:6a:2b:c7:ad:31: 00:ae:b7:ea:53:4e:29:cd:39:06:7b:9c:90:41:3e: d2:62:80:6d:17:6b:45:35:0a:1b:3c:79:22:aa:d7: 86:c3:23:9d:ca:72:ff:f5:bc:e7:f8:96:d5:b3:89: 90:7f:8c:cb:5c:78:8a:0f:c7:08:06:6f:3b:07:d1: c0:8f:59:89:04:28:b1:ad:c6:3f:a9:d9:2a:03:dd: a5:fd:92:e3:5a:07:6a:ae:77:22:dd:33:8e:e0:5b: ec:e9:c9:02:f3:8d:6c:33:57:1d:6d:a3:f8:a8:c6: 0f:ec:56:0f:ff:60:0c:a4:40:f6:b0:59:ad:0f:44: dc:3e:fd:f1:e9:27:6d:15:f0:16:98:ba:f4:94:1a: 4a:50:a4:5b:c8:98:58:01:ab:94:33:8e:02:b0:aa: 78:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:08:64:51:FB:CC:D5:97:34:A3:35:46:98:11:AC:84:07:DC:D2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cff704e6-6037-3379-841b-631795dec5ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:5e:43:f7:d6:a7:26:12:98:f8:71:70:90:88:c2:18:3f:8b: 88:fc:74:45:21:0b:5d:78:f3:db:58:d1:f2:1f:ea:c3:22:cc: fa:73:59:f6:3b:b8:cd:e6:8c:df:4b:d1:9a:6c:8a:26:2f:65: 42:6b:b2:55:ee:94:94:be:c3:a8:f4:18:e2:40:cb:01:27:e4: 57:21:2e:2b:09:28:f2:8d:c0:62:bf:a4:35:a3:a8:16:35:cd: 20:8f:4e:4e:8e:b6:27:7c:a8:0b:68:13:d6:11:99:94:00:b0: 14:7e:54:c2:85:4f:fd:89:ce:ab:6a:85:73:31:73:97:61:69: 3b:93:0f:7e:f5:ca:36:78:0b:8e:a8:64:56:f1:ff:3b:09:68: c3:d0:86:7d:b6:82:af:31:61:96:a8:a3:d0:7e:61:33:1c:e6: 28:3d:6d:cc:89:36:af:be:e9:46:ea:14:5c:5d:22:66:aa:cc: b7:47:00:7b:c7:95:ad:4f:d0:6e:22:e9:93:61:30:8f:38:70: 6e:4b:cd:19:15:64:85:78:ab:54:51:55:72:80:9c:5e:44:a5: b3:fa:6a:50:21:ec:7f:f1:f4:52:90:4e:a1:36:55:91:a3:4b: f9:aa:31:c8:04:5c:ab:7c:9e:6c:de:ab:86:f7:da:cc:02:24: 29:0f:46:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhGQ6TdTaerQi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk ZWMyMDM5NTItNjE0Zi00MjM4LThhNzYtZWZlOTI5YjcyNTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLBcYkOgWzzja4Q54fhF+DuPewzQhhsTA4NV QVA5MWZV7uBKLinCLDXfRpRbfnpIYJkQk7yl/+79KKsPbemS3bm+wfOIyIEcWogL F49Fp8ovuiL0H8bBoTIRf5f+jdcDEo0HaivHrTEArrfqU04pzTkGe5yQQT7SYoBt F2tFNQobPHkiqteGwyOdynL/9bzn+JbVs4mQf4zLXHiKD8cIBm87B9HAj1mJBCix rcY/qdkqA92l/ZLjWgdqrnci3TOO4Fvs6ckC841sM1cdbaP4qMYP7FYP/2AMpED2 sFmtD0TcPv3x6SdtFfAWmLr0lBpKUKRbyJhYAauUM44CsKp45QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYIZFH7zNWXNKM1RpgRrIQH3NLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2ZmNzA0ZTYtNjAzNy0z Mzc5LTg0MWItNjMxNzk1ZGVjNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ4w4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5eQ/fWpyYSmPhxcJCIwhg/i4j8dEUhC11489tY0fIf6sMizPpzWfY7 uM3mjN9L0ZpsiiYvZUJrslXulJS+w6j0GOJAywEn5FchLisJKPKNwGK/pDWjqBY1 zSCPTk6Otid8qAtoE9YRmZQAsBR+VMKFT/2JzqtqhXMxc5dhaTuTD371yjZ4C46o ZFbx/zsJaMPQhn22gq8xYZaoo9B+YTMc5ig9bcyJNq++6UbqFFxdImaqzLdHAHvH la1P0G4i6ZNhMI84cG5LzRkVZIV4q1RRVXKAnF5EpbP6alAh7H/x9FKQTqE2VZGj S/mqMcgEXKt8nmzeq4b32swCJCkPRgY= -----END CERTIFICATE-----Generated at Thu May 1 07:20:46 2025 by rpki-client