$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa File: d8c08e04-7262-3bf8-a350-4441ff806c02.roa (raw, json) Hash identifier: i/CsYrRRzZNr7CGGTIVDBGWjx77OwC4bUwwfrPggRRU= Subject key identifier: C7:56:FA:CC:A0:95:7B:28:BA:54:BE:66:AC:EB:F5:BB:20:9C:79:87 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D4306C07F4643967CC3DB680 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 69.66.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:6c:07:f4:64:39:67:cc:3d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=8982a3d4-1f0e-4195-810c-4522173a0653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:06:a0:46:df:84:0d:e9:86:43:89:b9:f0: 31:bd:a7:b8:24:05:e8:70:4f:ff:18:84:79:3f:98: 66:65:af:65:bf:91:79:09:54:75:82:85:f8:b8:45: db:49:17:40:96:bc:09:a1:dd:01:2b:81:c4:c8:4b: 21:44:0b:8d:d8:19:b4:6a:01:7c:3e:97:9a:f0:f9: 3c:dc:4e:c4:bc:d3:8f:f5:c6:47:e6:29:a9:5b:8a: 3a:24:1e:52:3a:4d:30:a5:d3:e6:fe:ce:4b:04:4e: a5:02:8d:b3:f6:5f:c2:ae:6b:02:33:27:8c:fa:20: 5e:9a:97:80:35:a3:6e:3d:b7:22:6a:6d:66:83:85: 6c:0f:7b:9e:ef:56:79:ab:80:7a:c1:35:c7:53:bd: d9:b7:ac:ed:a4:f0:88:37:f0:bd:b2:b4:1a:3f:31: 2c:40:7b:b4:c7:1d:6d:a9:b4:6b:7c:3d:33:e6:c6: f4:7b:a2:ff:29:93:98:02:a7:25:20:bc:aa:cf:81: db:41:ac:dc:78:bc:5e:35:63:6e:18:a1:21:ec:bb: 20:5a:49:aa:78:e9:e8:fc:56:03:c2:e2:12:d0:af: 41:64:f5:a9:7e:67:ee:88:c2:bb:ee:2d:d5:ee:c9: 14:ac:ce:9a:3f:94:02:75:69:a6:01:37:e9:ea:f7: 9e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:56:FA:CC:A0:95:7B:28:BA:54:BE:66:AC:EB:F5:BB:20:9C:79:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d8c08e04-7262-3bf8-a350-4441ff806c02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1b:b9:bc:ad:76:97:71:07:16:81:46:0d:4a:da:24:89:61: 3e:2a:8f:03:8c:02:f1:3b:94:94:c1:3d:17:1a:da:52:e1:de: 46:40:5a:9e:f5:f3:39:21:4e:6c:14:f3:21:be:ec:21:3f:9a: 67:23:63:23:58:97:1e:f4:40:32:50:37:25:ec:65:fb:da:99: f7:e1:b7:53:74:48:85:ee:37:fc:00:7a:ee:c5:48:2c:cf:e4: b5:5b:8c:11:3f:74:5c:8d:71:a3:4d:6c:90:ca:0c:99:31:26: 28:4f:4b:06:b4:66:21:57:c0:5e:02:38:1c:c1:96:48:68:32: c8:ba:34:b2:d7:fa:67:42:24:b9:91:36:ab:bd:05:61:70:56: 5b:1d:a8:78:48:0d:c3:07:4c:b4:3c:00:8f:fb:d8:b4:b0:7f: 8c:6b:4d:31:a9:1d:db:a5:01:5d:9f:fc:c8:b3:af:b3:c9:a7: e9:9d:27:21:4c:16:d9:f6:52:79:a1:1c:97:f3:38:d7:a0:c2: 07:31:a5:7f:52:a8:ec:9f:26:57:95:ce:dd:65:00:d1:a3:2d: c3:6b:6d:82:16:91:e7:d3:1c:0e:c3:f8:f5:3f:88:7f:cb:bb: b1:fd:78:cd:b7:56:8e:23:45:c7:66:58:0f:60:f8:6d:ac:8c: 30:7a:46:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGwH9GQ5Z8w9toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk ODk4MmEzZDQtMWYwZS00MTk1LTgxMGMtNDUyMjE3M2EwNjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB0GoEbfhA3phkOJufAxvae4JAXocE//GIR5 P5hmZa9lv5F5CVR1goX4uEXbSRdAlrwJod0BK4HEyEshRAuN2Bm0agF8Ppea8Pk8 3E7EvNOP9cZH5impW4o6JB5SOk0wpdPm/s5LBE6lAo2z9l/CrmsCMyeM+iBempeA NaNuPbciam1mg4VsD3ue71Z5q4B6wTXHU73Zt6ztpPCIN/C9srQaPzEsQHu0xx1t qbRrfD0z5sb0e6L/KZOYAqclILyqz4HbQazceLxeNWNuGKEh7LsgWkmqeOno/FYD wuIS0K9BZPWpfmfuiMK77i3V7skUrM6aP5QCdWmmATfp6veeHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdW+syglXsoulS+Zqzr9bsgnHmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDhjMDhlMDQtNzI2Mi0z YmY4LWEzNTAtNDQ0MWZmODA2YzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRUKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8bubytdpdxBxaBRg1K2iSJYT4qjwOMAvE7lJTBPRca2lLh3kZAWp71 8zkhTmwU8yG+7CE/mmcjYyNYlx70QDJQNyXsZfvamffht1N0SIXuN/wAeu7FSCzP 5LVbjBE/dFyNcaNNbJDKDJkxJihPSwa0ZiFXwF4COBzBlkhoMsi6NLLX+mdCJLmR Nqu9BWFwVlsdqHhIDcMHTLQ8AI/72LSwf4xrTTGpHdulAV2f/Mizr7PJp+mdJyFM Ftn2UnmhHJfzONegwgcxpX9SqOyfJleVzt1lANGjLcNrbYIWkefTHA7D+PU/iH/L u7H9eM23Vo4jRcdmWA9g+G2sjDB6RjQ= -----END CERTIFICATE-----Generated at Sun Jun 15 20:37:42 2025 by rpki-client