$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7dd4624-43f9-3aac-a0fe-2c6a80280ffe.roa File: e7dd4624-43f9-3aac-a0fe-2c6a80280ffe.roa (raw, json) Hash identifier: cQUvHFrgYpNiwg3sXCLjLN40KzHpjBy9KkI8BwK3ifc= Subject key identifier: C3:70:AF:46:5F:66:14:D1:7E:4B:8C:82:48:BD:0B:13:7A:16:08:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A268AD20171C2474C6D03BE80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7dd4624-43f9-3aac-a0fe-2c6a80280ffe.roa Signing time: Wed 11 Jun 2025 01:00:50 +0000 ROA not before: Wed 11 Jun 2025 01:00:50 +0000 ROA not after: Tue 09 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 67.141.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:26:8a:d2:01:71:c2:47:4c:6d:03:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 11 01:00:50 2025 GMT Not After : Sep 9 01:00:50 2025 GMT Subject: CN=d557a3e6-db4c-4cd7-b7b4-2b2709ab654c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f5:dc:c6:5d:71:2b:62:64:78:f3:64:ae:3f: a9:5c:34:ef:4c:22:97:28:4d:36:7c:32:67:dc:c2: 82:41:04:e5:e0:c5:9f:83:65:d8:5d:5d:b9:e6:f7: 68:ff:91:c2:81:4f:49:66:f3:99:e2:7b:7a:fc:67: 66:91:c9:17:1f:b3:68:32:5d:ef:af:54:a2:78:b3: a8:1b:4b:26:68:a3:ca:67:ae:d8:ba:55:6a:15:57: 27:22:04:aa:1a:6e:3b:0d:ee:68:6f:a4:4c:d3:ca: f5:99:7a:ce:8e:e9:c7:e9:e1:5d:5c:26:17:b6:e4: 41:2b:98:0b:05:04:b5:9b:05:3c:44:5d:49:c2:cc: 05:3e:d6:53:c1:33:f6:c3:06:51:55:32:80:fd:8f: bc:dc:41:f9:d0:2d:3b:94:b7:df:0a:0d:86:18:6a: 36:74:e5:75:6f:08:b2:b9:aa:1b:e0:fe:03:75:8b: fd:a0:0b:52:3f:85:71:3e:b4:1d:c5:b2:9b:c3:b5: bb:1c:9a:42:76:6b:79:ec:7c:a5:f2:70:c9:f8:93: fa:4e:29:ec:85:db:93:52:25:50:2d:49:0d:2b:9d: 6e:f9:3c:51:f6:d4:8a:d9:15:55:26:d3:f7:5e:3a: d5:ed:50:c7:2f:ed:f6:ea:6a:cd:cf:9e:cb:fa:e6: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:70:AF:46:5F:66:14:D1:7E:4B:8C:82:48:BD:0B:13:7A:16:08:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e7dd4624-43f9-3aac-a0fe-2c6a80280ffe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:1b:98:b4:0c:e1:60:e3:b2:0e:e7:ed:7e:fa:73:fb:77:d9: ee:11:12:c9:db:ba:04:40:06:7b:91:3b:51:8b:54:7c:77:54: c9:28:76:2c:36:60:0b:74:29:38:7b:3a:49:0a:cb:c9:83:9b: de:7b:2b:dc:00:e2:f8:91:6a:72:16:bd:de:5c:32:88:62:53: 20:c5:1e:7f:1c:c8:eb:c2:d0:2b:ea:53:42:b5:aa:e3:46:63: bf:a3:e6:2a:1d:24:31:da:03:52:38:39:6f:cd:d8:04:35:46: 22:48:af:c9:48:5e:d5:da:b3:80:ec:9e:48:b6:9f:7e:ce:d9: ee:5e:7e:96:f9:19:c3:97:68:46:28:87:a6:27:e8:84:ff:cc: 40:94:52:81:5c:9b:25:36:40:ae:3f:c0:ed:21:7a:2c:1e:46: 58:3d:d1:1c:9d:6c:91:7d:cc:1b:ae:f7:65:7a:e8:d3:e5:76: c7:5c:63:a7:de:12:03:71:ef:25:4d:d0:31:99:ba:8d:db:8d: ee:70:ca:17:67:6e:5a:05:e6:af:4b:b6:b7:70:56:8d:2f:a8: f7:29:b2:87:09:ab:59:37:4f:da:f7:f1:ee:ec:e5:41:08:9d: cf:29:48:f5:20:f7:d9:58:2d:26:6a:05:b2:e3:aa:cc:2e:2c: d9:39:b6:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomitIBccJHTG0DvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDU1N2EzZTYtZGI0Yy00Y2Q3LWI3YjQtMmIyNzA5YWI2NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfXcxl1xK2JkePNkrj+pXDTvTCKXKE02fDJn 3MKCQQTl4MWfg2XYXV255vdo/5HCgU9JZvOZ4nt6/GdmkckXH7NoMl3vr1SieLOo G0smaKPKZ67YulVqFVcnIgSqGm47De5ob6RM08r1mXrOjunH6eFdXCYXtuRBK5gL BQS1mwU8RF1JwswFPtZTwTP2wwZRVTKA/Y+83EH50C07lLffCg2GGGo2dOV1bwiy uaob4P4DdYv9oAtSP4VxPrQdxbKbw7W7HJpCdmt57Hyl8nDJ+JP6TinshduTUiVQ LUkNK51u+TxR9tSK2RVVJtP3XjrV7VDHL+326mrNz57L+uZNewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNwr0ZfZhTRfkuMgki9CxN6FghbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTdkZDQ2MjQtNDNmOS0z YWFjLWEwZmUtMmM2YTgwMjgwZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ431MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMbmLQM4WDjsg7n7X76c/t32e4REsnbugRABnuRO1GLVHx3VMkodiw2 YAt0KTh7OkkKy8mDm957K9wA4viRanIWvd5cMohiUyDFHn8cyOvC0CvqU0K1quNG Y7+j5iodJDHaA1I4OW/N2AQ1RiJIr8lIXtXas4Dsnki2n37O2e5efpb5GcOXaEYo h6Yn6IT/zECUUoFcmyU2QK4/wO0heiweRlg90RydbJF9zBuu92V66NPldsdcY6fe EgNx7yVN0DGZuo3bje5wyhdnbloF5q9LtrdwVo0vqPcpsocJq1k3T9r38e7s5UEI nc8pSPUg99lYLSZqBbLjqswuLNk5tiw= -----END CERTIFICATE-----Generated at Sun Jun 15 18:48:45 2025 by rpki-client