$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa File: f204efbb-87c6-3229-84e8-cf88708d2191.roa (raw, json) Hash identifier: F50mfJ5lDhrUytFEswhwmW4oKEA/zvTXiDbukcmHrWg= Subject key identifier: 78:2B:E8:18:BA:AD:B0:5C:BF:CC:30:AE:D3:6F:B3:21:C3:63:14:D5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D4306C5D146DB42C4D95FD00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 69.66.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:30:6c:5d:14:6d:b4:2c:4d:95:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=9551d3fd-09ff-490b-89de-e5b7e66245b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e2:3f:c0:57:40:94:0e:e3:1d:4b:65:5d:36: 09:29:8e:2d:46:6e:86:3f:d0:7f:d7:f9:96:f8:06: b5:ff:57:58:7e:e9:f6:56:5c:a3:18:d7:70:f6:89: a2:ea:bc:35:b1:da:6e:69:56:f6:19:7f:7b:9c:7e: 46:45:67:13:16:fe:db:fc:55:77:4c:a2:08:ef:23: 96:ee:18:2c:83:2e:a2:ad:02:4a:4f:de:b1:03:80: fd:a8:4d:35:ef:b0:ec:96:53:73:be:c7:ae:ad:2c: 2a:45:6f:d2:c8:71:b9:82:fc:22:ee:64:07:b7:7c: 1a:0b:56:b0:07:7b:d6:c9:f4:38:3f:b4:5a:b8:ed: 9d:cd:a4:20:31:f5:6f:65:47:03:db:6f:8e:f7:16: d1:56:59:3b:b3:39:7a:0c:6f:23:94:28:e2:66:60: 59:3c:95:1e:09:32:db:9a:00:d7:71:d7:f9:be:f0: 8f:66:7c:2d:e2:cc:a5:58:e1:7a:b5:07:52:51:2c: 62:f1:5d:aa:c2:03:e0:09:9c:e6:be:f2:c5:fe:3e: 81:4a:82:e0:e0:d7:91:7b:52:52:45:62:ee:98:dd: 87:4d:bb:5c:26:31:99:26:83:28:1c:e7:3f:55:63: ec:b8:c9:59:70:c5:25:11:98:b8:0e:08:f1:f8:a4: 79:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2B:E8:18:BA:AD:B0:5C:BF:CC:30:AE:D3:6F:B3:21:C3:63:14:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f204efbb-87c6-3229-84e8-cf88708d2191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.66.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1f:3a:f3:e2:f2:9f:c9:cc:f9:95:c9:72:05:7f:2f:aa:cd: 0c:3c:81:e5:5a:33:85:af:03:5a:79:22:34:34:08:c7:64:7c: 90:f0:6f:72:24:e0:27:31:8a:67:3f:9f:78:40:40:d0:bc:0c: 95:bf:b2:9a:46:4e:55:e1:08:2b:68:c6:13:aa:43:b4:33:4b: e0:fd:35:44:09:1c:cb:b8:d9:ab:1b:f9:ac:44:36:0d:3b:b0: 2d:25:48:0d:e9:3c:2e:07:3b:03:9d:46:97:ca:05:78:73:78: 13:a2:32:16:33:45:92:4d:00:ed:fe:6c:24:9e:2b:8d:82:a7: 96:61:5c:8f:56:6e:48:f2:d4:e9:0b:3c:7a:46:4e:07:f1:27: 5a:0e:55:2e:c8:7a:d2:bc:7d:38:9f:1b:bd:5b:59:e7:46:d3: 72:37:7d:ef:a5:c0:a3:1b:38:86:cc:48:08:5b:1b:7f:50:5e: 13:6a:2d:ef:24:c9:11:3d:38:b0:0c:2d:c1:2c:d6:b0:be:23: 69:75:62:68:4d:d1:bc:44:f7:f2:a2:fb:48:5d:35:38:26:0a: 87:80:4a:38:4d:b7:79:8a:e5:db:e0:0f:df:3f:72:22:aa:d4: 16:bd:d5:67:a7:c6:3b:f2:3a:ea:f1:6f:18:bb:62:27:60:be: da:f1:b9:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMGxdFG20LE2V/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk OTU1MWQzZmQtMDlmZi00OTBiLTg5ZGUtZTViN2U2NjI0NWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuI/wFdAlA7jHUtlXTYJKY4tRm6GP9B/1/mW +Aa1/1dYfun2VlyjGNdw9omi6rw1sdpuaVb2GX97nH5GRWcTFv7b/FV3TKII7yOW 7hgsgy6irQJKT96xA4D9qE0177DsllNzvseurSwqRW/SyHG5gvwi7mQHt3waC1aw B3vWyfQ4P7RauO2dzaQgMfVvZUcD22+O9xbRVlk7szl6DG8jlCjiZmBZPJUeCTLb mgDXcdf5vvCPZnwt4sylWOF6tQdSUSxi8V2qwgPgCZzmvvLF/j6BSoLg4NeRe1JS RWLumN2HTbtcJjGZJoMoHOc/VWPsuMlZcMUlEZi4Dgjx+KR5gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgr6Bi6rbBcv8wwrtNvsyHDYxTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjIwNGVmYmItODdjNi0z MjI5LTg0ZTgtY2Y4ODcwOGQyMTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRULgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAfOvPi8p/JzPmVyXIFfy+qzQw8geVaM4WvA1p5IjQ0CMdkfJDwb3Ik 4Ccximc/n3hAQNC8DJW/sppGTlXhCCtoxhOqQ7QzS+D9NUQJHMu42asb+axENg07 sC0lSA3pPC4HOwOdRpfKBXhzeBOiMhYzRZJNAO3+bCSeK42Cp5ZhXI9Wbkjy1OkL PHpGTgfxJ1oOVS7IetK8fTifG71bWedG03I3fe+lwKMbOIbMSAhbG39QXhNqLe8k yRE9OLAMLcEs1rC+I2l1YmhN0bxE9/Ki+0hdNTgmCoeASjhNt3mK5dvgD98/ciKq 1Ba91WenxjvyOurxbxi7YidgvtrxuQE= -----END CERTIFICATE-----Generated at Mon Jun 16 16:36:49 2025 by rpki-client