$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5651a50-5a4c-35cf-8826-87acd8bab02e.roa File: f5651a50-5a4c-35cf-8826-87acd8bab02e.roa (raw, json) Hash identifier: bvqXJ267U9t9DDD+7TiO5SUTEUnswKZcAlEp8kBNRJw= Subject key identifier: C9:85:B0:07:37:6D:88:9C:1D:FD:29:3D:F4:7D:A5:B7:EB:90:BE:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A18185D777D48CFCA70948780 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5651a50-5a4c-35cf-8826-87acd8bab02e.roa Signing time: Thu 05 Jun 2025 20:49:15 +0000 ROA not before: Thu 05 Jun 2025 20:49:15 +0000 ROA not after: Wed 03 Sep 2025 20:49:15 +0000 asID: 0 IP address blocks: 69.8.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:18:5d:77:7d:48:cf:ca:70:94:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 5 20:49:15 2025 GMT Not After : Sep 3 20:49:15 2025 GMT Subject: CN=12f3b667-8ef6-4359-9fae-c9c8887e58c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:e2:c5:5c:10:24:57:1b:38:3e:d7:72:92:fa: b0:39:c6:21:91:8b:8e:51:91:25:70:76:9b:40:12: 45:88:11:c1:52:74:6d:72:71:94:65:34:1c:7d:4b: 84:f0:d6:55:a8:4a:88:c2:c7:2f:ba:a3:03:98:e0: 5b:54:dc:36:9b:5e:e0:26:bc:0b:50:6f:5b:0d:55: 0b:f9:1a:da:66:a0:11:6c:75:18:fa:91:35:7a:88: fe:bd:38:20:0f:9f:e9:e7:64:12:58:c4:ec:b2:e2: 66:e2:29:3e:f6:13:e9:b6:c3:e6:72:99:b2:18:96: 00:b7:33:4b:84:f7:81:d7:03:80:a7:2e:a7:ce:f7: d4:4e:61:b0:3b:0a:a3:f8:9f:77:5d:a5:65:b9:94: 46:71:d7:29:d2:9e:ff:b7:63:7f:89:64:bb:2e:ed: 64:7c:35:25:9f:e6:fb:aa:1a:8b:16:23:35:16:c7: 21:42:55:49:39:3f:0e:bf:56:41:ef:2d:11:93:3c: 63:71:6e:52:61:5f:65:2a:4d:e3:49:ff:05:9e:7e: d8:0d:77:80:2e:6d:04:27:02:7a:07:d6:0a:14:64: e7:5b:db:7e:9e:67:d4:34:82:2a:81:3a:25:29:98: db:19:2a:5f:45:5a:8d:9c:be:f2:c8:a1:b6:96:f6: 9f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:85:B0:07:37:6D:88:9C:1D:FD:29:3D:F4:7D:A5:B7:EB:90:BE:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/f5651a50-5a4c-35cf-8826-87acd8bab02e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 69.8.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:4c:89:26:6a:08:bc:2e:02:2d:ae:04:89:ab:d1:a3:f2:9c: 02:d8:4c:6f:02:80:fd:ce:90:43:d8:71:4e:02:03:4b:cb:8f: f4:84:c9:51:81:86:b6:60:ba:33:56:db:96:34:22:2b:e1:63: 7e:ac:e7:a9:65:16:30:a3:3a:c1:c1:0b:7a:c7:ce:5d:cb:ee: bb:3f:74:24:b1:90:16:d8:f2:26:36:80:19:15:34:ed:46:2b: ca:e0:6e:53:0c:94:c0:78:1b:4f:a1:d5:ba:d6:4c:70:39:9c: 48:ae:6e:3c:03:ba:cb:f8:b0:3f:86:68:64:be:b8:12:1a:07: 20:c5:9c:8e:53:8b:d3:af:fc:6b:c2:ee:45:9a:f9:70:74:b6: a6:1e:3c:32:2b:79:9f:6d:a3:f9:bc:e3:20:1d:81:c2:36:5c: 06:c9:d3:bf:a9:f1:fa:c9:fc:c8:95:de:c0:1e:0e:09:a2:bc: 94:a0:cc:d9:45:03:b1:6f:d4:ef:83:b6:82:07:8e:eb:5f:a6: 07:cf:0b:59:e4:76:eb:b7:44:e9:e0:c9:6e:b8:f8:60:dd:3d: c7:4e:50:f7:fd:2d:fa:8c:bb:c8:a0:d5:83:8f:f9:c3:f5:48: 5e:b5:55:9d:7c:c4:75:95:91:5e:be:70:53:bd:c2:bd:bf:bb: 99:3c:9c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYGF13fUjPynCUh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYwNTIwNDkxNVoXDTI1MDkwMzIwNDkxNVowLzEtMCsGA1UEAxMk MTJmM2I2NjctOGVmNi00MzU5LTlmYWUtYzljODg4N2U1OGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6eLFXBAkVxs4PtdykvqwOcYhkYuOUZElcHab QBJFiBHBUnRtcnGUZTQcfUuE8NZVqEqIwscvuqMDmOBbVNw2m17gJrwLUG9bDVUL +RraZqARbHUY+pE1eoj+vTggD5/p52QSWMTssuJm4ik+9hPptsPmcpmyGJYAtzNL hPeB1wOApy6nzvfUTmGwOwqj+J93XaVluZRGcdcp0p7/t2N/iWS7Lu1kfDUln+b7 qhqLFiM1FschQlVJOT8Ov1ZB7y0RkzxjcW5SYV9lKk3jSf8Fnn7YDXeALm0EJwJ6 B9YKFGTnW9t+nmfUNIIqgTolKZjbGSpfRVqNnL7yyKG2lvafOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmFsAc3bYicHf0pPfR9pbfrkL7kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZjU2NTFhNTAtNWE0Yy0z NWNmLTg4MjYtODdhY2Q4YmFiMDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFRQiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZMiSZqCLwuAi2uBImr0aPynALYTG8CgP3OkEPYcU4CA0vLj/SEyVGB hrZgujNW25Y0IivhY36s56llFjCjOsHBC3rHzl3L7rs/dCSxkBbY8iY2gBkVNO1G K8rgblMMlMB4G0+h1brWTHA5nEiubjwDusv4sD+GaGS+uBIaByDFnI5Ti9Ov/GvC 7kWa+XB0tqYePDIreZ9to/m84yAdgcI2XAbJ07+p8frJ/MiV3sAeDgmivJSgzNlF A7Fv1O+DtoIHjutfpgfPC1nkduu3ROngyW64+GDdPcdOUPf9LfqMu8ig1YOP+cP1 SF61VZ18xHWVkV6+cFO9wr2/u5k8nMM= -----END CERTIFICATE-----Generated at Sun Jun 15 21:59:49 2025 by rpki-client