$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa File: 021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa (raw, json) Hash identifier: 1iCBZUeTi+XdKC+jnbtIdprojJmXvc853OoKyitwisQ= Subject key identifier: 58:CA:CC:6F:CB:E9:D7:5C:57:52:6F:5E:58:A8:C6:65:17:C8:54:60 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A26DE88A38949C95B2280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 40114 IP address blocks: 67.151.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:26:de:88:a3:89:49:c9:5b:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=e5c1c487-f02c-45b6-9dc7-339760d42ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:ee:cd:f4:3d:91:e2:99:d0:04:dc:12:2e: 17:25:d1:9b:3f:fa:73:6c:a0:09:6e:e1:4b:1d:a1: 7a:86:21:b4:6d:00:b9:f8:ee:df:a2:2b:0d:4f:c8: 31:7a:12:86:01:bc:69:9c:6c:22:b9:40:38:5f:ce: 52:32:6d:31:a3:11:bc:a7:ce:30:43:5d:b7:36:89: b7:54:78:ab:d6:5b:2c:0e:6c:4e:88:43:b6:9d:1e: 12:eb:91:b2:82:29:a5:4f:43:0e:c6:df:d5:87:29: 7c:2e:83:79:64:6a:ae:76:c1:35:c5:f0:39:58:58: c4:21:26:2e:31:90:37:a8:d3:13:a3:8b:d2:e4:2d: eb:9b:b6:85:1a:05:c9:ea:37:01:01:5a:d6:8d:5e: 36:6b:32:41:bf:3b:9f:03:ac:02:e1:12:9d:ea:a1: 9c:1f:e1:27:4c:33:e6:0e:81:af:63:ce:3e:5c:e4: 13:a1:69:5e:7a:71:f2:20:d1:7c:a6:20:9c:60:22: 57:96:3b:ff:d1:35:f1:9b:de:1a:a3:bf:5e:4a:d4: 75:3c:62:57:40:c5:e0:62:60:bf:de:fa:4e:e0:3a: be:07:91:4b:99:cd:4a:8e:c1:c8:a9:f9:85:61:7f: d8:00:fc:e0:9c:e9:85:c2:ee:41:4f:4b:a0:dc:bb: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CA:CC:6F:CB:E9:D7:5C:57:52:6F:5E:58:A8:C6:65:17:C8:54:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/021dd7a7-f231-3d63-9425-03d2b5f60f4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:64:7c:25:66:82:49:44:7c:c9:09:07:04:d7:03:2b:f6:cb: b6:16:86:50:a0:c8:60:9d:60:2c:e3:b5:f1:82:53:fc:fd:81: b7:a1:be:e9:c6:fe:fc:24:91:07:99:7f:08:a4:07:ed:5d:fd: 5e:67:fa:e6:37:d0:ef:a2:38:c9:04:59:21:50:51:0c:12:9c: 0c:ff:14:bd:9f:e7:00:9c:9a:43:b4:70:a4:31:79:da:bd:60: 49:78:3c:02:81:8e:cc:02:65:a2:62:4e:8c:32:e5:2f:17:05: 75:3d:f6:60:50:0a:1e:cd:b8:37:3d:36:01:0c:1b:68:d6:1a: ab:15:44:81:85:54:78:0a:c6:aa:9b:4a:c5:e6:bc:1a:46:13: 9e:9f:01:86:1b:de:e9:df:2a:68:f8:7c:6e:a9:a9:db:c7:fe: e7:48:30:ff:cb:17:fa:3d:12:fd:25:ab:98:37:cf:4b:3a:9c: 19:60:dd:db:c8:0f:c6:4e:c3:ae:f6:df:8b:56:b6:56:58:bd: 3d:32:ec:66:06:ef:08:8c:6d:29:c0:16:98:8f:1a:06:6a:47: bc:af:18:19:c4:44:77:ea:55:35:47:dd:27:6e:0b:a8:32:d1: 69:87:bf:59:a0:13:67:11:fd:3c:a0:18:e7:84:3c:40:11:01: 8e:29:81:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSibeiKOJSclbIoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZTVjMWM0ODctZjAyYy00NWI2LTlkYzctMzM5NzYwZDQyYWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY/uzfQ9keKZ0ATcEi4XJdGbP/pzbKAJbuFL HaF6hiG0bQC5+O7foisNT8gxehKGAbxpnGwiuUA4X85SMm0xoxG8p84wQ123Nom3 VHir1lssDmxOiEO2nR4S65GygimlT0MOxt/Vhyl8LoN5ZGqudsE1xfA5WFjEISYu MZA3qNMTo4vS5C3rm7aFGgXJ6jcBAVrWjV42azJBvzufA6wC4RKd6qGcH+EnTDPm DoGvY84+XOQToWleenHyINF8piCcYCJXljv/0TXxm94ao79eStR1PGJXQMXgYmC/ 3vpO4Dq+B5FLmc1KjsHIqfmFYX/YAPzgnOmFwu5BT0ug3LtekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjKzG/L6ddcV1JvXlioxmUXyFRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMDIxZGQ3YTctZjIzMS0z ZDYzLTk0MjUtMDNkMmI1ZjYwZjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5daMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxkfCVmgklEfMkJBwTXAyv2y7YWhlCgyGCdYCzjtfGCU/z9gbehvunG /vwkkQeZfwikB+1d/V5n+uY30O+iOMkEWSFQUQwSnAz/FL2f5wCcmkO0cKQxedq9 YEl4PAKBjswCZaJiTowy5S8XBXU99mBQCh7NuDc9NgEMG2jWGqsVRIGFVHgKxqqb SsXmvBpGE56fAYYb3unfKmj4fG6pqdvH/udIMP/LF/o9Ev0lq5g3z0s6nBlg3dvI D8ZOw67234tWtlZYvT0y7GYG7wiMbSnAFpiPGgZqR7yvGBnERHfqVTVH3SduC6gy 0WmHv1mgE2cR/TygGOeEPEARAY4pgTo= -----END CERTIFICATE-----Generated at Sat May 10 13:06:15 2025 by rpki-client