$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa File: 1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa (raw, json) Hash identifier: RAgFLBP+1ilI+9IwPxSjJ7TfMrO1ll64tiMJQi0u6vA= Subject key identifier: 38:7A:7A:D4:B5:1C:8D:90:D5:2F:9F:D5:8F:F7:7A:5D:DB:32:B6:07 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A3C17732514448A2C3DA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 67.217.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:3c:17:73:25:14:44:8a:2c:3d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=c63764cb-99d2-41f8-9ded-61a33fcc52db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:da:50:78:2f:9e:c9:17:80:84:14:33:e9:5c: d4:47:53:bd:ef:4d:24:f9:43:54:53:32:93:b4:0c: e0:fc:d3:20:58:41:f5:77:a8:ab:2c:b6:26:dc:98: fa:e4:8d:5d:c6:6a:71:94:41:68:e2:a8:4e:19:f8: 4e:fa:05:ec:7c:db:53:d6:e2:ba:2c:c5:f5:bc:ea: 3f:90:5a:63:17:61:55:19:e0:fc:20:f7:32:0e:69: fa:7c:77:f7:06:98:a5:a3:5a:c1:2f:d4:d0:ba:7b: 7d:fd:c0:79:1a:38:a5:4a:04:87:9e:9f:92:9b:85: 54:e3:f6:06:81:09:5d:e3:26:85:17:7f:be:60:25: 9f:a8:e5:81:76:45:19:ed:c5:d1:c7:a1:28:91:a0: 48:c5:ca:c0:f4:fd:36:2a:02:d5:d8:7a:4d:10:7b: dc:b6:19:99:5d:66:c1:c3:1e:98:75:9a:9c:05:79: d5:63:69:98:38:04:1c:91:2e:cc:ab:e9:37:0d:33: d4:0f:c8:ea:39:47:3b:2c:bb:3f:9d:d8:02:c3:f5: 2d:2f:07:e4:6a:91:84:11:6c:9c:e0:fa:3c:03:b3: 3f:cd:11:f2:68:39:ac:0f:30:65:85:a8:92:dc:9a: 42:b5:d8:9d:1d:6b:7e:4e:7a:ce:52:2a:1c:48:d4: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:7A:7A:D4:B5:1C:8D:90:D5:2F:9F:D5:8F:F7:7A:5D:DB:32:B6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1045ba58-5830-3ed1-a2b0-0f3fde4efdd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5d:4c:63:9d:2a:c7:ea:ba:fb:c4:55:90:8b:d4:ec:41:05: fe:60:12:75:18:42:de:1c:27:29:5c:bb:26:8b:d1:4d:f6:82: 78:89:eb:f5:2e:d0:20:0f:bb:2d:e9:d2:8b:63:55:17:33:cc: 2c:06:cc:41:99:1a:69:fb:14:64:6c:9c:52:c9:d4:cf:31:3e: 6a:16:e2:37:d1:44:c3:c2:49:f4:41:ef:d4:de:98:0a:70:b0: 77:bb:4f:4f:13:c9:46:60:db:5e:6b:ab:0f:df:4f:bf:ac:54: 73:38:e8:8c:7c:a1:4d:85:3f:fc:5e:aa:48:07:36:2c:61:9b: 34:20:88:dc:f9:3d:b8:c9:fc:e1:24:01:ae:4a:a7:53:1e:fb: c7:a6:ed:e1:4d:af:3b:11:2f:5f:11:6e:53:92:5d:55:19:44: 3d:2f:e1:d6:68:2b:91:c5:bb:57:fd:65:c1:0e:94:97:04:92: f3:33:d1:e9:16:c7:e4:ac:4f:67:b6:4d:29:3b:cc:3b:17:e6: 62:eb:19:96:a5:e5:d5:a5:08:ab:b7:45:29:d9:4f:3f:1b:95: f9:7c:eb:ed:79:a1:a9:34:48:38:dd:d3:cb:65:d7:9c:32:a5: d1:dc:3d:bc:a1:b9:6a:28:70:e7:3f:c4:3b:89:93:a9:fc:7d: bb:18:9d:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSjwXcyUURIosPaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk YzYzNzY0Y2ItOTlkMi00MWY4LTlkZWQtNjFhMzNmY2M1MmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdpQeC+eyReAhBQz6VzUR1O9700k+UNUUzKT tAzg/NMgWEH1d6irLLYm3Jj65I1dxmpxlEFo4qhOGfhO+gXsfNtT1uK6LMX1vOo/ kFpjF2FVGeD8IPcyDmn6fHf3Bpilo1rBL9TQunt9/cB5GjilSgSHnp+Sm4VU4/YG gQld4yaFF3++YCWfqOWBdkUZ7cXRx6EokaBIxcrA9P02KgLV2HpNEHvcthmZXWbB wx6YdZqcBXnVY2mYOAQckS7Mq+k3DTPUD8jqOUc7LLs/ndgCw/UtLwfkapGEEWyc 4Po8A7M/zRHyaDmsDzBlhaiS3JpCtdidHWt+TnrOUiocSNS91QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDh6etS1HI2Q1S+f1Y/3el3bMrYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTA0NWJhNTgtNTgzMC0z ZWQxLWEyYjAtMGYzZmRlNGVmZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxdTGOdKsfquvvEVZCL1OxBBf5gEnUYQt4cJylcuyaL0U32gniJ6/Uu 0CAPuy3p0otjVRczzCwGzEGZGmn7FGRsnFLJ1M8xPmoW4jfRRMPCSfRB79TemApw sHe7T08TyUZg215rqw/fT7+sVHM46Ix8oU2FP/xeqkgHNixhmzQgiNz5PbjJ/OEk Aa5Kp1Me+8em7eFNrzsRL18RblOSXVUZRD0v4dZoK5HFu1f9ZcEOlJcEkvMz0ekW x+SsT2e2TSk7zDsX5mLrGZal5dWlCKu3RSnZTz8blfl86+15oak0SDjd08tl15wy pdHcPbyhuWoocOc/xDuJk6n8fbsYnec= -----END CERTIFICATE-----Generated at Mon Jun 30 17:57:08 2025 by rpki-client