$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bf7baf-b687-318f-85ac-84eaaad50d3e.roa File: 10bf7baf-b687-318f-85ac-84eaaad50d3e.roa (raw, json) Hash identifier: HlPg2ZTBObNlpeeeTHTQHGPy5lQxMXjg41iiaYZkkC4= Subject key identifier: 06:7B:83:7D:7D:71:E6:76:D6:8B:45:A6:43:AB:7D:8F:55:82:2B:88 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849ABB4909E9972B4937FFF8BB0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bf7baf-b687-318f-85ac-84eaaad50d3e.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 7029 IP address blocks: 67.141.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:90:9e:99:72:b4:93:7f:ff:8b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=ab1045ec-e03a-4f61-8792-6f980cd87e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:39:23:c0:63:00:0b:37:52:ee:00:3f:06:42: 29:f7:eb:24:09:17:36:c8:b3:10:98:74:42:ea:5e: a2:9c:93:1e:3b:40:6d:8b:ad:6b:6b:98:fa:43:fa: 95:72:99:4b:d4:4d:18:7c:be:12:ea:13:47:b8:ba: 01:21:8b:bb:74:d7:00:91:a9:b7:70:f1:0d:5e:21: 5a:ec:ef:30:c5:24:1c:c3:2f:2f:69:d0:63:ad:51: da:77:39:fd:a4:b6:03:fa:2a:f3:55:ba:e3:04:52: e0:9f:77:32:32:83:e8:bc:b6:1e:da:9a:7f:bb:be: b7:e8:59:e6:71:04:6e:a7:39:ca:45:86:3a:06:d1: e1:06:79:a1:4b:e3:80:91:99:4e:fc:22:14:af:d9: 8b:d9:7e:80:9a:cf:13:61:b5:f9:42:2f:bd:b8:e4: d2:ce:3a:f4:73:b9:54:bd:67:f4:25:6b:80:65:30: ee:10:c5:76:07:a6:cb:61:84:b0:68:c6:ee:ee:65: 22:c4:ce:47:02:ac:91:d1:ec:c8:4a:62:98:51:27: fa:73:e3:ee:c1:f6:b6:01:cb:e7:18:5c:09:10:44: 5a:c1:84:76:a8:4f:68:38:a6:80:81:e1:ed:ee:eb: e1:6d:ff:cd:80:20:15:22:f0:06:7f:43:78:cc:8a: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7B:83:7D:7D:71:E6:76:D6:8B:45:A6:43:AB:7D:8F:55:82:2B:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/10bf7baf-b687-318f-85ac-84eaaad50d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:35:04:a6:d5:cb:ac:5e:98:a9:7d:b7:9b:5b:02:21:35:57: 60:30:71:d7:3d:95:ca:06:a9:c1:17:f9:94:14:28:37:c4:84: 7e:51:62:7f:47:4e:59:08:c8:99:eb:4c:39:22:e6:6a:6d:ae: 6e:13:da:f8:47:a8:3d:f4:1e:01:11:1b:c5:1b:2e:61:07:4f: 94:7e:e6:d4:b2:da:95:13:ec:3f:80:55:6d:43:d8:63:9e:1e: 2a:09:b7:46:2b:39:9c:b0:91:ee:19:82:23:be:ef:6d:ea:07: 0e:7b:5c:10:98:95:4c:55:3a:1e:96:5b:ae:99:42:c6:c8:9e: 74:56:bb:3b:9d:60:62:6a:56:be:01:65:51:d9:4b:b6:94:89: c4:a3:f4:df:0b:5c:9a:64:04:ca:d0:ba:c3:95:f7:06:5c:a5: 74:53:f9:cf:1b:bd:ac:4a:4f:7f:49:8e:fc:76:a9:4f:b8:5a: 97:2b:25:2a:44:94:c5:f0:3d:cd:ba:c6:3b:d2:37:38:ec:da: 64:0c:aa:a9:e0:4a:41:02:e8:a6:9f:04:94:9d:45:63:6f:82: 92:ae:0f:0d:93:19:e9:9a:96:63:7e:2d:0c:97:64:c8:d0:65: ce:3e:8d:30:bb:ba:46:23:43:ad:b8:73:89:9c:72:7e:81:91: 0e:31:c4:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtJCemXK0k3//i7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk YWIxMDQ1ZWMtZTAzYS00ZjYxLTg3OTItNmY5ODBjZDg3ZTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DkjwGMACzdS7gA/BkIp9+skCRc2yLMQmHRC 6l6inJMeO0Bti61ra5j6Q/qVcplL1E0YfL4S6hNHuLoBIYu7dNcAkam3cPENXiFa 7O8wxSQcwy8vadBjrVHadzn9pLYD+irzVbrjBFLgn3cyMoPovLYe2pp/u7636Fnm cQRupznKRYY6BtHhBnmhS+OAkZlO/CIUr9mL2X6Ams8TYbX5Qi+9uOTSzjr0c7lU vWf0JWuAZTDuEMV2B6bLYYSwaMbu7mUixM5HAqyR0ezISmKYUSf6c+Puwfa2Acvn GFwJEERawYR2qE9oOKaAgeHt7uvhbf/NgCAVIvAGf0N4zIo0TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ7g319ceZ21otFpkOrfY9VgiuIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTBiZjdiYWYtYjY4Ny0z MThmLTg1YWMtODRlYWFhZDUwZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQ41oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM1BKbVy6xemKl9t5tbAiE1V2Awcdc9lcoGqcEX+ZQUKDfEhH5RYn9H TlkIyJnrTDki5mptrm4T2vhHqD30HgERG8UbLmEHT5R+5tSy2pUT7D+AVW1D2GOe HioJt0YrOZywke4ZgiO+723qBw57XBCYlUxVOh6WW66ZQsbInnRWuzudYGJqVr4B ZVHZS7aUicSj9N8LXJpkBMrQusOV9wZcpXRT+c8bvaxKT39Jjvx2qU+4WpcrJSpE lMXwPc26xjvSNzjs2mQMqqngSkEC6KafBJSdRWNvgpKuDw2TGemalmN+LQyXZMjQ Zc4+jTC7ukYjQ624c4mccn6BkQ4xxAU= -----END CERTIFICATE-----Generated at Sun May 11 15:19:27 2025 by rpki-client