$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa File: 1582a278-a9a0-34ec-b9a0-508aef382872.roa (raw, json) Hash identifier: b6CxRazR6AK8I/OtNlH/NaCImHoHTqBpucRqVPNPMVA= Subject key identifier: A1:EA:6E:6E:71:C7:5D:8B:17:04:46:8A:EA:5B:6B:4C:39:56:E3:E1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1654BA6C2647EC514E50300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 67.140.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4b:a6:c2:64:7e:c5:14:e5:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=22789adb-757a-49be-950b-d096e78e0b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:69:92:e7:c3:5d:11:46:40:be:ab:fd:5e:42: 7e:69:62:01:2b:58:47:90:28:e7:07:04:86:69:8b: 9d:30:fd:50:ba:d4:d9:6c:57:7e:63:db:0f:53:13: a5:e4:20:c6:99:c8:af:a2:36:c1:7f:3a:e5:9a:1a: 2c:74:e6:2c:3a:21:73:ec:cd:c9:86:7b:f7:c0:25: e3:38:c0:2e:64:96:62:14:3d:00:e2:b8:78:ab:66: bf:b8:6f:e9:59:cb:8c:67:b8:9f:b4:be:26:67:8a: 38:b6:3f:0b:37:b5:97:36:20:08:ae:c6:29:e6:0e: ad:e0:8a:21:92:c5:3e:2b:5e:bc:4a:2c:0b:21:de: a8:e8:63:d5:37:d8:fc:b6:36:e1:e7:fe:3a:90:dd: 9f:be:aa:aa:aa:33:f3:aa:ea:31:7b:a3:cf:8a:07: f6:fb:e3:94:aa:03:4d:3c:60:cf:a8:d9:44:52:6b: 24:e5:cb:a5:46:bd:03:b4:d4:ca:9b:13:2e:32:2a: 0d:3b:ba:84:48:bd:8c:ad:40:57:09:ae:1e:bd:5c: b5:ce:cc:ea:2f:11:85:ca:67:f7:15:5b:30:d7:22: 6f:d9:8a:3b:89:57:dd:8b:27:21:20:b6:e0:21:bc: 9a:cd:12:e0:c2:d1:9e:66:ed:b1:10:12:f9:28:f8: 6b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:EA:6E:6E:71:C7:5D:8B:17:04:46:8A:EA:5B:6B:4C:39:56:E3:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1582a278-a9a0-34ec-b9a0-508aef382872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4e:84:b7:73:a3:73:5f:43:ad:af:cd:d3:a0:e5:75:8d:8b: ec:f5:79:71:0c:fe:37:33:a3:b9:0b:5a:7c:df:ec:31:d4:8d: 60:db:3e:df:d8:da:99:31:47:7b:2a:31:5b:47:21:04:fd:ca: 89:c6:cf:8a:e2:1c:d9:25:b3:a0:65:b1:b5:47:10:a5:d8:fa: bd:8a:61:3c:cc:92:e2:b9:16:c1:0e:d0:b3:1e:dc:92:b3:34: 1e:e9:1d:cf:ee:28:0d:ef:af:3e:94:2c:53:34:34:aa:13:10: 5d:36:5e:3f:08:2f:bb:0e:82:73:69:41:a4:05:5f:b1:42:63: 40:02:f9:da:8f:ce:a0:98:6f:ee:43:43:42:06:6e:06:eb:10: 56:6b:65:09:43:6f:ea:78:ee:39:e1:61:3b:d0:c6:fa:fe:ff: 63:d1:9b:e6:39:7a:e6:a7:18:10:82:44:a3:23:9e:ae:4b:85: f2:fc:96:8d:e9:f5:aa:34:84:e8:8f:b8:12:d9:82:15:31:d2: bd:4b:48:72:e4:7b:5f:a8:26:e0:78:27:29:2d:b5:a1:bd:e3: 07:58:02:db:c0:d5:02:63:61:3e:e7:69:eb:b4:ff:b3:0e:bb: f1:44:6b:fd:4c:f5:cb:fb:df:dc:08:51:5b:a5:67:1e:bb:af: 64:c0:76:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZUumwmR+xRTlAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk MjI3ODlhZGItNzU3YS00OWJlLTk1MGItZDA5NmU3OGUwYjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWmS58NdEUZAvqv9XkJ+aWIBK1hHkCjnBwSG aYudMP1QutTZbFd+Y9sPUxOl5CDGmcivojbBfzrlmhosdOYsOiFz7M3Jhnv3wCXj OMAuZJZiFD0A4rh4q2a/uG/pWcuMZ7iftL4mZ4o4tj8LN7WXNiAIrsYp5g6t4Ioh ksU+K168SiwLId6o6GPVN9j8tjbh5/46kN2fvqqqqjPzquoxe6PPigf2++OUqgNN PGDPqNlEUmsk5culRr0DtNTKmxMuMioNO7qESL2MrUBXCa4evVy1zszqLxGFymf3 FVsw1yJv2Yo7iVfdiychILbgIbyazRLgwtGeZu2xEBL5KPhrlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHqbm5xx12LFwRGiupba0w5VuPhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTU4MmEyNzgtYTlhMC0z NGVjLWI5YTAtNTA4YWVmMzgyODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ4xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABROhLdzo3NfQ62vzdOg5XWNi+z1eXEM/jczo7kLWnzf7DHUjWDbPt/Y 2pkxR3sqMVtHIQT9yonGz4riHNkls6BlsbVHEKXY+r2KYTzMkuK5FsEO0LMe3JKz NB7pHc/uKA3vrz6ULFM0NKoTEF02Xj8IL7sOgnNpQaQFX7FCY0AC+dqPzqCYb+5D Q0IGbgbrEFZrZQlDb+p47jnhYTvQxvr+/2PRm+Y5euanGBCCRKMjnq5LhfL8lo3p 9ao0hOiPuBLZghUx0r1LSHLke1+oJuB4JykttaG94wdYAtvA1QJjYT7naeu0/7MO u/FEa/1M9cv739wIUVulZx67r2TAdic= -----END CERTIFICATE-----Generated at Mon May 12 07:17:26 2025 by rpki-client