$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25529f76-35a6-33d9-9c98-24966702a60d.roa File: 25529f76-35a6-33d9-9c98-24966702a60d.roa (raw, json) Hash identifier: w11r1fpkvqMZhf2vGB9mdqIOlKWL6NWOMNaUTBY54oU= Subject key identifier: FE:DB:07:21:13:0B:D8:A4:B0:4C:B9:6E:C1:72:FB:40:2A:75:31:66 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849AD1A11A0A4F8DFE7652B0700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25529f76-35a6-33d9-9c98-24966702a60d.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 7029 IP address blocks: 67.141.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:11:a0:a4:f8:df:e7:65:2b:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=1de809f8-fb13-4ded-b26b-0eed36b28b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b4:40:76:7e:f9:2a:d4:ba:9f:fd:c3:94:94: 6c:5b:c6:7c:30:11:83:c6:84:08:d5:52:76:d3:db: 01:01:9d:6e:50:1a:aa:f2:16:49:66:15:22:90:1b: ad:fb:8c:b9:fd:bb:d2:c6:3d:88:52:81:35:47:98: 02:22:e4:17:39:20:8e:64:d2:65:d3:fb:63:26:f7: 1c:49:e7:08:9a:63:88:dc:64:9f:bb:3a:9c:6b:9c: b1:83:56:c4:1f:52:6f:8e:c5:f9:85:27:e8:d9:eb: 65:10:66:cd:cf:96:99:4b:73:15:a1:9b:7d:aa:f1: 01:8f:2a:0d:5a:d1:fe:60:aa:03:2a:ff:96:cb:02: ef:80:e0:c3:65:1e:59:5e:59:b8:29:2f:75:b2:bb: 35:a4:f9:0f:39:72:15:1b:22:99:0d:3b:00:d0:41: ef:64:6d:35:16:cf:32:d7:6f:d5:ff:d5:10:b7:94: b4:af:b0:ab:b4:f3:21:09:d7:25:64:8b:21:16:70: 7c:f1:21:03:94:fa:68:47:fd:3c:61:a1:ea:d6:37: a2:78:eb:17:e2:f0:d9:6b:69:13:46:1d:be:53:55: 8b:17:38:45:d1:71:28:2c:4d:f8:58:ca:1d:11:db: 44:8c:a7:80:b9:50:20:47:4f:a9:57:53:06:75:4d: a9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DB:07:21:13:0B:D8:A4:B0:4C:B9:6E:C1:72:FB:40:2A:75:31:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/25529f76-35a6-33d9-9c98-24966702a60d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fc:0b:be:48:ba:47:ba:7a:72:99:ac:40:da:12:6b:0a:ff: 0f:80:5a:4e:20:5f:f9:69:2c:af:d7:23:6d:f6:74:5a:81:ab: e1:33:d8:40:92:6a:c1:c8:4c:97:99:24:d7:e3:2d:98:01:6c: 1c:93:2f:07:03:c0:29:d7:61:57:a1:b3:2d:e6:75:77:fd:b2: 39:24:67:3f:65:a8:70:8f:c6:33:58:b7:ef:d5:e8:49:ea:0b: 20:17:fb:fb:af:22:fa:9c:95:87:43:35:da:4e:6d:90:06:fc: de:cd:92:c3:3e:16:56:a2:b4:3b:2b:8e:c4:73:56:c0:0c:cc: 72:ca:95:9e:29:fb:1c:9f:9b:d8:4e:7d:33:e5:67:da:9c:3d: 5f:4f:e9:33:8b:c0:ea:ed:ae:4d:77:61:d9:ce:70:b1:9b:78: 03:46:24:48:b7:e6:e7:26:99:30:8f:18:b8:b4:bc:d9:9d:e4: b1:c0:f8:a2:f1:70:1d:e3:b9:2f:f2:73:7a:b3:5a:96:5e:21: a7:5d:d5:52:e2:21:f4:1e:c6:9f:b0:95:52:31:a0:17:34:a8: 5b:20:8b:6a:07:12:9d:d6:d1:a2:e6:5d:a4:a7:fc:e7:5d:dd: f3:52:3f:26:1c:0d:59:42:83:e0:a1:13:01:d9:94:a6:12:0f: 3f:54:66:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhGgpPjf52UrBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk MWRlODA5ZjgtZmIxMy00ZGVkLWIyNmItMGVlZDM2YjI4YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbRAdn75KtS6n/3DlJRsW8Z8MBGDxoQI1VJ2 09sBAZ1uUBqq8hZJZhUikBut+4y5/bvSxj2IUoE1R5gCIuQXOSCOZNJl0/tjJvcc SecImmOI3GSfuzqca5yxg1bEH1JvjsX5hSfo2etlEGbNz5aZS3MVoZt9qvEBjyoN WtH+YKoDKv+WywLvgODDZR5ZXlm4KS91srs1pPkPOXIVGyKZDTsA0EHvZG01Fs8y 12/V/9UQt5S0r7CrtPMhCdclZIshFnB88SEDlPpoR/08YaHq1jeieOsX4vDZa2kT Rh2+U1WLFzhF0XEoLE34WModEdtEjKeAuVAgR0+pV1MGdU2p3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7bByETC9iksEy5bsFy+0AqdTFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjU1MjlmNzYtMzVhNi0z M2Q5LTljOTgtMjQ5NjY3MDJhNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ42QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz8C75Iuke6enKZrEDaEmsK/w+AWk4gX/lpLK/XI232dFqBq+Ez2ECS asHITJeZJNfjLZgBbByTLwcDwCnXYVehsy3mdXf9sjkkZz9lqHCPxjNYt+/V6Enq CyAX+/uvIvqclYdDNdpObZAG/N7NksM+FlaitDsrjsRzVsAMzHLKlZ4p+xyfm9hO fTPlZ9qcPV9P6TOLwOrtrk13YdnOcLGbeANGJEi35ucmmTCPGLi0vNmd5LHA+KLx cB3juS/yc3qzWpZeIadd1VLiIfQexp+wlVIxoBc0qFsgi2oHEp3W0aLmXaSn/Odd 3fNSPyYcDVlCg+ChEwHZlKYSDz9UZhI= -----END CERTIFICATE-----Generated at Sun May 11 15:19:22 2025 by rpki-client