$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2764cb76-a78d-3c1f-8955-2275a2a27eab.roa File: 2764cb76-a78d-3c1f-8955-2275a2a27eab.roa (raw, json) Hash identifier: BM8kTkDXnzx2ZqCNEy+NNXe0rSVheHn50FCW9l48MTg= Subject key identifier: 17:B9:91:D2:07:9A:AF:24:CE:0A:9C:B5:94:5D:BD:1B:67:53:BB:D1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4A15A3A36C46BE21821B9100 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2764cb76-a78d-3c1f-8955-2275a2a27eab.roa Signing time: Mon 23 Jun 2025 18:34:11 +0000 ROA not before: Mon 23 Jun 2025 18:34:11 +0000 ROA not after: Sun 21 Sep 2025 18:34:11 +0000 asID: 7029 IP address blocks: 67.140.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:15:a3:a3:6c:46:be:21:82:1b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 18:34:11 2025 GMT Not After : Sep 21 18:34:11 2025 GMT Subject: CN=3fa492df-9864-4744-b43a-537b128a7bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:81:83:70:76:cd:0f:dd:f7:7a:b1:1a:88: 5d:11:23:18:b5:ef:62:f4:c2:39:68:96:3e:51:11: 7f:46:c9:67:59:0b:7f:c9:69:25:44:b9:5b:21:e3: 65:ce:a3:6b:ee:2b:d7:d3:f5:82:5f:80:27:c0:a8: 0a:3b:bf:5a:46:e0:75:92:6c:74:a1:4c:c6:75:cb: 9c:29:03:a6:ce:31:1e:36:0b:40:22:67:64:25:20: 73:2d:c8:18:7f:ab:44:6d:d2:23:57:a7:48:a8:ed: 36:30:f4:16:d4:5e:f6:20:de:26:49:bd:1d:45:ea: 6d:1d:18:93:cd:bd:b5:55:f8:f8:a6:f1:cf:f5:dc: a2:bb:df:71:ae:3d:37:25:22:20:16:8e:32:cb:3d: 85:96:e0:9f:fd:ba:9d:4b:91:a5:38:bb:f8:e9:95: 25:b8:7d:bd:cd:e5:43:8a:d3:20:11:24:6e:2b:e9: fd:b9:be:56:c5:31:50:f6:d0:47:82:e3:45:27:c6: c4:9b:52:05:cd:25:00:f8:62:ea:3d:91:02:d1:f4: 8b:8d:f5:da:a6:0f:1f:49:df:e0:a8:34:b7:40:4d: 2b:b7:2e:c8:c6:ac:2b:3f:11:c3:86:10:39:30:42: 95:f6:d8:7b:44:18:f8:30:60:a9:69:82:49:e3:fc: 24:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B9:91:D2:07:9A:AF:24:CE:0A:9C:B5:94:5D:BD:1B:67:53:BB:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2764cb76-a78d-3c1f-8955-2275a2a27eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:23:44:c9:2b:8d:02:89:fc:f3:e8:cc:13:48:36:78:7c:10: 8a:c4:d0:4d:4d:ff:bc:cd:c4:9d:9c:3e:72:d2:63:85:7f:cd: b0:ef:f3:c1:8d:b6:5c:5d:5b:44:e4:73:cb:87:81:b9:d2:d5: cd:e6:46:57:5d:64:1b:b6:26:75:7a:bb:55:7d:43:fa:59:98: 67:dc:22:bf:b1:6c:8d:d5:ad:0e:7f:0d:85:8d:a6:4e:04:b4: be:6f:ac:56:61:df:e8:b6:4d:2e:0b:5e:bd:54:dc:36:41:a9: 52:01:13:8f:3a:00:5b:26:b6:67:f6:af:b7:8c:1b:0b:54:09: 97:82:06:68:ce:e0:ac:5e:0b:81:29:35:d8:c4:81:cf:5c:a4: 77:4c:6c:79:3a:37:ed:ca:21:cd:b3:42:e6:09:93:8f:f6:a2: 12:ba:f2:fb:85:75:8d:84:0f:ad:b4:30:e4:0a:54:6b:73:72: 1c:68:d2:da:02:12:7f:7a:16:6b:b9:4c:b1:09:47:e1:51:f6: 91:c1:10:e8:05:fc:b8:8f:f2:7d:d9:1a:1d:1e:44:f0:8e:39: 67:5d:6c:21:c0:41:40:92:a3:58:74:9e:71:37:c0:51:04:43: 40:63:73:6f:fb:a2:f1:9f:6e:31:eb:f6:85:ae:a5:f2:30:fc: 17:be:67:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKFaOjbEa+IYIbkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzE4MzQxMVoXDTI1MDkyMTE4MzQxMVowLzEtMCsGA1UEAxMk M2ZhNDkyZGYtOTg2NC00NzQ0LWI0M2EtNTM3YjEyOGE3YmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxReBg3B2zQ/d93qxGohdESMYte9i9MI5aJY+ URF/RslnWQt/yWklRLlbIeNlzqNr7ivX0/WCX4AnwKgKO79aRuB1kmx0oUzGdcuc KQOmzjEeNgtAImdkJSBzLcgYf6tEbdIjV6dIqO02MPQW1F72IN4mSb0dReptHRiT zb21Vfj4pvHP9dyiu99xrj03JSIgFo4yyz2FluCf/bqdS5GlOLv46ZUluH29zeVD itMgESRuK+n9ub5WxTFQ9tBHguNFJ8bEm1IFzSUA+GLqPZEC0fSLjfXapg8fSd/g qDS3QE0rty7IxqwrPxHDhhA5MEKV9th7RBj4MGCpaYJJ4/wkJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBe5kdIHmq8kzgqctZRdvRtnU7vRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjc2NGNiNzYtYTc4ZC0z YzFmLTg5NTUtMjI3NWEyYTI3ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ4wYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMjRMkrjQKJ/PPozBNINnh8EIrE0E1N/7zNxJ2cPnLSY4V/zbDv88GN tlxdW0Tkc8uHgbnS1c3mRlddZBu2JnV6u1V9Q/pZmGfcIr+xbI3VrQ5/DYWNpk4E tL5vrFZh3+i2TS4LXr1U3DZBqVIBE486AFsmtmf2r7eMGwtUCZeCBmjO4KxeC4Ep NdjEgc9cpHdMbHk6N+3KIc2zQuYJk4/2ohK68vuFdY2ED620MOQKVGtzchxo0toC En96Fmu5TLEJR+FR9pHBEOgF/LiP8n3ZGh0eRPCOOWddbCHAQUCSo1h0nnE3wFEE Q0Bjc2/7ovGfbjHr9oWupfIw/Be+Z+s= -----END CERTIFICATE-----Generated at Sun Jun 29 11:21:42 2025 by rpki-client