$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa File: 3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa (raw, json) Hash identifier: qNRuKwyuJIFspmmKFPezqYolBpyWXDIHn4/l3lpUahA= Subject key identifier: 96:02:8E:EE:5D:EC:52:76:19:09:F7:61:E7:46:B3:3B:22:8B:11:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1654C601E5FB45346DD10C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 67.141.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:4c:60:1e:5f:b4:53:46:dd:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=733bf713-f2d8-4a76-9fe9-e519d73179af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:6d:e3:2b:98:80:c5:b7:7b:4d:f5:3b:b5: e8:66:20:08:ea:15:f5:11:8e:41:dc:e4:52:c5:e9: 80:fb:59:6e:a1:99:e8:9b:06:00:84:d1:3a:f9:9e: 3a:d7:66:31:51:7c:ba:ac:0d:ab:b1:f6:cb:47:cc: 58:78:09:71:ae:ac:54:fa:fa:0d:37:80:97:b9:df: af:a5:5e:4c:4a:c9:47:2d:9c:64:11:7b:32:9f:d3: e4:74:50:1d:61:5e:d4:99:68:0d:e3:4a:f6:09:7a: fa:10:94:29:e1:7c:99:82:07:7e:87:17:7c:51:f8: d8:13:8e:8a:45:b0:d6:f1:47:e7:20:7a:bf:6f:ee: 60:29:da:53:ac:56:f3:26:33:22:14:8a:bb:17:30: 07:86:df:18:f7:33:9a:7e:83:a6:36:fb:c7:fc:a1: 74:6f:12:31:c6:4c:8c:aa:3d:ab:b4:6f:e1:ba:78: 3e:21:40:2b:01:7a:e9:a9:4f:ce:26:ff:10:bf:f5: f6:2c:30:2d:74:50:67:96:bd:0c:9a:df:5b:bf:b3: fb:8c:3f:f0:19:3b:1f:a3:1e:3a:a8:88:2d:26:8c: 4f:3b:e5:18:94:34:2d:b2:b4:7e:d7:8b:95:ed:16: df:0e:f8:0e:33:c4:a7:25:bd:97:44:c7:83:37:d7: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:02:8E:EE:5D:EC:52:76:19:09:F7:61:E7:46:B3:3B:22:8B:11:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/3706bb21-2627-3a2a-a5cd-e8b9d122595c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:03:15:0f:fc:70:d7:57:d0:89:7c:44:60:ca:89:97:9c:d7: d0:01:78:84:99:64:70:33:c3:44:50:90:33:f2:fa:60:8a:4a: 5b:0a:08:f0:7c:41:23:c2:71:81:03:28:d5:3c:d4:c7:80:07: d0:4c:a4:f3:1b:4b:7a:43:68:d9:ea:fd:5a:77:33:8d:25:54: 69:90:4c:db:5f:f8:fe:90:b6:db:f2:87:f4:97:bf:7e:45:31: 28:34:78:75:d5:65:64:13:c4:7d:41:f6:65:b2:10:29:c8:d3: 7f:8d:ac:10:83:31:39:2b:cb:ba:6b:b1:18:17:19:73:65:4b: f5:c7:51:36:1f:56:8b:56:b5:82:f9:d5:56:19:b7:1d:23:53: 85:87:0b:ed:5c:a0:5a:66:0d:ec:6b:ad:30:2a:71:01:ca:dd: 7d:34:d6:e2:15:db:3e:23:ea:df:68:bf:a4:29:cc:29:9e:32: e9:54:f6:0e:18:c8:45:d9:d4:b5:19:1c:26:9a:66:dc:02:4d: a2:da:29:d4:77:b1:4d:5b:2d:8b:5d:49:b9:b5:14:28:58:c8: 7c:24:3c:c7:60:52:83:97:67:37:58:a8:bf:ea:5f:66:3b:1b: cb:74:d8:10:f8:89:aa:c8:86:1b:36:c4:7f:0c:94:ff:bc:0e: e0:cd:0c:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZUxgHl+0U0bdEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk NzMzYmY3MTMtZjJkOC00YTc2LTlmZTktZTUxOWQ3MzE3OWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9lt4yuYgMW3e031O7XoZiAI6hX1EY5B3ORS xemA+1luoZnomwYAhNE6+Z4612YxUXy6rA2rsfbLR8xYeAlxrqxU+voNN4CXud+v pV5MSslHLZxkEXsyn9PkdFAdYV7UmWgN40r2CXr6EJQp4XyZggd+hxd8UfjYE46K RbDW8UfnIHq/b+5gKdpTrFbzJjMiFIq7FzAHht8Y9zOafoOmNvvH/KF0bxIxxkyM qj2rtG/hung+IUArAXrpqU/OJv8Qv/X2LDAtdFBnlr0Mmt9bv7P7jD/wGTsfox46 qIgtJoxPO+UYlDQtsrR+14uV7RbfDvgOM8SnJb2XRMeDN9f3PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYCju5d7FJ2GQn3YedGszsiixENMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzcwNmJiMjEtMjYyNy0z YTJhLWE1Y2QtZThiOWQxMjI1OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ43fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIADFQ/8cNdX0Il8RGDKiZec19ABeISZZHAzw0RQkDPy+mCKSlsKCPB8 QSPCcYEDKNU81MeAB9BMpPMbS3pDaNnq/Vp3M40lVGmQTNtf+P6Qttvyh/SXv35F MSg0eHXVZWQTxH1B9mWyECnI03+NrBCDMTkry7prsRgXGXNlS/XHUTYfVotWtYL5 1VYZtx0jU4WHC+1coFpmDexrrTAqcQHK3X001uIV2z4j6t9ov6QpzCmeMulU9g4Y yEXZ1LUZHCaaZtwCTaLaKdR3sU1bLYtdSbm1FChYyHwkPMdgUoOXZzdYqL/qX2Y7 G8t02BD4iarIhhs2xH8MlP+8DuDNDA4= -----END CERTIFICATE-----Generated at Sun Jun 29 08:47:01 2025 by rpki-client