$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa File: 567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa (raw, json) Hash identifier: 0r24BQ4WeP6t2IOz8reP/J39nxaD7OfrbZ4cKdk2VzI= Subject key identifier: AE:D0:A6:70:7C:9C:36:F8:36:A6:7B:4A:29:D6:3D:15:3F:1F:B8:22 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A497077B50A10D4E091416C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 174.131.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:77:b5:0a:10:d4:e0:91:41:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=4376c17b-856f-4c7a-943a-53c519242877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:54:e3:ad:2f:50:a8:fc:f4:6c:aa:45:af: 27:2d:ea:72:d0:ba:25:78:8e:d5:c0:21:c7:1a:5f: 49:c7:3e:7b:1a:3d:12:c2:3f:e8:d9:06:01:3e:38: aa:67:af:9e:74:d2:54:da:75:d7:1a:b4:c9:0d:12: fd:a7:23:19:8a:02:cd:6f:e2:b2:d2:7e:14:74:f4: 7f:b2:0b:fd:25:a6:e1:e5:a0:3a:d7:66:47:d4:33: 3f:e8:65:14:30:cd:4d:25:01:92:d8:80:76:ee:d7: c7:b8:08:6f:0e:6e:1c:c0:6b:c7:8c:e1:3d:19:b3: c9:7e:a2:bc:b6:15:a6:7f:f6:0b:50:72:ef:15:a5: 9f:39:e4:ef:34:2b:8a:61:23:3b:0a:fc:e5:d3:32: 69:f5:3d:61:9f:c3:b8:d9:81:cf:cf:92:77:22:c0: 04:f0:a0:26:5f:26:23:4c:43:12:26:59:82:f4:89: 5f:64:84:96:ed:df:ad:62:d0:d7:e6:68:e6:0d:26: 35:2a:a8:bc:8e:cb:e2:09:f5:74:b1:e6:fb:3a:05: 27:87:52:19:04:b8:2c:a7:50:ce:03:86:f2:e6:70: f6:97:6c:8a:7e:7d:74:4b:fc:56:40:8b:e5:e1:e8: 4f:17:ef:17:cb:61:e6:d0:ba:86:98:f8:da:61:1d: 66:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:D0:A6:70:7C:9C:36:F8:36:A6:7B:4A:29:D6:3D:15:3F:1F:B8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/567b714c-d4e2-3e1c-b709-8dad7e7b8cdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 174.131.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ac:69:00:6a:d6:48:af:e0:30:48:40:f8:d1:13:3a:4a:57: 52:79:3d:53:a2:19:c6:89:f2:2e:21:8f:ae:b7:93:d2:41:f4: 5f:d8:c8:43:3b:23:f9:8a:9e:43:e4:d9:c8:9b:d2:74:9a:d2: fa:72:11:78:13:45:ef:4d:ec:a5:de:d0:84:8d:25:72:3d:9d: 92:e9:26:d8:ed:4c:09:9f:96:ea:a5:83:69:08:3e:dc:99:29: 0f:99:8e:ad:14:cf:a4:5a:52:2e:9a:75:b7:a3:5f:1d:31:ee: 2b:a4:af:49:08:4f:7a:06:81:34:98:d4:70:0c:64:1c:a2:8a: 9d:e2:99:dd:ff:fe:07:32:6e:00:f2:e6:e7:b4:35:85:93:88: eb:46:42:3a:da:63:c1:22:ae:59:82:2a:2c:82:80:55:c2:36: 92:93:60:99:d6:b3:49:1e:db:21:ba:d5:8c:ad:fd:99:7a:2d: 7c:2b:76:e5:6c:f8:ed:fd:5a:00:fe:dc:2a:55:b0:d6:76:fd: 66:15:f8:72:d2:59:ee:13:c6:eb:47:16:74:d4:75:a2:73:2b: 86:6c:26:0f:82:a9:bd:db:a5:33:99:33:0f:65:5b:98:61:88: 97:04:fc:12:43:ce:2f:a1:57:74:72:8a:fe:7b:86:6e:0d:76: 0e:76:d9:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHe1ChDU4JFBbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDM3NmMxN2ItODU2Zi00YzdhLTk0M2EtNTNjNTE5MjQyODc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLxU460vUKj89GyqRa8nLepy0LoleI7VwCHH Gl9Jxz57Gj0Swj/o2QYBPjiqZ6+edNJU2nXXGrTJDRL9pyMZigLNb+Ky0n4UdPR/ sgv9Jabh5aA612ZH1DM/6GUUMM1NJQGS2IB27tfHuAhvDm4cwGvHjOE9GbPJfqK8 thWmf/YLUHLvFaWfOeTvNCuKYSM7Cvzl0zJp9T1hn8O42YHPz5J3IsAE8KAmXyYj TEMSJlmC9IlfZISW7d+tYtDX5mjmDSY1Kqi8jsviCfV0seb7OgUnh1IZBLgsp1DO A4by5nD2l2yKfn10S/xWQIvl4ehPF+8Xy2Hm0LqGmPjaYR1m2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7QpnB8nDb4NqZ7SinWPRU/H7giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTY3YjcxNGMtZDRlMi0z ZTFjLWI3MDktOGRhZDdlN2I4Y2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDroOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+saQBq1kiv4DBIQPjREzpKV1J5PVOiGcaJ8i4hj663k9JB9F/YyEM7 I/mKnkPk2cib0nSa0vpyEXgTRe9N7KXe0ISNJXI9nZLpJtjtTAmfluqlg2kIPtyZ KQ+Zjq0Uz6RaUi6adbejXx0x7iukr0kIT3oGgTSY1HAMZByiip3imd3//gcybgDy 5ue0NYWTiOtGQjraY8EirlmCKiyCgFXCNpKTYJnWs0ke2yG61Yyt/Zl6LXwrduVs +O39WgD+3CpVsNZ2/WYV+HLSWe4TxutHFnTUdaJzK4ZsJg+Cqb3bpTOZMw9lW5hh iJcE/BJDzi+hV3Ryiv57hm4Ndg522e4= -----END CERTIFICATE-----Generated at Sun Jun 29 01:42:44 2025 by rpki-client