$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa File: 64ac9497-103c-301c-a483-d5e403daa85e.roa (raw, json) Hash identifier: 4CH3d2GBUgT1ELR7J09Dx5sFxZK7Lr/bN2ieoyjs9kA= Subject key identifier: 86:84:29:B8:E4:5F:8A:2E:62:93:ED:EE:44:9C:2B:1F:B4:DB:1C:1F Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A374AE75F88C5FDC23B4B4C00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 7029 IP address blocks: 151.213.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:e7:5f:88:c5:fd:c2:3b:4b:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=f1b389bf-d54e-41a4-942c-ea8d5616d7db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:c9:57:55:99:61:34:6f:65:b2:b7:78:81: 82:cf:9f:24:45:b8:04:54:17:28:98:89:e0:4a:54: ba:d3:65:4e:b3:5e:9f:7b:db:2d:da:2c:aa:65:2a: e0:2f:e8:a1:5d:35:59:a3:70:b4:e0:50:0f:38:d2: 26:a2:89:63:d1:f3:f1:c3:ef:a1:24:23:6f:7f:c1: 04:a9:8c:d6:94:84:f7:2e:78:cb:bb:6c:fa:d4:b9: 11:4e:63:4f:2f:97:0c:5d:ed:9d:cf:0f:fb:b4:01: e3:a7:65:da:f4:98:dd:5c:0d:81:4a:02:09:fc:03: 41:7e:e7:94:71:5e:de:57:89:94:ce:06:b2:b1:a5: 90:a4:13:c8:0b:f1:2a:86:b2:6b:d1:96:7d:4c:eb: b4:30:45:e7:61:ce:dc:81:61:ab:6c:00:26:eb:70: 46:d3:94:8d:da:52:88:c7:79:6e:0d:84:b7:f3:e0: 63:18:77:24:03:16:99:99:49:32:83:f3:8b:bc:08: 98:75:f9:20:3f:a6:61:20:eb:de:c6:e3:0b:c8:fa: 65:b2:2c:22:88:a9:f8:ad:78:42:12:19:58:ee:23: ef:0c:13:6f:54:3e:0b:da:e8:a5:f9:d6:8f:33:db: fc:9b:7d:d7:7a:ab:5a:e1:1d:c7:c9:65:5a:73:71: 0f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:84:29:B8:E4:5F:8A:2E:62:93:ED:EE:44:9C:2B:1F:B4:DB:1C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/64ac9497-103c-301c-a483-d5e403daa85e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:26:b9:f9:96:f1:ab:01:03:80:ea:7c:90:54:62:04:1f:2c: 2e:07:c5:ff:6b:cc:61:ec:5b:38:6a:91:c9:0e:b8:6e:1d:b8: 7c:2b:9f:d2:3f:44:b4:fa:a8:fb:0b:61:fe:a3:e6:19:a5:63: 50:62:0a:8d:75:ce:75:cc:b3:ad:bb:3f:f0:ca:cf:e5:d5:c2: b3:11:92:99:f3:fe:77:c1:c4:54:b1:01:aa:3c:22:94:5b:4f: f8:37:50:ba:8e:01:94:29:0a:a8:9b:be:b9:52:91:ff:b8:65: 4e:23:65:87:7d:41:54:3b:7e:f0:e6:af:d6:2f:c7:d0:ec:ef: ce:66:4b:56:9a:a4:c8:8b:be:c4:24:c6:0d:a7:35:d5:8c:da: 84:8e:bb:c7:f8:8e:8d:b5:04:a5:61:b5:35:8f:fd:e5:18:25: ff:bb:5f:6e:60:7b:d7:6e:c6:2e:5d:3b:fb:18:69:6f:0a:d5: bd:b0:50:ed:c1:f9:5c:83:78:7b:d1:85:7c:79:d7:0a:30:5b: 5f:56:89:f6:f4:8f:3d:2d:d1:58:94:50:e5:e2:d5:bf:77:2c: d6:53:65:15:cb:1a:94:7b:16:0e:35:6c:67:e8:a7:3d:9a:a5: cb:12:df:1b:82:fc:df:a8:d0:05:7e:d4:96:8a:7d:09:ab:0a: 6e:0f:ec:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo3SudfiMX9wjtLTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZjFiMzg5YmYtZDU0ZS00MWE0LTk0MmMtZWE4ZDU2MTZkN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hDJV1WZYTRvZbK3eIGCz58kRbgEVBcomIng SlS602VOs16fe9st2iyqZSrgL+ihXTVZo3C04FAPONImoolj0fPxw++hJCNvf8EE qYzWlIT3LnjLu2z61LkRTmNPL5cMXe2dzw/7tAHjp2Xa9JjdXA2BSgIJ/ANBfueU cV7eV4mUzgaysaWQpBPIC/EqhrJr0ZZ9TOu0MEXnYc7cgWGrbAAm63BG05SN2lKI x3luDYS38+BjGHckAxaZmUkyg/OLvAiYdfkgP6ZhIOvexuMLyPplsiwiiKn4rXhC EhlY7iPvDBNvVD4L2uil+daPM9v8m33Xeqta4R3HyWVac3EPLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaEKbjkX4ouYpPt7kScKx+02xwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjRhYzk0OTctMTAzYy0z MDFjLWE0ODMtZDVlNDAzZGFhODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl9V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwmufmW8asBA4DqfJBUYgQfLC4Hxf9rzGHsWzhqkckOuG4duHwrn9I/ RLT6qPsLYf6j5hmlY1BiCo11znXMs627P/DKz+XVwrMRkpnz/nfBxFSxAao8IpRb T/g3ULqOAZQpCqibvrlSkf+4ZU4jZYd9QVQ7fvDmr9Yvx9Ds785mS1aapMiLvsQk xg2nNdWM2oSOu8f4jo21BKVhtTWP/eUYJf+7X25ge9duxi5dO/sYaW8K1b2wUO3B +VyDeHvRhXx51wowW19Wifb0jz0t0ViUUOXi1b93LNZTZRXLGpR7Fg41bGfopz2a pcsS3xuC/N+o0AV+1JaKfQmrCm4P7Nc= -----END CERTIFICATE-----Generated at Tue Jul 1 02:34:01 2025 by rpki-client