$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa File: 7eceef15-8b56-31df-bce1-bd77dd6ce043.roa (raw, json) Hash identifier: J51JOh+KO2YYjYBu/26UGuRVS5H/9CUDLhx0Trh6w8Q= Subject key identifier: 12:05:19:8E:64:66:BF:9B:57:68:2D:6A:C7:B6:64:CE:BD:37:66:C1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D2CA202F3066727EA024A400 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa Signing time: Mon 12 May 2025 01:00:47 +0000 ROA not before: Mon 12 May 2025 01:00:47 +0000 ROA not after: Sun 10 Aug 2025 01:00:47 +0000 asID: 7029 IP address blocks: 67.141.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d2:ca:20:2f:30:66:72:7e:a0:24:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 12 01:00:47 2025 GMT Not After : Aug 10 01:00:47 2025 GMT Subject: CN=3ae4f820-0b2a-4d31-be1d-057c25cb7488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:69:6e:53:6c:53:83:58:02:f6:d3:37:ba: b1:36:a3:c0:23:2e:70:92:9d:f8:22:71:46:26:21: 8c:18:3b:01:20:9f:12:7e:79:09:4d:2b:fc:9e:74: 63:fc:6a:5a:98:f2:f9:35:63:fc:a0:cc:e9:2e:33: 3c:45:ee:cd:42:ee:8e:2a:05:af:bd:54:69:97:0c: c5:0d:e6:d4:9d:43:b0:18:f4:5c:8d:a4:f6:20:25: 68:d2:7a:53:d3:41:d6:8a:06:d2:57:70:18:46:64: 1b:da:8c:5b:d1:d7:2e:fc:83:d0:24:2a:4c:b5:0e: 41:f7:8b:58:60:06:fb:bd:1c:25:8a:b8:e3:0b:f8: 1d:9f:ec:51:fe:b3:a0:33:fe:8e:89:b1:b3:15:40: 83:f2:34:58:bf:f2:57:83:44:58:06:21:10:f3:b8: 0f:0b:87:43:8d:b5:05:4b:7b:95:20:29:17:e2:84: 1f:b7:f8:c5:7a:1d:f5:6a:33:ce:9a:e0:1c:2b:32: 42:13:9d:c3:7a:82:d3:0a:20:bd:be:52:c4:d2:0d: 2c:04:84:43:06:5d:a4:19:ba:a7:6a:e9:4f:b3:96: bf:a3:2f:f5:9c:e6:36:6d:82:bc:be:14:e7:39:f7: ea:7d:8d:22:c7:14:51:69:9d:87:3f:ba:3f:9a:c1: 07:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:05:19:8E:64:66:BF:9B:57:68:2D:6A:C7:B6:64:CE:BD:37:66:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/7eceef15-8b56-31df-bce1-bd77dd6ce043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.141.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:19:fe:b6:4c:cf:59:d0:2a:e1:df:f9:4a:b7:57:d6:fe:e8: e6:28:03:c9:2a:94:06:13:c1:8d:a2:80:37:e8:09:f6:a7:2c: 04:ee:5c:b4:5e:e8:e8:8e:77:47:bd:e9:ef:f1:9d:4c:d8:03: 65:43:40:42:d8:7b:13:69:94:83:32:6a:fa:d8:28:21:b6:81: db:d6:d0:b8:12:8a:96:e4:c6:24:95:ac:f5:c7:74:48:48:51: e1:1e:5b:e7:4a:54:73:5d:1d:f2:9f:7a:0e:5e:7e:9e:87:d9: 27:5a:f2:1d:bb:46:ce:e0:4a:3b:85:67:db:21:d2:3c:c0:9a: fb:7e:47:35:91:33:3c:5b:b1:9e:83:d0:81:6c:b7:59:15:57: 7b:19:57:e9:1c:ce:61:fc:ad:fe:e3:3e:f6:ea:0a:a2:61:0c: 79:60:86:04:9a:df:7a:d9:22:12:f5:81:c0:6c:c5:6b:e4:08: 39:6e:52:5d:d3:75:1b:f1:e1:03:42:68:82:b1:6d:e6:39:98: 46:2e:6b:43:76:6a:27:98:0d:ce:3c:f0:5e:b4:76:fa:92:fc: fa:3c:08:b5:d4:7a:1a:75:5e:fc:43:c9:7d:4f:a6:e3:38:0a: b2:90:ab:c9:f2:5c:2b:47:7b:f7:d3:ee:7e:74:41:81:66:ba: 15:72:33:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiAvMGZyfqAkpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk M2FlNGY4MjAtMGIyYS00ZDMxLWJlMWQtMDU3YzI1Y2I3NDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+dpblNsU4NYAvbTN7qxNqPAIy5wkp34InFG JiGMGDsBIJ8SfnkJTSv8nnRj/GpamPL5NWP8oMzpLjM8Re7NQu6OKgWvvVRplwzF DebUnUOwGPRcjaT2ICVo0npT00HWigbSV3AYRmQb2oxb0dcu/IPQJCpMtQ5B94tY YAb7vRwlirjjC/gdn+xR/rOgM/6OibGzFUCD8jRYv/JXg0RYBiEQ87gPC4dDjbUF S3uVICkX4oQft/jFeh31ajPOmuAcKzJCE53DeoLTCiC9vlLE0g0sBIRDBl2kGbqn aulPs5a/oy/1nOY2bYK8vhTnOffqfY0ixxRRaZ2HP7o/msEHowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIFGY5kZr+bV2gtase2ZM69N2bBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvN2VjZWVmMTUtOGI1Ni0z MWRmLWJjZTEtYmQ3N2RkNmNlMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ43wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIZ/rZMz1nQKuHf+Uq3V9b+6OYoA8kqlAYTwY2igDfoCfanLATuXLRe 6OiOd0e96e/xnUzYA2VDQELYexNplIMyavrYKCG2gdvW0LgSipbkxiSVrPXHdEhI UeEeW+dKVHNdHfKfeg5efp6H2Sda8h27Rs7gSjuFZ9sh0jzAmvt+RzWRMzxbsZ6D 0IFst1kVV3sZV+kczmH8rf7jPvbqCqJhDHlghgSa33rZIhL1gcBsxWvkCDluUl3T dRvx4QNCaIKxbeY5mEYua0N2aieYDc488F60dvqS/Po8CLXUehp1XvxDyX1PpuM4 CrKQq8nyXCtHe/fT7n50QYFmuhVyMw4= -----END CERTIFICATE-----Generated at Tue Jul 1 05:47:44 2025 by rpki-client