$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac222519-a277-3273-806a-5a07bbfa4dea.roa File: ac222519-a277-3273-806a-5a07bbfa4dea.roa (raw, json) Hash identifier: 5axHkh0qSun57qyUWa0wtEbtVlgSYNmbXR6RnvYnrIw= Subject key identifier: FA:88:EE:4D:D1:45:D7:AF:30:9A:A2:B2:A3:D3:54:A3:31:0A:F2:D2 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4A17DBAE0AEBFEF980F5C340 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac222519-a277-3273-806a-5a07bbfa4dea.roa Signing time: Mon 23 Jun 2025 18:38:39 +0000 ROA not before: Mon 23 Jun 2025 18:38:39 +0000 ROA not after: Sun 21 Sep 2025 18:38:39 +0000 asID: 7029 IP address blocks: 67.140.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:17:db:ae:0a:eb:fe:f9:80:f5:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 18:38:39 2025 GMT Not After : Sep 21 18:38:39 2025 GMT Subject: CN=f0b17e64-0073-4a6a-95e3-99fc421b0838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:99:a5:c1:88:88:47:34:a8:ee:17:c2:ab:f0: f0:a6:10:58:d4:ef:95:b4:4b:0b:fb:5a:a5:03:0c: c9:56:d9:de:f1:79:b6:12:70:d8:98:21:42:e3:9d: a5:0e:a5:e3:50:a1:a1:fc:95:f7:f9:d4:19:ff:16: 40:48:1c:3c:c3:c0:7a:c2:78:cc:b8:d8:eb:5f:d2: 6c:4b:fe:87:e4:18:ea:13:44:fa:04:a8:a2:b8:28: 03:59:e5:39:fe:20:44:98:6c:98:87:37:c3:6a:9e: c0:c3:eb:44:2f:42:d1:f4:16:b2:a7:d2:64:ac:87: 73:22:f1:3f:c8:37:0a:42:02:15:22:61:14:88:53: 57:d9:8e:00:35:cb:16:93:e9:07:29:90:ba:88:d8: 6b:b5:ad:98:37:a4:52:b8:17:68:5a:0c:f7:60:96: 37:68:0b:91:97:31:bc:f0:69:24:ec:7f:1e:fd:71: 57:49:9e:04:73:0d:5c:6d:1e:a6:80:bc:00:5e:56: c9:0d:af:6b:9c:f2:ea:d9:1d:75:f1:47:7f:33:a2: 78:76:cd:15:8c:ea:db:08:a5:b3:25:f9:08:ca:b3: b1:63:df:0d:88:22:0b:7d:11:34:c0:5d:47:6c:c8: f1:67:bd:b5:4e:6b:62:9d:31:a0:23:67:98:5a:b2: 90:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:88:EE:4D:D1:45:D7:AF:30:9A:A2:B2:A3:D3:54:A3:31:0A:F2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/ac222519-a277-3273-806a-5a07bbfa4dea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.140.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:6c:0b:49:44:24:cf:a7:6f:eb:15:4b:7a:c9:83:c1:c0:59: a8:f4:e1:f0:a0:32:33:c7:22:53:4a:c5:f5:6d:05:be:99:a0: 30:97:4d:4d:0f:ba:0c:6e:f8:b6:62:1a:46:f1:cc:b6:ca:8a: e0:92:e3:5f:73:d4:9c:8c:fb:01:05:58:3b:55:26:c0:ac:62: fc:b4:53:78:ec:38:1e:81:b4:ae:67:16:c0:61:56:47:12:9c: 23:52:42:0d:f9:78:04:00:98:b6:71:a4:55:f9:6f:d1:56:56: 7f:38:62:97:89:a5:25:c5:98:2a:f0:42:46:31:92:74:22:1b: 53:fb:5d:5f:d5:29:81:d1:db:2f:a1:5c:95:e7:e9:71:d8:d7: f9:3a:2c:23:00:4a:3a:ba:2f:bb:4c:28:98:02:5a:e2:9e:9d: 7b:78:30:d6:f4:2b:1b:dd:ea:04:7f:29:be:db:0b:b3:74:01: 8d:d9:f7:5e:37:fb:0b:1c:ae:80:75:86:ae:8d:56:a5:c2:01: 68:49:73:05:3a:2a:7f:f5:7f:fc:a6:78:a6:75:78:f6:f4:c2: 77:cf:f7:e2:94:27:8f:fe:9e:bb:74:3d:31:ed:d4:12:2d:32: dc:78:9c:6a:d6:08:0c:f8:f1:cc:61:e2:cc:41:b3:95:96:3b: b3:10:08:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKF9uuCuv++YD1w0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzE4MzgzOVoXDTI1MDkyMTE4MzgzOVowLzEtMCsGA1UEAxMk ZjBiMTdlNjQtMDA3My00YTZhLTk1ZTMtOTlmYzQyMWIwODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZmlwYiIRzSo7hfCq/DwphBY1O+VtEsL+1ql AwzJVtne8Xm2EnDYmCFC452lDqXjUKGh/JX3+dQZ/xZASBw8w8B6wnjMuNjrX9Js S/6H5BjqE0T6BKiiuCgDWeU5/iBEmGyYhzfDap7Aw+tEL0LR9Bayp9JkrIdzIvE/ yDcKQgIVImEUiFNX2Y4ANcsWk+kHKZC6iNhrta2YN6RSuBdoWgz3YJY3aAuRlzG8 8Gkk7H8e/XFXSZ4Ecw1cbR6mgLwAXlbJDa9rnPLq2R118Ud/M6J4ds0VjOrbCKWz JfkIyrOxY98NiCILfRE0wF1HbMjxZ721TmtinTGgI2eYWrKQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPqI7k3RRdevMJqisqPTVKMxCvLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYWMyMjI1MTktYTI3Ny0z MjczLTgwNmEtNWEwN2JiZmE0ZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ4wcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9sC0lEJM+nb+sVS3rJg8HAWaj04fCgMjPHIlNKxfVtBb6ZoDCXTU0P ugxu+LZiGkbxzLbKiuCS419z1JyM+wEFWDtVJsCsYvy0U3jsOB6BtK5nFsBhVkcS nCNSQg35eAQAmLZxpFX5b9FWVn84YpeJpSXFmCrwQkYxknQiG1P7XV/VKYHR2y+h XJXn6XHY1/k6LCMASjq6L7tMKJgCWuKenXt4MNb0Kxvd6gR/Kb7bC7N0AY3Z9143 +wscroB1hq6NVqXCAWhJcwU6Kn/1f/ymeKZ1ePb0wnfP9+KUJ4/+nrt0PTHt1BIt Mtx4nGrWCAz48cxh4sxBs5WWO7MQCCA= -----END CERTIFICATE-----Generated at Tue Jul 1 14:40:41 2025 by rpki-client