$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bee0e3ea-d65e-3abb-bed8-2f9a8faa585f.roa File: bee0e3ea-d65e-3abb-bed8-2f9a8faa585f.roa (raw, json) Hash identifier: qdlA69xwPAVOqBmE9R0gnzl8KRyTFOUgEK9kpO48Ld4= Subject key identifier: E1:C9:BA:9D:56:1E:4A:2F:69:EB:32:93:02:14:E8:E6:3F:E6:99:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A480AEAF3F316BA26FE07F0A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bee0e3ea-d65e-3abb-bed8-2f9a8faa585f.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 27338 IP address blocks: 74.8.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:ea:f3:f3:16:ba:26:fe:07:f0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=2d9e11cd-0eb4-4b74-83e9-0a0c3dc7cadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f1:77:d0:b9:a1:2c:fe:f8:60:aa:a1:9c:5d: ae:60:4b:41:c5:24:69:d5:3a:af:cb:8f:15:4c:5d: af:f9:b8:03:ad:25:2f:ab:95:89:17:d4:a0:51:7d: fc:88:32:e0:b0:7a:8b:d2:4a:81:24:ac:4f:ca:44: f6:2e:e2:93:d3:92:4d:8c:70:e1:b7:73:68:9e:a0: 31:ef:c8:bd:1d:01:ef:1d:ea:b4:33:65:6e:c8:9b: b5:44:49:30:90:24:d5:f2:8e:8e:c9:6c:22:47:db: 6e:09:81:0d:c3:2d:a1:25:7d:01:10:9b:d1:e1:0f: e3:c2:d4:81:12:5c:72:89:2b:68:05:d8:4e:b8:c1: 55:9e:23:2e:33:92:39:fe:51:02:f0:6e:5f:00:51: 0c:06:b7:3d:eb:e0:f7:08:0d:5e:7b:84:ea:f4:01: 4d:09:66:0c:07:2d:a4:51:56:7c:56:e7:ca:6d:5a: 84:70:c0:58:48:21:d1:be:07:c5:69:6c:23:d6:54: e1:30:89:a1:3c:62:3e:fc:ae:03:84:8d:81:ed:04: 76:57:da:76:08:17:74:3c:65:63:80:dd:1a:ec:60: 2b:c7:02:2a:4b:76:f0:ec:bc:1b:10:8d:60:80:16: 5e:a1:45:10:60:81:da:12:d1:ef:f7:b1:93:c8:d5: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C9:BA:9D:56:1E:4A:2F:69:EB:32:93:02:14:E8:E6:3F:E6:99:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/bee0e3ea-d65e-3abb-bed8-2f9a8faa585f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ac:6b:e5:ab:94:87:8f:af:cb:82:55:9e:df:67:e7:b5:cf: 16:16:76:f8:5b:77:1f:f0:7c:70:19:f4:71:89:03:0d:47:b4: 87:37:45:1f:6c:6c:7c:7f:4d:bf:8c:8f:34:0e:c5:f4:d3:c7: 5b:37:e4:e3:09:d6:0a:de:d4:32:01:53:5f:a1:ec:ed:ba:a5: 55:33:c7:6a:b0:e6:75:79:e7:e9:09:b1:dc:c3:68:71:30:4b: b9:ad:07:7d:06:3e:77:69:f7:cb:7e:af:b2:60:7e:9f:a0:3a: 68:ef:a8:ae:d8:94:69:cd:7b:da:db:25:86:91:c5:5a:dc:3f: 2d:71:1c:cb:1b:d7:0c:b0:23:33:06:32:fe:ba:90:42:1e:30: 4d:f3:f5:55:a1:60:fc:1e:d4:93:78:6a:a9:e3:b7:5f:c0:78: cc:97:8e:2a:55:d7:e3:9a:ca:b8:b3:a7:76:3e:3c:50:40:9d: 6f:09:2b:18:81:a2:46:8d:51:2b:b8:f6:7d:25:29:25:5f:64: eb:21:10:1a:5b:d5:12:d5:d1:93:fd:95:be:82:9c:98:c8:ce: 2c:39:cc:ae:7c:ee:39:5c:7d:6e:40:87:21:f0:eb:41:13:bd: ec:1e:e7:8d:70:29:9c:07:98:59:43:36:a4:4c:5e:60:4a:07: a8:6c:fd:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICurz8xa6Jv4H8KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk MmQ5ZTExY2QtMGViNC00Yjc0LTgzZTktMGEwYzNkYzdjYWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/F30LmhLP74YKqhnF2uYEtBxSRp1Tqvy48V TF2v+bgDrSUvq5WJF9SgUX38iDLgsHqL0kqBJKxPykT2LuKT05JNjHDht3NonqAx 78i9HQHvHeq0M2VuyJu1REkwkCTV8o6OyWwiR9tuCYENwy2hJX0BEJvR4Q/jwtSB ElxyiStoBdhOuMFVniMuM5I5/lEC8G5fAFEMBrc96+D3CA1ee4Tq9AFNCWYMBy2k UVZ8VufKbVqEcMBYSCHRvgfFaWwj1lThMImhPGI+/K4DhI2B7QR2V9p2CBd0PGVj gN0a7GArxwIqS3bw7LwbEI1ggBZeoUUQYIHaEtHv97GTyNVAxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHJup1WHkovaesykwIU6OY/5plbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYmVlMGUzZWEtZDY1ZS0z YWJiLWJlZDgtMmY5YThmYWE1ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASggTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOsa+WrlIePr8uCVZ7fZ+e1zxYWdvhbdx/wfHAZ9HGJAw1HtIc3RR9s bHx/Tb+MjzQOxfTTx1s35OMJ1gre1DIBU1+h7O26pVUzx2qw5nV55+kJsdzDaHEw S7mtB30GPndp98t+r7Jgfp+gOmjvqK7YlGnNe9rbJYaRxVrcPy1xHMsb1wywIzMG Mv66kEIeME3z9VWhYPwe1JN4aqnjt1/AeMyXjipV1+Oayrizp3Y+PFBAnW8JKxiB okaNUSu49n0lKSVfZOshEBpb1RLV0ZP9lb6CnJjIziw5zK587jlcfW5AhyHw60ET vewe541wKZwHmFlDNqRMXmBKB6hs/dE= -----END CERTIFICATE-----Generated at Mon Jun 30 00:19:49 2025 by rpki-client