$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa File: cf79479d-0990-3363-b8f2-7fae6b057a0c.roa (raw, json) Hash identifier: qdl9OGlfmaUeVqP0dhnVZldvjVOHb23IMPaEa92II68= Subject key identifier: 73:A3:F7:A8:85:D3:C3:AD:CE:2D:F6:30:23:70:B7:64:22:15:D2:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A12CA52001B5633CF4280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7029 IP address blocks: 67.217.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:12:ca:52:00:1b:56:33:cf:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=d2762e91-84e9-43dd-9d0a-a8a20f09de9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:d7:16:a8:55:75:4b:82:18:dc:4e:4e:c6: e8:03:c4:de:a3:72:15:91:63:09:a8:68:26:7f:d6: d0:6d:89:95:59:3b:1c:86:33:5f:78:be:ec:a2:a9: f7:e3:9e:1b:88:41:69:7f:f9:36:b1:98:19:bc:f7: 71:78:b4:df:6a:34:45:2f:a3:d7:a9:a2:7a:6d:4c: d1:67:3f:41:f6:b8:81:87:24:00:91:d6:68:d7:0f: 9f:09:b2:0b:4f:c9:bb:a0:5e:bd:5f:87:aa:f5:95: 99:65:15:a8:34:ea:ba:9b:72:a5:66:03:a5:b6:ac: b3:fa:98:81:52:10:cc:42:59:cc:32:2a:f1:51:4d: 40:8e:a7:bc:54:91:66:f2:21:fc:1f:e6:ad:47:af: b5:ff:cd:58:01:98:8f:d6:6a:0d:77:ee:ab:51:1d: 23:fa:26:a5:f8:28:22:64:e4:68:83:fb:03:85:85: e2:f4:4b:22:fe:c3:34:c6:75:ea:5e:db:00:b1:60: e3:d6:81:9f:3d:aa:e4:60:57:fe:3e:48:83:1a:0a: eb:b4:ae:89:5a:bd:90:31:d8:7b:99:b6:ef:d2:5b: 46:85:fe:46:48:57:1b:a8:4d:b8:8e:eb:54:5e:5b: 51:d8:13:e9:ad:d5:a9:ab:a9:8e:78:a5:73:e3:08: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:A3:F7:A8:85:D3:C3:AD:CE:2D:F6:30:23:70:B7:64:22:15:D2:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/cf79479d-0990-3363-b8f2-7fae6b057a0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.217.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e7:fb:2a:17:23:5b:39:4a:bd:64:aa:2a:68:fa:ca:a4:e0: 38:57:e1:41:67:6c:7e:1b:e1:4d:da:c9:e7:1c:f6:13:0e:e3: a0:02:08:d7:47:0e:38:37:fa:8d:ce:85:5c:2f:fc:81:89:cf: 21:79:b5:e7:6b:27:eb:9a:20:87:64:12:33:79:d2:a2:35:fb: 1e:a0:da:19:8c:50:f4:c1:06:aa:9f:f4:8c:33:68:ea:fe:d0: fe:6f:14:b1:37:91:eb:a1:05:26:b3:ce:7e:92:d4:c7:1f:f3: 3d:6a:e0:0b:53:14:9e:4d:46:05:64:41:b8:2e:49:86:43:2a: 61:06:b8:98:e0:d5:b5:8e:da:3b:de:84:6c:2b:7e:21:49:6e: 86:69:6b:eb:51:13:7c:77:94:56:f5:56:e7:d2:a7:7c:a5:73: 86:6e:14:ae:ab:f5:00:3c:2f:2a:e3:48:33:d1:22:f2:16:37: 3b:87:8c:a2:b8:7f:8a:69:cf:51:d8:f1:c0:c8:07:d4:25:a9: 0b:a5:54:34:aa:d1:fa:a9:3b:61:e0:ee:18:71:ad:eb:db:92: 6c:3f:3e:2b:35:5a:75:f9:a8:2d:c2:8a:1d:c4:ae:59:89:78: 13:d5:29:6a:cb:59:f0:d4:c4:ea:cf:78:0e:34:a4:c6:77:49: 94:0e:ae:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxShLKUgAbVjPPQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZDI3NjJlOTEtODRlOS00M2RkLTlkMGEtYThhMjBmMDlkZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWDXFqhVdUuCGNxOTsboA8Teo3IVkWMJqGgm f9bQbYmVWTschjNfeL7soqn3454biEFpf/k2sZgZvPdxeLTfajRFL6PXqaJ6bUzR Zz9B9riBhyQAkdZo1w+fCbILT8m7oF69X4eq9ZWZZRWoNOq6m3KlZgOltqyz+piB UhDMQlnMMirxUU1Ajqe8VJFm8iH8H+atR6+1/81YAZiP1moNd+6rUR0j+ial+Cgi ZORog/sDhYXi9Esi/sM0xnXqXtsAsWDj1oGfParkYFf+PkiDGgrrtK6JWr2QMdh7 mbbv0ltGhf5GSFcbqE24jutUXltR2BPprdWpq6mOeKVz4wjU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOj96iF08Otzi32MCNwt2QiFdKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvY2Y3OTQ3OWQtMDk5MC0z MzYzLWI4ZjItN2ZhZTZiMDU3YTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9mBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHn+yoXI1s5Sr1kqipo+sqk4DhX4UFnbH4b4U3ayecc9hMO46ACCNdH Djg3+o3OhVwv/IGJzyF5tedrJ+uaIIdkEjN50qI1+x6g2hmMUPTBBqqf9IwzaOr+ 0P5vFLE3keuhBSazzn6S1Mcf8z1q4AtTFJ5NRgVkQbguSYZDKmEGuJjg1bWO2jve hGwrfiFJboZpa+tRE3x3lFb1VufSp3ylc4ZuFK6r9QA8LyrjSDPRIvIWNzuHjKK4 f4ppz1HY8cDIB9QlqQulVDSq0fqpO2Hg7hhxrevbkmw/Pis1WnX5qC3Cih3ErlmJ eBPVKWrLWfDUxOrPeA40pMZ3SZQOrvE= -----END CERTIFICATE-----Generated at Sat May 10 13:32:31 2025 by rpki-client