$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa File: d01fa785-c9d0-379b-945c-f32c18629967.roa (raw, json) Hash identifier: CQcLwUtbWjstli5YRLhvqzkKLcT8WSv6kJnJm+RF4rk= Subject key identifier: 2D:51:7A:1B:DB:EF:D5:9A:E6:4D:1F:DE:52:9B:DF:58:24:E5:36:B1 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A480AEB299F5E0F7883E69FA0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 27338 IP address blocks: 74.8.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:eb:29:9f:5e:0f:78:83:e6:9f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=397d190a-fb88-4217-a0df-69c03148bfce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0b:79:c7:33:cf:2d:2b:09:c4:66:39:45:67: 32:98:d2:a4:50:29:78:8e:3d:ee:3e:6c:80:a0:9f: 23:fd:44:2b:16:4d:39:b3:e9:3d:bd:fb:22:d1:b3: 8d:62:14:ff:eb:e1:3b:1c:23:70:f8:9a:21:38:e2: bc:1c:e0:39:cc:35:dc:f0:29:93:bf:cd:5b:79:fa: 2c:6d:46:93:cf:de:4e:b7:39:96:24:38:96:52:3c: 3c:8f:62:a7:9c:bf:4f:b9:ac:e5:f4:85:7a:65:82: 1c:f9:41:21:60:83:49:d6:26:79:f6:a9:26:de:aa: c5:f3:80:4f:a2:6e:4d:5a:70:2d:0f:0c:38:b4:31: 49:ee:3f:71:f3:6c:7a:16:b5:5e:29:2a:4f:01:65: 07:f3:ed:cb:29:eb:b5:b1:28:d8:43:f8:d7:72:b2: ce:92:a8:f6:1d:fd:83:c7:05:d6:8a:22:2e:38:58: ff:2f:07:7a:f8:64:5d:bb:d0:40:70:0f:09:a9:5f: 6a:10:84:22:77:f6:9a:dc:ad:c4:ec:fb:3f:4a:9f: 05:3b:dd:de:e9:cd:35:e5:48:94:66:65:62:c5:c4: 08:60:3a:17:1a:bb:3b:22:14:87:89:c1:35:c5:1e: 37:70:5b:11:6c:f4:0e:5f:9e:7c:4b:18:0b:8f:91: 51:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:51:7A:1B:DB:EF:D5:9A:E6:4D:1F:DE:52:9B:DF:58:24:E5:36:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d01fa785-c9d0-379b-945c-f32c18629967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 74.8.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ee:26:40:ea:7f:58:17:f5:d1:4f:9a:4e:3e:72:44:de:42: 6c:2e:79:6b:17:d0:27:ea:bb:5c:90:a3:45:66:72:10:1a:75: 2c:ad:7a:00:88:3e:82:28:15:78:b2:0d:d9:03:dc:47:ab:36: a8:e7:be:57:23:01:db:5e:05:d0:a2:9c:1f:2d:31:41:81:19: 7f:ce:0e:00:b9:79:64:5c:3f:0f:9b:5f:4a:cd:07:7b:1c:0c: 80:cf:b3:d3:2c:79:4d:98:9b:0f:b9:29:b1:b7:dd:10:c3:74: cc:05:e3:19:35:1f:62:5f:03:55:82:62:73:ac:8e:55:93:67: 72:f1:d7:3b:de:ca:5f:c6:4d:a9:70:74:52:26:18:93:18:67: 12:3e:98:52:de:b7:f0:2e:df:7c:f0:54:0d:2d:78:6a:e0:39: 60:2b:04:07:95:4e:76:fe:92:ed:fb:41:fb:49:e1:c5:a0:3a: 6f:bb:21:d4:c4:55:28:f2:44:0f:75:43:ea:e9:13:b1:60:4d: 1b:84:1f:22:ea:80:b5:3f:17:ff:ec:1b:6b:a2:5a:8e:94:d5: e7:10:3f:76:e3:e6:1a:72:e2:0d:5d:38:04:26:97:67:20:dc: 74:29:4d:e5:e1:ad:17:f9:d8:f9:1f:80:da:2b:3b:5c:65:cc: 05:ec:34:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuspn14PeIPmn6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk Mzk3ZDE5MGEtZmI4OC00MjE3LWEwZGYtNjljMDMxNDhiZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwt5xzPPLSsJxGY5RWcymNKkUCl4jj3uPmyA oJ8j/UQrFk05s+k9vfsi0bONYhT/6+E7HCNw+JohOOK8HOA5zDXc8CmTv81befos bUaTz95OtzmWJDiWUjw8j2KnnL9Puazl9IV6ZYIc+UEhYINJ1iZ59qkm3qrF84BP om5NWnAtDww4tDFJ7j9x82x6FrVeKSpPAWUH8+3LKeu1sSjYQ/jXcrLOkqj2Hf2D xwXWiiIuOFj/Lwd6+GRdu9BAcA8JqV9qEIQid/aa3K3E7Ps/Sp8FO93e6c015UiU ZmVixcQIYDoXGrs7IhSHicE1xR43cFsRbPQOX558SxgLj5FR/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1Rehvb79Wa5k0f3lKb31gk5TaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDAxZmE3ODUtYzlkMC0z NzliLTk0NWMtZjMyYzE4NjI5OTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASgj9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPuJkDqf1gX9dFPmk4+ckTeQmwueWsX0Cfqu1yQo0VmchAadSytegCI PoIoFXiyDdkD3EerNqjnvlcjAdteBdCinB8tMUGBGX/ODgC5eWRcPw+bX0rNB3sc DIDPs9MseU2Ymw+5KbG33RDDdMwF4xk1H2JfA1WCYnOsjlWTZ3Lx1zveyl/GTalw dFImGJMYZxI+mFLet/Au33zwVA0teGrgOWArBAeVTnb+ku37QftJ4cWgOm+7IdTE VSjyRA91Q+rpE7FgTRuEHyLqgLU/F//sG2uiWo6U1ecQP3bj5hpy4g1dOAQml2cg 3HQpTeXhrRf52PkfgNorO1xlzAXsNKY= -----END CERTIFICATE-----Generated at Sun Jun 29 21:06:14 2025 by rpki-client