$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa File: db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa (raw, json) Hash identifier: ltIYx35DAu8+IfBeYWXKtR7D7vCsAhM/69z5QnHvs4s= Subject key identifier: C1:01:9B:7B:5D:A2:27:15:C2:15:7A:27:C6:45:C4:75:E6:B2:FD:C7 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A480518FB1ABE8D317130 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 7381 IP address blocks: 67.151.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:48:05:18:fb:1a:be:8d:31:71:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=f067939f-90f2-4a7b-8fb1-d7cc5376099c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1d:dc:99:94:81:89:51:c6:78:c7:30:7a:95: cb:b8:cb:f0:25:e1:f4:2b:69:0b:f7:3d:93:7f:40: a0:29:5e:17:95:d1:90:6b:af:ce:f7:d5:6d:84:b1: 98:2b:3f:8f:59:9d:02:53:14:fc:a3:4f:fa:bb:06: 62:5b:11:51:b7:7a:42:28:e1:5b:c7:3c:86:bb:3c: 5d:5e:ed:cc:46:92:c1:87:7d:03:02:e9:f5:cb:71: 99:3d:fa:29:78:87:b9:59:d2:57:68:e9:2b:bd:30: 9d:4f:e2:dc:29:28:6b:ab:ec:b6:b9:50:2f:61:1d: cd:ad:74:e6:a0:f1:3d:cd:9a:f6:18:42:ef:4c:b5: 3c:db:41:01:93:29:8f:0a:4c:c1:a8:bc:dd:94:9d: 93:d1:be:d5:7d:49:47:cb:58:42:64:e9:52:9f:83: bd:cf:99:60:1d:e4:c7:48:b4:c7:c0:d4:f2:a5:f0: b8:03:a4:a8:96:4d:1c:fd:8e:68:1b:bf:7c:1e:40: 77:37:26:a4:d6:c4:be:73:94:46:dd:8e:19:27:3f: 89:bf:01:40:51:ae:32:36:48:06:cd:f4:e6:83:c1: d7:77:90:66:48:67:1b:ae:a2:6d:8d:2a:bb:67:f6: 84:58:4f:51:c5:e9:62:1d:9b:9c:13:c5:40:a7:14: c1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:01:9B:7B:5D:A2:27:15:C2:15:7A:27:C6:45:C4:75:E6:B2:FD:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/db4e1afd-2666-328c-9f7d-07e0c9f0d623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.151.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:47:a4:b0:98:93:46:34:01:89:41:b8:c6:70:b7:0b:0b:ab: 1e:46:cb:9a:69:27:db:fa:10:14:e4:4e:2c:ac:d6:4e:3b:34: 40:7b:1e:8c:92:61:bb:0e:aa:f7:c5:4f:21:95:75:2e:04:18: 2b:13:18:e5:96:f7:69:0c:ff:ca:6e:e7:c5:12:d6:a3:39:eb: 7d:8d:c7:f8:38:0c:97:b9:48:e2:e0:8a:bc:00:2b:c4:79:a6: a3:cd:66:e1:ad:05:5e:f9:59:ec:92:58:2d:c1:7c:a5:d2:87: 20:50:ca:2c:e0:b5:a6:9a:82:98:36:38:cf:fa:5b:c6:17:70: 7b:62:aa:79:a8:2b:9d:1e:6f:cb:6c:68:48:53:0e:be:68:06: e1:ff:91:fc:90:64:8b:3e:95:fc:ce:f7:9c:6d:06:9c:9f:0b: f2:3a:09:f4:a6:9e:78:6c:22:65:e5:5e:83:d9:36:e6:fd:c5: 65:30:63:12:6e:85:94:84:5a:77:7b:88:12:57:8c:ab:37:1f: 87:b9:c4:09:95:70:e3:56:0e:df:e0:e7:d6:f3:7a:81:1a:0d: 94:d7:7e:28:36:98:52:e2:fe:4f:f1:f8:3f:13:5a:28:11:90: dc:74:c5:cb:0a:5d:0f:38:f6:65:72:d5:64:91:dd:99:ff:f6: ee:52:38:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSkgFGPsavo0xcTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk ZjA2NzkzOWYtOTBmMi00YTdiLThmYjEtZDdjYzUzNzYwOTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkx3cmZSBiVHGeMcwepXLuMvwJeH0K2kL9z2T f0CgKV4XldGQa6/O99VthLGYKz+PWZ0CUxT8o0/6uwZiWxFRt3pCKOFbxzyGuzxd Xu3MRpLBh30DAun1y3GZPfopeIe5WdJXaOkrvTCdT+LcKShrq+y2uVAvYR3NrXTm oPE9zZr2GELvTLU820EBkymPCkzBqLzdlJ2T0b7VfUlHy1hCZOlSn4O9z5lgHeTH SLTHwNTypfC4A6Solk0c/Y5oG798HkB3Nyak1sS+c5RG3Y4ZJz+JvwFAUa4yNkgG zfTmg8HXd5BmSGcbrqJtjSq7Z/aEWE9RxeliHZucE8VApxTBuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMEBm3tdoicVwhV6J8ZFxHXmsv3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZGI0ZTFhZmQtMjY2Ni0z MjhjLTlmN2QtMDdlMGM5ZjBkNjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ5fzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVHpLCYk0Y0AYlBuMZwtwsLqx5Gy5ppJ9v6EBTkTiys1k47NEB7HoyS YbsOqvfFTyGVdS4EGCsTGOWW92kM/8pu58US1qM5632Nx/g4DJe5SOLgirwAK8R5 pqPNZuGtBV75WeySWC3BfKXShyBQyizgtaaagpg2OM/6W8YXcHtiqnmoK50eb8ts aEhTDr5oBuH/kfyQZIs+lfzO95xtBpyfC/I6CfSmnnhsImXlXoPZNub9xWUwYxJu hZSEWnd7iBJXjKs3H4e5xAmVcONWDt/g59bzeoEaDZTXfig2mFLi/k/x+D8TWigR kNx0xcsKXQ849mVy1WSR3Zn/9u5SOAc= -----END CERTIFICATE-----Generated at Thu May 8 10:14:21 2025 by rpki-client