$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa File: fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa (raw, json) Hash identifier: 0v/eWsKfC10zMO7vOe8DH6rol37I9MXnPfLydzH2ThQ= Subject key identifier: A7:95:F6:6C:E8:33:41:F1:C1:4A:52:D6:AD:6B:6D:65:B2:7C:9B:CB Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849B14A285A86444CAA1F0584E0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 395567 IP address blocks: 97.67.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:4a:28:5a:86:44:4c:aa:1f:05:84:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=41ea6d21-e55b-482a-95c2-d0cfc7e8c09c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e6:8f:36:d3:be:dd:c1:c6:72:3f:ad:4f:0f: 7b:b8:5f:5b:d7:52:71:92:79:b6:fd:f0:3a:e1:75: 88:2b:f2:26:43:15:4d:b4:5c:e6:5b:e3:62:4b:34: d1:11:83:26:33:c6:f4:16:60:42:b2:fc:ae:88:4a: 3e:15:8f:52:e7:bf:a2:23:0c:28:43:b4:16:a2:ba: 5d:c0:0b:ee:69:03:fe:8e:4e:fd:f4:7a:b8:b3:1f: 7c:2c:90:5e:de:5e:45:6d:d4:08:90:8d:6d:a5:cd: 77:66:29:db:3d:72:cd:5d:ae:05:ff:83:e6:9f:5b: b4:ca:89:b5:97:5d:70:57:fd:e5:fa:35:51:ca:34: b6:5b:39:f9:52:7b:4b:f0:8e:e9:37:a8:45:16:6d: f4:e5:ce:ca:98:69:2f:de:48:79:b3:5d:e1:8c:21: ee:dc:95:af:da:31:9f:59:fc:77:72:a9:55:cc:72: 98:67:af:89:56:ee:ac:9b:53:ea:54:cb:e4:02:75: 6e:fe:3a:0b:50:ed:c0:8a:be:bb:7d:30:a1:9d:73: 9f:ce:40:9d:db:63:6e:f3:42:13:e1:e7:ac:3a:db: e5:39:13:89:6b:ff:cd:3b:50:6b:9c:11:7e:a2:cc: ce:fd:73:1e:c8:d9:fd:d9:ee:24:9d:9e:86:45:fa: d7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:95:F6:6C:E8:33:41:F1:C1:4A:52:D6:AD:6B:6D:65:B2:7C:9B:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/fb8ae515-5ae9-352a-be06-02ae049dfd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 97.67.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:39:eb:17:fe:57:b5:dc:98:c6:36:b4:43:60:6c:9c:8d:1f: 26:b3:27:66:68:fb:cd:f1:bf:91:92:44:52:80:cf:e4:a4:d0: 0f:45:f8:f1:01:b6:97:3e:72:f8:9c:1a:72:36:08:7a:f2:b3: cc:ef:99:0e:7a:c5:f7:84:a6:a9:d3:2d:75:52:a9:fb:08:08: 4b:f0:8c:21:64:d0:df:f1:b5:3b:c8:78:77:88:43:d9:79:50: f6:c1:64:7f:64:af:81:18:94:d6:ba:a4:e1:5f:81:67:cf:0e: 9b:b9:9a:a2:3c:57:13:db:1f:ad:47:ab:fe:9a:37:ed:68:d3: 73:20:61:b8:8e:2e:44:73:f9:56:98:e1:dc:c0:0e:6a:ab:8d: 9d:38:61:86:08:d5:4e:4f:02:35:a9:dc:cc:06:38:9f:ed:62: 3c:d1:9c:2d:10:04:2f:1f:a2:60:cc:41:16:5b:31:12:c0:f0: 21:20:53:06:85:7e:31:ef:46:39:06:58:80:d9:30:9f:8c:b6: 2c:dc:7e:e7:68:81:82:a2:95:c0:66:05:bf:84:62:67:93:81: 26:82:8a:eb:80:84:1b:81:0c:3a:61:6a:7e:ad:21:c5:cf:e1: 2d:0a:2f:cd:6a:ff:ba:61:cc:44:72:0a:cf:04:0b:d3:8d:95: 00:a4:06:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSihahkRMqh8FhOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NDFlYTZkMjEtZTU1Yi00ODJhLTk1YzItZDBjZmM3ZThjMDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluaPNtO+3cHGcj+tTw97uF9b11Jxknm2/fA6 4XWIK/ImQxVNtFzmW+NiSzTREYMmM8b0FmBCsvyuiEo+FY9S57+iIwwoQ7QWorpd wAvuaQP+jk799Hq4sx98LJBe3l5FbdQIkI1tpc13ZinbPXLNXa4F/4Pmn1u0yom1 l11wV/3l+jVRyjS2Wzn5UntL8I7pN6hFFm305c7KmGkv3kh5s13hjCHu3JWv2jGf Wfx3cqlVzHKYZ6+JVu6sm1PqVMvkAnVu/joLUO3Air67fTChnXOfzkCd22Nu80IT 4eesOtvlOROJa//NO1BrnBF+oszO/XMeyNn92e4knZ6GRfrXSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKeV9mzoM0HxwUpS1q1rbWWyfJvLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZmI4YWU1MTUtNWFlOS0z NTJhLWJlMDYtMDJhZTA0OWRmZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYUNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJc56xf+V7XcmMY2tENgbJyNHyazJ2Zo+83xv5GSRFKAz+Sk0A9F+PEB tpc+cvicGnI2CHrys8zvmQ56xfeEpqnTLXVSqfsICEvwjCFk0N/xtTvIeHeIQ9l5 UPbBZH9kr4EYlNa6pOFfgWfPDpu5mqI8VxPbH61Hq/6aN+1o03MgYbiOLkRz+VaY 4dzADmqrjZ04YYYI1U5PAjWp3MwGOJ/tYjzRnC0QBC8fomDMQRZbMRLA8CEgUwaF fjHvRjkGWIDZMJ+MtizcfudogYKilcBmBb+EYmeTgSaCiuuAhBuBDDphan6tIcXP 4S0KL81q/7phzERyCs8EC9ONlQCkBtw= -----END CERTIFICATE-----Generated at Sat May 10 13:34:34 2025 by rpki-client