$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0d75c67-3783-3a58-a45d-c17e4566ba73.roa File: e0d75c67-3783-3a58-a45d-c17e4566ba73.roa (raw, json) Hash identifier: 5GNdp/xK5jXu8YnbC8WrnmGVhBMKyyqBemgCv7o1qbk= Subject key identifier: 94:1C:D0:C2:AC:77:2F:C0:12:34:B1:8E:5A:00:A3:5E:EB:60:34:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849194DAD15B506697012E79500 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0d75c67-3783-3a58-a45d-c17e4566ba73.roa Signing time: Thu 06 Mar 2025 14:25:32 +0000 ROA not before: Thu 06 Mar 2025 14:25:32 +0000 ROA not after: Wed 04 Jun 2025 13:25:32 +0000 asID: 7029 IP address blocks: 67.62.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:4d:ad:15:b5:06:69:70:12:e7:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Mar 6 14:25:32 2025 GMT Not After : Jun 4 13:25:32 2025 GMT Subject: CN=d1c66f45-f8ef-4e97-94ac-81365e0e20ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:11:78:58:49:d9:c4:ea:a4:88:75:0c:4e: 34:bb:54:a4:01:fd:dc:96:9e:ff:b2:e6:84:16:8d: 5d:81:22:1b:8c:b0:15:7d:09:b6:7a:2c:8b:12:2b: d4:f3:a8:fe:20:3b:ed:8e:0f:1c:b1:99:cf:81:02: fa:88:48:96:43:6c:67:57:92:ce:d5:f7:92:04:0a: e2:77:46:98:85:c7:9e:ff:4e:c2:ba:59:11:80:d2: 04:62:12:fe:0e:f9:23:8f:2c:77:98:b4:b8:7f:40: 96:d7:b5:c4:e2:3c:f8:af:47:6c:c3:60:df:8a:09: 94:81:01:d2:05:d9:a7:f7:ae:27:10:dc:5c:32:ff: e3:55:ad:da:05:82:9d:e8:29:7c:d7:d5:e6:3e:02: 51:22:75:56:14:44:c1:47:c2:6f:75:f9:bd:58:75: 22:5a:80:8b:d7:bc:38:76:08:f1:68:40:46:fe:29: 2d:c7:bc:d0:f1:f0:a4:3c:b4:1f:ac:b1:cb:de:6d: 1a:18:25:4b:17:3f:ac:55:f0:c2:a7:d8:f9:26:14: 17:ce:22:dc:e0:ed:07:c6:81:f5:0e:79:1b:5c:00: 8f:87:46:8f:1a:96:f0:39:72:a0:24:27:84:a1:cc: 3a:56:70:ca:60:e0:89:19:cc:00:e5:a7:d4:56:f5: c7:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1C:D0:C2:AC:77:2F:C0:12:34:B1:8E:5A:00:A3:5E:EB:60:34:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e0d75c67-3783-3a58-a45d-c17e4566ba73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 67.62.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:4a:d6:c0:9b:69:00:85:e5:ae:63:00:2f:33:34:53:5d:99: a9:f1:8f:69:14:3c:84:a6:5a:9a:32:fc:ee:da:94:31:ab:50: 89:b3:a8:10:46:ce:01:f7:5d:8b:ea:33:d5:83:e0:ae:79:67: 40:e3:59:d5:f6:e3:3c:2f:0d:35:af:26:6a:43:d1:d6:8d:c9: 6c:0b:5c:16:80:aa:73:14:74:7b:a6:8a:df:dd:93:b9:db:29: 2f:50:fd:6b:10:32:97:30:9a:f8:7c:57:b8:88:a2:a6:64:55: 53:63:2d:8f:38:c3:2f:23:98:e3:b0:88:0e:93:7d:b4:06:bb: ee:4e:3e:bf:b1:c9:be:fd:ff:5d:45:e6:8b:5a:f5:c6:44:28: 1f:2b:0c:5b:45:aa:1a:1e:11:98:5e:e6:35:d2:f0:24:a1:d1: 05:97:33:65:e4:fe:4a:e2:50:df:c4:e3:44:8e:06:1d:9d:48: a2:02:e2:e6:d4:2d:f4:9e:d3:0c:19:14:d6:9b:23:8b:3f:b6: 26:b3:77:01:09:c2:13:4a:fb:a1:6f:16:c8:17:fd:e9:3f:c0: 90:17:59:8d:79:51:32:09:20:5e:7e:51:f2:b6:4b:a1:5e:2b: 73:c6:b9:3e:ed:80:4a:0c:12:8a:67:8e:e3:03:d3:6f:36:0b: 32:6f:4c:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZTa0VtQZpcBLnlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDMwNjE0MjUzMloXDTI1MDYwNDEzMjUzMlowLzEtMCsGA1UEAxMk ZDFjNjZmNDUtZjhlZi00ZTk3LTk0YWMtODEzNjVlMGUyMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspgReFhJ2cTqpIh1DE40u1SkAf3clp7/suaE Fo1dgSIbjLAVfQm2eiyLEivU86j+IDvtjg8csZnPgQL6iEiWQ2xnV5LO1feSBAri d0aYhcee/07CulkRgNIEYhL+Dvkjjyx3mLS4f0CW17XE4jz4r0dsw2DfigmUgQHS Bdmn964nENxcMv/jVa3aBYKd6Cl819XmPgJRInVWFETBR8Jvdfm9WHUiWoCL17w4 dgjxaEBG/iktx7zQ8fCkPLQfrLHL3m0aGCVLFz+sVfDCp9j5JhQXziLc4O0HxoH1 DnkbXACPh0aPGpbwOXKgJCeEocw6VnDKYOCJGcwA5afUVvXHdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQc0MKsdy/AEjSxjloAo17rYDReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZTBkNzVjNjctMzc4My0z YTU4LWE0NWQtYzE3ZTQ1NjZiYTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQz5OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9K1sCbaQCF5a5jAC8zNFNdmanxj2kUPISmWpoy/O7alDGrUImzqBBG zgH3XYvqM9WD4K55Z0DjWdX24zwvDTWvJmpD0daNyWwLXBaAqnMUdHumit/dk7nb KS9Q/WsQMpcwmvh8V7iIoqZkVVNjLY84wy8jmOOwiA6TfbQGu+5OPr+xyb79/11F 5ota9cZEKB8rDFtFqhoeEZhe5jXS8CSh0QWXM2Xk/kriUN/E40SOBh2dSKIC4ubU LfSe0wwZFNabI4s/tiazdwEJwhNK+6FvFsgX/ek/wJAXWY15UTIJIF5+UfK2S6Fe K3PGuT7tgEoMEopnjuMD0282CzJvTPE= -----END CERTIFICATE-----Generated at Sun Apr 6 00:51:07 2025 by rpki-client