$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b212a95-6507-3efb-8707-78c34d59542a.roa File: 0b212a95-6507-3efb-8707-78c34d59542a.roa (raw, json) Hash identifier: oM9i9IJ6RpTHa0RD5ZBAD6MRYcHNqG0OpGlfwjSCNQg= Subject key identifier: 8B:09:11:A2:F9:B6:36:83:1A:CB:A0:AA:24:9E:E9:B7:1E:8F:5E:7D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4AD599EE1161BB05E7BCAD80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b212a95-6507-3efb-8707-78c34d59542a.roa Signing time: Tue 24 Jun 2025 01:00:50 +0000 ROA not before: Tue 24 Jun 2025 01:00:50 +0000 ROA not after: Mon 22 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.185.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4a:d5:99:ee:11:61:bb:05:e7:bc:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 24 01:00:50 2025 GMT Not After : Sep 22 01:00:50 2025 GMT Subject: CN=404aa821-d93f-47cd-b375-0609c7e84621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:66:29:85:7c:c4:9f:c3:31:39:31:5e:90:a2: ce:77:b2:ef:01:64:81:28:bc:87:e3:ce:24:c5:21: 13:81:e2:48:3d:9e:29:63:99:ca:68:da:8c:7e:b6: 9c:75:17:81:f0:6d:45:dd:e5:ac:c3:6b:ae:d1:dc: dd:1a:65:1f:99:38:af:be:2a:58:bd:22:d3:dc:49: a0:e6:06:c9:25:eb:bf:d8:2e:7e:a8:26:cf:d1:1e: 04:9f:c0:b6:89:e6:46:60:29:60:e0:af:e3:12:18: 2b:c6:b0:72:ef:02:11:31:c9:e8:4c:2e:fd:3c:9c: ec:7a:48:ee:7d:39:d4:ab:7e:58:18:ea:cc:63:38: b6:ec:02:b9:b9:80:82:26:96:68:89:8a:31:a8:6f: 1a:df:bd:70:e0:49:d3:fb:63:f4:55:9f:7c:74:7e: ea:20:ed:a9:2d:a3:c8:7b:02:a9:84:fc:36:f2:2d: d9:bc:53:3f:cc:9f:7c:eb:0d:72:15:5d:fb:b0:93: 25:85:e3:8a:1b:10:42:48:f6:67:f5:38:7a:ac:8a: f2:18:fe:86:f1:4c:46:b6:df:6f:fc:e4:b8:70:5c: 3f:5d:5f:8a:a3:6b:f1:b8:39:c5:2c:f8:dd:d1:86: 12:73:cc:79:fb:2b:da:cb:6d:e3:8a:13:81:3e:29: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:09:11:A2:F9:B6:36:83:1A:CB:A0:AA:24:9E:E9:B7:1E:8F:5E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b212a95-6507-3efb-8707-78c34d59542a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:06:50:07:d0:b5:2c:57:c0:58:17:63:4e:4d:c1:1c:ec:78: c9:70:70:32:d0:17:5a:f9:38:27:cc:1b:39:00:db:c7:d0:c2: 5d:b4:9d:d1:c7:df:ce:10:0a:b3:19:63:ae:1f:5a:02:14:ae: 16:f7:d4:46:48:e1:4f:8b:43:d6:11:4c:e4:a4:4b:b0:f4:e7: 57:c1:5d:8f:17:ce:f6:fb:62:19:68:59:a2:8b:34:86:05:2a: 35:5e:2a:0f:94:23:5a:45:b6:41:a0:a2:a9:a0:f1:a1:2d:4f: 5a:d3:a7:00:d2:fb:50:d8:1c:47:f2:98:07:28:98:09:50:88: 2e:01:6a:af:d9:ef:2c:1e:e0:1f:f3:27:5a:c1:39:7b:70:6b: bf:9e:f6:28:ce:e6:75:63:69:c4:1d:d8:b5:41:3d:20:e7:9d: ea:72:5b:66:29:7d:31:dd:57:ce:c7:77:57:61:53:82:3c:e7: ae:d5:fd:0c:7d:3a:28:44:f6:40:b2:3f:0e:29:dc:bd:d9:38: bb:35:56:a2:ce:dd:50:8f:26:1f:85:90:6b:98:5a:21:72:08: 78:ce:1f:60:a4:62:c3:e1:ec:43:f7:0c:c7:7a:79:cb:9c:02: fb:8d:02:94:66:d0:17:ef:86:94:cd:a8:14:49:27:51:f3:12: e3:36:f7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZnuEWG7Bee8rYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk NDA0YWE4MjEtZDkzZi00N2NkLWIzNzUtMDYwOWM3ZTg0NjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mYphXzEn8MxOTFekKLOd7LvAWSBKLyH484k xSETgeJIPZ4pY5nKaNqMfracdReB8G1F3eWsw2uu0dzdGmUfmTivvipYvSLT3Emg 5gbJJeu/2C5+qCbP0R4En8C2ieZGYClg4K/jEhgrxrBy7wIRMcnoTC79PJzsekju fTnUq35YGOrMYzi27AK5uYCCJpZoiYoxqG8a371w4EnT+2P0VZ98dH7qIO2pLaPI ewKphPw28i3ZvFM/zJ986w1yFV37sJMlheOKGxBCSPZn9Th6rIryGP6G8UxGtt9v /OS4cFw/XV+Ko2vxuDnFLPjd0YYSc8x5+yvay23jihOBPimnNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsJEaL5tjaDGsugqiSe6bcej159MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGIyMTJhOTUtNjUwNy0z ZWZiLTg3MDctNzhjMzRkNTk1NDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbkiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYGUAfQtSxXwFgXY05NwRzseMlwcDLQF1r5OCfMGzkA28fQwl20ndHH 384QCrMZY64fWgIUrhb31EZI4U+LQ9YRTOSkS7D051fBXY8Xzvb7YhloWaKLNIYF KjVeKg+UI1pFtkGgoqmg8aEtT1rTpwDS+1DYHEfymAcomAlQiC4Baq/Z7ywe4B/z J1rBOXtwa7+e9ijO5nVjacQd2LVBPSDnnepyW2YpfTHdV87Hd1dhU4I8567V/Qx9 OihE9kCyPw4p3L3ZOLs1VqLO3VCPJh+FkGuYWiFyCHjOH2CkYsPh7EP3DMd6ecuc AvuNApRm0BfvhpTNqBRJJ1HzEuM290E= -----END CERTIFICATE-----Generated at Wed Jul 2 15:02:49 2025 by rpki-client