$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa File: 0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa (raw, json) Hash identifier: ekmeDv+A7hwa/FAwBJMKAqz6CdEviI3tbRvUqISWXbM= Subject key identifier: 84:73:62:C2:4A:68:AA:5A:3A:F3:4B:EF:88:D2:DA:F3:C6:A8:12:17 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765DEC2BF00C9289AAFA380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 173.186.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:de:c2:bf:00:c9:28:9a:af:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=692b8fcc-8c55-4ef1-b745-60765e3980cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:73:6e:7a:03:dd:9a:94:18:08:23:31:2f:99: a1:31:55:60:2d:42:9b:50:5a:bd:32:a7:88:6b:38: f3:10:3b:e9:30:78:85:2c:b6:0e:2a:55:36:bf:b3: 07:5b:32:b5:a2:74:9c:a3:16:f9:65:f0:a3:5a:46: fa:66:a7:94:f9:72:96:f0:d2:8f:3a:26:4e:9d:7f: dd:1d:29:e4:62:87:7d:0e:25:38:8a:85:9a:3c:96: 43:19:2f:3e:92:89:49:32:9e:78:dd:10:38:2a:15: 06:0d:67:0a:aa:3a:0f:9f:61:6d:b4:91:63:7f:23: 3b:8f:4f:1e:6d:64:67:45:6c:5a:31:9d:82:2b:3e: b9:87:2d:19:ed:7b:09:92:25:54:6e:e3:19:47:40: 8e:be:8f:8f:b3:c6:0a:9f:33:32:5d:57:ba:43:9a: 5c:cd:cd:54:0b:82:c1:19:20:9e:84:b0:ca:18:a3: 53:43:3e:70:b1:5f:73:a1:5a:87:c4:31:ec:6b:a2: 69:62:cd:62:bf:8f:8a:8f:00:f8:bc:b6:2f:3d:ab: b4:de:01:09:39:2c:e3:b2:c8:f7:f1:b2:51:0f:99: 69:7c:1f:2f:34:f3:bd:54:bb:8a:07:c6:7c:a2:0f: 22:c7:1e:e6:43:8e:ca:10:fa:72:00:82:a8:21:5b: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:73:62:C2:4A:68:AA:5A:3A:F3:4B:EF:88:D2:DA:F3:C6:A8:12:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/0b639b25-f534-3f58-a1f8-57fddb02a9ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:27:ea:65:7e:07:9e:89:bd:9f:8b:0a:ba:d7:94:d8:88:a5: de:fb:90:f8:99:16:71:63:ba:68:02:29:7c:77:6a:49:af:32: 6a:0c:0e:a7:f5:e3:83:a9:fa:01:70:cf:b7:68:70:8b:81:9b: fe:06:de:4a:99:86:f8:b1:34:72:d5:a7:09:9e:11:01:89:96: 17:b2:72:12:e0:42:03:cd:24:fd:aa:5b:9e:46:e8:4c:c2:5d: 51:62:13:05:25:0b:6e:79:79:3c:76:26:fd:62:0f:b1:61:27: db:64:44:1a:dc:ed:ac:87:59:f3:53:7b:e1:56:46:db:90:18: 8b:d2:a0:9a:ac:0a:f0:61:62:94:a5:49:e4:89:35:4c:5d:b7: c2:dd:f0:15:24:e3:36:53:c4:50:d3:42:92:46:24:26:da:91: 93:22:6e:90:e6:ed:e4:14:46:73:1e:c7:61:55:c4:72:23:8c: e5:e9:ea:b5:bb:78:fd:be:75:a8:40:63:4b:d2:e6:59:14:5b: 72:db:92:c0:03:57:80:82:02:06:eb:cf:04:59:d1:94:e1:d0: be:85:f4:eb:1c:5d:50:a0:a0:34:3d:7d:02:d4:4e:a0:0c:6b: 9b:21:d1:29:7d:8a:20:77:8d:7b:8a:19:da:0e:b6:46:b2:55: ab:40:bf:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZd7CvwDJKJqvo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk NjkyYjhmY2MtOGM1NS00ZWYxLWI3NDUtNjA3NjVlMzk4MGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHNuegPdmpQYCCMxL5mhMVVgLUKbUFq9MqeI azjzEDvpMHiFLLYOKlU2v7MHWzK1onScoxb5ZfCjWkb6ZqeU+XKW8NKPOiZOnX/d HSnkYod9DiU4ioWaPJZDGS8+kolJMp543RA4KhUGDWcKqjoPn2FttJFjfyM7j08e bWRnRWxaMZ2CKz65hy0Z7XsJkiVUbuMZR0COvo+Ps8YKnzMyXVe6Q5pczc1UC4LB GSCehLDKGKNTQz5wsV9zoVqHxDHsa6JpYs1iv4+KjwD4vLYvPau03gEJOSzjssj3 8bJRD5lpfB8vNPO9VLuKB8Z8og8ixx7mQ47KEPpyAIKoIVt6TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRzYsJKaKpaOvNL74jS2vPGqBIXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMGI2MzliMjUtZjUzNC0z ZjU4LWExZjgtNTdmZGRiMDJhOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbruMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4n6mV+B56JvZ+LCrrXlNiIpd77kPiZFnFjumgCKXx3akmvMmoMDqf1 44Op+gFwz7docIuBm/4G3kqZhvixNHLVpwmeEQGJlheychLgQgPNJP2qW55G6EzC XVFiEwUlC255eTx2Jv1iD7FhJ9tkRBrc7ayHWfNTe+FWRtuQGIvSoJqsCvBhYpSl SeSJNUxdt8Ld8BUk4zZTxFDTQpJGJCbakZMibpDm7eQURnMex2FVxHIjjOXp6rW7 eP2+dahAY0vS5lkUW3LbksADV4CCAgbrzwRZ0ZTh0L6F9OscXVCgoDQ9fQLUTqAM a5sh0Sl9iiB3jXuKGdoOtkayVatAv60= -----END CERTIFICATE-----Generated at Sun Jun 29 07:55:34 2025 by rpki-client