$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa File: 1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa (raw, json) Hash identifier: vUsOaJbK1pVgMa5KiQ9sp+1kQPR8eWCY8/gOi6XCVjs= Subject key identifier: 13:24:77:B1:F4:64:64:D9:2B:F2:FF:8A:DF:60:EA:20:F0:8B:66:D0 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765DE78F8FEEC1C0EF3C510 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 173.186.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:de:78:f8:fe:ec:1c:0e:f3:c5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=7e97d7e0-c9b9-48c3-9105-662367f88289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fe:43:1e:33:ab:0d:95:33:0a:56:c2:cf:da: fd:fd:8f:53:13:3d:2a:0a:25:b8:2a:77:57:56:e9: a0:21:5e:1b:c5:ce:d4:3d:12:2a:80:03:82:80:ff: 9d:a8:ad:93:a2:0d:dc:83:c1:f2:06:69:8d:17:d9: d4:f2:9d:71:3c:97:cd:2f:20:e4:c3:1d:b4:cb:ce: 82:7e:2f:81:17:32:4c:83:33:57:b8:cd:c9:3d:ab: 61:a0:b0:62:31:67:a9:7e:d2:22:13:3e:ed:56:92: d5:21:b7:79:34:30:0a:7d:3f:61:27:04:22:52:60: 6b:24:f5:07:33:45:d9:6a:ef:0a:d9:99:e3:b7:e2: 88:37:0a:b4:89:7a:b7:a8:82:4f:07:8d:ab:b3:a5: 17:b8:aa:15:0b:27:97:11:0d:f1:83:b0:aa:ae:6c: 3d:5f:eb:f0:57:92:4b:e3:8f:2c:61:ef:a7:3e:ee: 04:9d:74:85:4d:1d:21:d0:2a:04:84:2f:0f:4f:04: 9d:8a:42:e9:a0:da:30:76:60:fb:ec:84:d3:aa:f3: 7c:66:ef:bf:a7:ca:6a:62:d6:2b:1c:29:0e:4d:95: 26:b2:86:16:27:c0:a3:45:f5:ea:51:a8:4a:1a:a2: 52:f9:76:84:9e:07:18:cd:86:76:77:a1:90:c6:bd: e7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:24:77:B1:F4:64:64:D9:2B:F2:FF:8A:DF:60:EA:20:F0:8B:66:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/1c1f8562-35e5-3180-b4df-e4605ff06b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6f:82:3f:92:e1:ba:ad:8c:57:5c:66:41:a5:32:9c:35:99: 6f:b2:7b:48:f3:4d:83:4e:3e:f2:68:36:81:54:c0:46:fc:0c: 2b:12:1e:bc:b8:aa:ee:94:32:49:79:94:c8:16:d3:f5:ed:79: 8b:95:02:f1:57:ac:4a:a9:2b:db:0d:a2:81:ed:a1:b5:f4:21: cd:36:03:1f:39:4c:c6:f2:fc:91:64:aa:df:8b:ab:08:e4:8d: 5f:13:93:5f:4c:0d:fb:ed:d8:1e:c2:6d:1d:36:c5:99:16:4c: 10:7d:64:9d:9e:04:76:dd:d0:e4:e7:94:84:f2:73:7a:9c:a8: 04:f7:a4:a6:2e:bc:0a:24:21:4c:73:21:c8:3f:24:e6:63:bd: 3d:33:13:1a:71:1f:ca:b3:9d:0c:28:29:1e:3d:dd:de:09:25: 0e:54:8a:d9:e1:d0:6b:dd:6f:5f:8d:cd:eb:64:65:1c:79:43: 22:5f:2b:a0:46:99:67:98:b3:a9:74:28:4f:40:81:56:f8:a0: b3:4d:f0:fc:f6:c6:41:8e:ed:b5:5a:03:32:81:93:40:75:5a: 8b:5e:45:73:00:5d:14:9f:ae:d3:58:82:a0:cd:46:9e:3b:a5: 15:b3:57:af:d4:60:e8:6d:20:d7:6a:cd:2d:a4:fd:42:5c:2a: e5:1b:27:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZd54+P7sHA7zxRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk N2U5N2Q3ZTAtYzliOS00OGMzLTkxMDUtNjYyMzY3Zjg4Mjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/5DHjOrDZUzClbCz9r9/Y9TEz0qCiW4KndX VumgIV4bxc7UPRIqgAOCgP+dqK2Tog3cg8HyBmmNF9nU8p1xPJfNLyDkwx20y86C fi+BFzJMgzNXuM3JPathoLBiMWepftIiEz7tVpLVIbd5NDAKfT9hJwQiUmBrJPUH M0XZau8K2Znjt+KINwq0iXq3qIJPB42rs6UXuKoVCyeXEQ3xg7Cqrmw9X+vwV5JL 448sYe+nPu4EnXSFTR0h0CoEhC8PTwSdikLpoNowdmD77ITTqvN8Zu+/p8pqYtYr HCkOTZUmsoYWJ8CjRfXqUahKGqJS+XaEngcYzYZ2d6GQxr3nowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMkd7H0ZGTZK/L/it9g6iDwi2bQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMWMxZjg1NjItMzVlNS0z MTgwLWI0ZGYtZTQ2MDVmZjA2YjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBvgj+S4bqtjFdcZkGlMpw1mW+ye0jzTYNOPvJoNoFUwEb8DCsSHry4 qu6UMkl5lMgW0/XteYuVAvFXrEqpK9sNooHtobX0Ic02Ax85TMby/JFkqt+Lqwjk jV8Tk19MDfvt2B7CbR02xZkWTBB9ZJ2eBHbd0OTnlITyc3qcqAT3pKYuvAokIUxz Icg/JOZjvT0zExpxH8qznQwoKR493d4JJQ5Uitnh0Gvdb1+NzetkZRx5QyJfK6BG mWeYs6l0KE9AgVb4oLNN8Pz2xkGO7bVaAzKBk0B1WoteRXMAXRSfrtNYgqDNRp47 pRWzV6/UYOhtINdqzS2k/UJcKuUbJ2k= -----END CERTIFICATE-----Generated at Sun Jun 29 14:31:56 2025 by rpki-client