$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2514bd75-fb20-39f0-9f0f-346baea9dc49.roa File: 2514bd75-fb20-39f0-9f0f-346baea9dc49.roa (raw, json) Hash identifier: x833o3ND8v4flgN5fvDGwG33eBNFGgLTzsJlBivkhAc= Subject key identifier: B6:A4:E1:A3:2D:F1:82:2B:92:64:23:4B:3F:02:DF:BB:01:FF:77:E4 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E60688D075B86D08157F080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2514bd75-fb20-39f0-9f0f-346baea9dc49.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.189.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:68:8d:07:5b:86:d0:81:57:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=141fc002-f845-4313-b877-19a99d9bbbc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b3:de:e4:c8:0f:42:bc:04:4a:89:0f:8a:1b: da:fe:01:7f:12:ef:48:d6:00:32:68:c1:04:71:c4: ed:b0:88:39:f8:45:86:29:aa:2c:8c:e7:88:b3:cc: 18:86:0e:7a:25:c0:76:6f:a7:bd:65:ee:b6:7b:88: 87:88:a3:23:b7:4e:5d:d7:9e:f7:fb:d9:32:30:f3: 1d:9c:d0:0e:fe:1b:3a:c1:51:0d:de:1b:1c:a2:1c: 6a:0c:93:8a:c2:6d:1e:35:90:6b:af:f8:23:17:e0: da:ac:09:8d:0d:07:32:81:eb:5b:36:63:78:c0:3d: f8:02:30:24:72:a5:ca:28:2f:29:3d:ea:7b:8d:de: 77:f9:df:24:2e:89:97:a0:24:fc:5e:8f:4c:c7:3a: 06:12:ea:3e:1b:93:34:2d:cd:5e:ec:2f:76:df:98: 67:8a:9c:42:30:83:22:cd:06:2c:34:b6:9a:76:cb: 8a:2c:5f:34:ab:93:28:fb:aa:ed:00:f3:f8:15:7d: 61:c7:3d:ae:24:3a:a9:a2:20:22:65:89:e7:94:ff: e2:ea:20:e3:3b:b2:68:ec:5e:f8:41:95:19:6f:e4: 2b:c1:67:4d:18:43:fb:22:e9:de:e5:e8:4f:0c:03: 72:0b:a3:85:6a:f0:97:af:9f:eb:ee:4d:e5:93:39: 4c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A4:E1:A3:2D:F1:82:2B:92:64:23:4B:3F:02:DF:BB:01:FF:77:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/2514bd75-fb20-39f0-9f0f-346baea9dc49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.189.164.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:60:4a:c5:e0:92:d0:e3:04:90:5a:34:21:35:9e:f1:c8:e8: 97:1a:71:c9:c8:95:50:ab:90:36:1f:3f:d0:16:27:ed:7c:49: 84:31:22:c6:b2:d3:c5:73:ae:29:6b:e9:cf:e6:4f:24:a3:27: bc:52:c2:7a:a5:db:20:01:86:e8:76:6b:de:6e:dd:cf:23:8c: a8:46:24:e5:9a:06:77:aa:f5:10:3d:21:bc:2d:e4:02:c2:32: 0a:20:55:5d:a3:fe:ca:01:9b:4c:b1:8d:a7:83:c8:43:be:f9: 7e:de:3e:de:c3:a6:61:22:da:50:07:ca:55:88:80:93:7f:f1: 47:8c:1a:b7:4d:fb:c4:b5:7e:9c:dc:d1:73:ed:38:7f:d3:08: 02:c6:14:eb:56:41:30:99:36:6c:61:38:98:61:0f:fb:84:16: f0:d8:91:86:25:8b:13:20:cd:4e:91:d0:7b:5b:4f:ba:d3:19: 22:17:a3:3f:14:43:38:19:9b:dc:3e:b5:4f:13:f0:e1:42:5b: f8:14:34:fe:eb:05:0d:7e:2b:66:0e:06:34:4b:77:4f:99:8b: 3e:f4:33:d9:aa:69:b2:0c:19:d1:9b:e0:40:65:54:66:a8:4d: ff:9c:9e:3f:66:3b:a0:16:2e:3b:98:c5:c6:16:a1:34:db:71: 85:30:11:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYGiNB1uG0IFX8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MTQxZmMwMDItZjg0NS00MzEzLWI4NzctMTlhOTlkOWJiYmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirPe5MgPQrwESokPihva/gF/Eu9I1gAyaMEE ccTtsIg5+EWGKaosjOeIs8wYhg56JcB2b6e9Ze62e4iHiKMjt05d1573+9kyMPMd nNAO/hs6wVEN3hscohxqDJOKwm0eNZBrr/gjF+DarAmNDQcygetbNmN4wD34AjAk cqXKKC8pPep7jd53+d8kLomXoCT8Xo9MxzoGEuo+G5M0Lc1e7C9235hnipxCMIMi zQYsNLaadsuKLF80q5Mo+6rtAPP4FX1hxz2uJDqpoiAiZYnnlP/i6iDjO7Jo7F74 QZUZb+QrwWdNGEP7Iune5ehPDANyC6OFavCXr5/r7k3lkzlMvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLak4aMt8YIrkmQjSz8C37sB/3fkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMjUxNGJkNzUtZmIyMC0z OWYwLTlmMGYtMzQ2YmFlYTlkYzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrb2kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxgSsXgktDjBJBaNCE1nvHI6JcaccnIlVCrkDYfP9AWJ+18SYQxIsay 08Vzrilr6c/mTySjJ7xSwnql2yABhuh2a95u3c8jjKhGJOWaBneq9RA9Ibwt5ALC MgogVV2j/soBm0yxjaeDyEO++X7ePt7DpmEi2lAHylWIgJN/8UeMGrdN+8S1fpzc 0XPtOH/TCALGFOtWQTCZNmxhOJhhD/uEFvDYkYYlixMgzU6R0HtbT7rTGSIXoz8U QzgZm9w+tU8T8OFCW/gUNP7rBQ1+K2YOBjRLd0+Ziz70M9mqabIMGdGb4EBlVGao Tf+cnj9mO6AWLjuYxcYWoTTbcYUwEa8= -----END CERTIFICATE-----Generated at Tue Jul 1 18:23:58 2025 by rpki-client