$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa File: 32366493-a9e8-3a70-86e9-3dbb2976f003.roa (raw, json) Hash identifier: CtgH1U53V6YRFezVyF8sN9mVdO3EtMnD2iUyZfbw2/0= Subject key identifier: CB:31:98:45:E4:FF:C7:DB:D3:4D:4F:25:1C:A3:DC:10:66:5E:7F:9B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5765DE2A5E042DABB0705CE0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa Signing time: Sat 28 Jun 2025 13:01:02 +0000 ROA not before: Sat 28 Jun 2025 13:01:02 +0000 ROA not after: Fri 26 Sep 2025 13:01:02 +0000 asID: 7029 IP address blocks: 173.184.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:57:65:de:2a:5e:04:2d:ab:b0:70:5c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 28 13:01:02 2025 GMT Not After : Sep 26 13:01:02 2025 GMT Subject: CN=33f25036-61f3-45a1-9a29-a4a7cc135c48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fc:5b:26:1d:7d:2a:c8:13:33:f3:27:12:68: e1:8f:ec:59:7a:a9:ea:b2:db:02:6e:b0:fb:51:4d: a3:a2:55:a5:ff:80:00:6c:34:f6:e5:8b:4e:2c:3b: 2c:9b:e8:d6:b4:e4:f6:23:eb:75:cf:33:4e:4d:14: 14:14:e5:0e:c2:5e:d1:2c:a5:88:a2:fe:0b:ff:be: 17:ac:85:67:ba:e4:30:2f:8e:36:c7:1a:22:4e:0c: f1:bf:3f:ef:79:c9:e3:78:75:1d:10:8d:4f:dc:de: df:fa:c0:40:1c:ef:2b:97:fd:ca:47:fc:ef:5f:59: 3f:2f:ae:44:23:4f:48:38:b6:b1:e9:c3:e0:fc:cb: 5b:46:ce:da:51:c2:eb:72:0a:1a:a2:43:9a:0c:04: aa:3d:d4:1e:d7:44:8c:7b:21:94:0d:6e:08:7a:61: 63:0b:8b:ff:b0:b7:50:f1:f7:ef:8c:c6:75:9c:93: 32:d4:29:eb:01:24:89:b3:75:1a:3e:c8:32:8e:2d: dc:4a:f3:8f:da:03:0f:b3:35:1e:57:70:71:6c:51: 14:9a:a0:07:d3:a9:ba:13:e5:b9:c7:22:c8:71:a9: d3:d6:17:f2:36:5a:6b:e6:08:31:42:a3:d2:40:b3: 70:2d:f5:26:3d:3d:b4:9c:d6:c2:58:6e:5b:7e:7e: 60:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:31:98:45:E4:FF:C7:DB:D3:4D:4F:25:1C:A3:DC:10:66:5E:7F:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/32366493-a9e8-3a70-86e9-3dbb2976f003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bb:ec:26:9c:05:b5:b9:af:11:e2:32:b5:f2:c3:ec:3e:a3: 33:7a:ed:9c:0d:ca:90:3b:a3:59:eb:4d:53:e9:21:84:7c:ff: 56:2c:f5:37:69:05:11:41:4d:cd:07:0e:b2:96:7d:35:ca:fc: 4d:aa:86:57:7c:11:b1:60:d3:8f:59:25:63:1e:f6:31:a3:74: f5:cc:7f:f8:4b:6c:92:29:97:85:65:a0:85:d6:a5:80:1b:8c: ef:b6:81:cb:a1:6a:5e:68:36:a0:50:45:f4:ef:3d:80:cd:8a: 85:e5:a2:6a:d2:4e:9d:7f:5a:df:68:18:81:ed:f2:e3:44:34: f2:6c:09:0a:99:4d:0e:dd:7a:cb:51:c0:22:f9:65:4f:67:73: 1a:1a:f9:1d:ac:d9:96:01:db:6a:e0:a3:12:a9:6f:81:60:c7: 2c:20:43:31:36:d1:19:63:49:e8:be:79:3c:0a:11:f0:59:54: 32:98:6c:81:b7:b9:9b:18:c3:2f:4d:37:77:5d:e1:84:0b:3f: 83:f2:dc:71:f5:70:35:7c:2b:d8:e2:83:60:5d:87:39:ce:61: c3:2a:11:ee:11:dc:be:cc:11:0c:3e:07:12:0f:b2:b2:49:12: 40:d3:97:1f:e7:7a:c3:68:c0:73:a0:35:86:0c:7f:71:bb:05: ff:2e:0c:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZd4qXgQtq7BwXOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk MzNmMjUwMzYtNjFmMy00NWExLTlhMjktYTRhN2NjMTM1YzQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfxbJh19KsgTM/MnEmjhj+xZeqnqstsCbrD7 UU2jolWl/4AAbDT25YtOLDssm+jWtOT2I+t1zzNOTRQUFOUOwl7RLKWIov4L/74X rIVnuuQwL442xxoiTgzxvz/vecnjeHUdEI1P3N7f+sBAHO8rl/3KR/zvX1k/L65E I09IOLax6cPg/MtbRs7aUcLrcgoaokOaDASqPdQe10SMeyGUDW4IemFjC4v/sLdQ 8ffvjMZ1nJMy1CnrASSJs3UaPsgyji3cSvOP2gMPszUeV3BxbFEUmqAH06m6E+W5 xyLIcanT1hfyNlpr5ggxQqPSQLNwLfUmPT20nNbCWG5bfn5g1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsxmEXk/8fb001PJRyj3BBmXn+bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMzIzNjY0OTMtYTllOC0z YTcwLTg2ZTktM2RiYjI5NzZmMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbiQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+77CacBbW5rxHiMrXyw+w+ozN67ZwNypA7o1nrTVPpIYR8/1Ys9Tdp BRFBTc0HDrKWfTXK/E2qhld8EbFg049ZJWMe9jGjdPXMf/hLbJIpl4VloIXWpYAb jO+2gcuhal5oNqBQRfTvPYDNioXlomrSTp1/Wt9oGIHt8uNENPJsCQqZTQ7destR wCL5ZU9ncxoa+R2s2ZYB22rgoxKpb4FgxywgQzE20RljSei+eTwKEfBZVDKYbIG3 uZsYwy9NN3dd4YQLP4Py3HH1cDV8K9jig2BdhznOYcMqEe4R3L7MEQw+BxIPsrJJ EkDTlx/nesNowHOgNYYMf3G7Bf8uDJg= -----END CERTIFICATE-----Generated at Sun Jun 29 08:55:33 2025 by rpki-client