$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b5560b8-66ba-3f58-b2e0-d920b5f6b92c.roa File: 4b5560b8-66ba-3f58-b2e0-d920b5f6b92c.roa (raw, json) Hash identifier: 1nZKtVaFk9YyILw6Rr16+RrOL9kY/cTQdjdoyqgjxxo= Subject key identifier: 0F:88:1C:B6:B3:E4:78:08:3A:2B:3D:C5:6A:5B:EB:C8:30:79:A9:BF Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4DA0526DF3C25AF2A8A7E080 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b5560b8-66ba-3f58-b2e0-d920b5f6b92c.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.186.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:52:6d:f3:c2:5a:f2:a8:a7:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=b0bca4c5-1bb6-4603-9663-d99f791309f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:86:a6:80:67:92:1b:65:77:d2:65:12:ce:1f: 7e:63:eb:7a:a7:25:51:ad:aa:f6:14:20:67:2f:e5: 2a:ee:aa:f9:85:db:47:d7:0b:82:79:5f:9b:05:17: 54:d1:bf:30:a3:fd:e4:9e:36:4c:3d:b3:8e:a0:b4: 8f:e7:de:dc:03:01:53:78:92:b7:5b:08:9c:95:01: 37:47:ef:a1:7b:dd:64:f8:34:67:3f:2b:d7:18:85: 50:35:21:51:5a:75:e3:b8:82:c4:11:62:b2:99:ac: c0:e9:26:4c:96:7f:39:c3:ba:fc:ec:ea:df:86:87: b6:4c:f3:3f:f6:45:ed:bb:76:62:b5:9f:cc:32:74: 9e:16:58:3f:86:a5:a3:07:b3:65:50:b8:f5:55:14: 60:62:f5:1e:1a:06:11:e1:07:15:14:f6:08:4d:4d: 05:90:2e:8f:4f:09:d7:7d:f1:e4:4b:4d:fa:3f:0c: 86:29:b3:78:85:17:ce:76:e2:d5:f6:6d:bc:d4:df: 90:3f:4e:1c:2f:44:45:d2:7f:7a:12:de:fa:0c:93: 85:3d:6f:56:95:03:be:79:e1:cb:14:57:6f:75:34: f6:13:ea:41:66:6c:55:67:bb:8c:ea:17:ad:2f:72: 91:c1:df:44:04:b0:8e:7f:bf:4c:ce:75:89:6f:97: 8e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:88:1C:B6:B3:E4:78:08:3A:2B:3D:C5:6A:5B:EB:C8:30:79:A9:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/4b5560b8-66ba-3f58-b2e0-d920b5f6b92c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:1a:83:a7:43:eb:83:79:12:8f:01:bb:9a:f9:95:6b:af:b1: a3:33:08:68:76:d4:a5:11:89:b2:98:f6:c2:c5:9a:34:bc:7c: a2:f6:2b:e0:01:af:6f:f2:f4:6c:df:bc:37:aa:2d:c8:50:15: 33:ad:00:b5:a3:db:72:40:ed:1e:bb:e4:6d:30:56:25:fd:73: bd:35:42:38:3d:80:7b:c9:4b:66:3d:54:58:cc:61:5d:1e:c9: d1:40:cf:6b:69:a9:09:33:af:f2:1c:93:55:96:ef:fc:eb:8f: 89:32:73:fe:1c:52:d6:42:1a:0b:2f:22:5b:50:51:c8:ed:8f: ac:dc:9d:ff:27:b3:ff:54:1d:86:ca:01:f6:64:72:a8:2b:72: ef:13:70:e4:d7:2c:32:e0:35:ab:4a:79:4f:3e:eb:42:48:c1: c4:1f:82:e8:10:ca:55:f4:ea:73:83:88:42:36:73:e6:7c:c6: 97:28:68:f6:82:bd:2d:50:95:ed:52:a0:6e:d0:34:68:cb:ab: 78:aa:3f:95:33:26:23:24:1b:93:b1:7f:99:98:01:ce:93:8c: db:77:eb:4e:86:80:6b:9b:18:26:52:7e:93:df:92:f1:47:46: 3a:21:b6:d7:12:78:ae:16:87:43:18:bb:ae:2c:32:3b:13:6a: a6:a0:60:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoFJt88Ja8qin4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk YjBiY2E0YzUtMWJiNi00NjAzLTk2NjMtZDk5Zjc5MTMwOWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYamgGeSG2V30mUSzh9+Y+t6pyVRrar2FCBn L+Uq7qr5hdtH1wuCeV+bBRdU0b8wo/3knjZMPbOOoLSP597cAwFTeJK3WwiclQE3 R++he91k+DRnPyvXGIVQNSFRWnXjuILEEWKymazA6SZMln85w7r87Orfhoe2TPM/ 9kXtu3ZitZ/MMnSeFlg/hqWjB7NlULj1VRRgYvUeGgYR4QcVFPYITU0FkC6PTwnX ffHkS036PwyGKbN4hRfOduLV9m281N+QP04cL0RF0n96Et76DJOFPW9WlQO+eeHL FFdvdTT2E+pBZmxVZ7uM6hetL3KRwd9EBLCOf79MznWJb5eODwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+IHLaz5HgIOis9xWpb68gweam/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNGI1NTYwYjgtNjZiYS0z ZjU4LWIyZTAtZDkyMGI1ZjZiOTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbrIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAag6dD64N5Eo8Bu5r5lWuvsaMzCGh21KURibKY9sLFmjS8fKL2K+AB r2/y9GzfvDeqLchQFTOtALWj23JA7R675G0wViX9c701Qjg9gHvJS2Y9VFjMYV0e ydFAz2tpqQkzr/Ick1WW7/zrj4kyc/4cUtZCGgsvIltQUcjtj6zcnf8ns/9UHYbK AfZkcqgrcu8TcOTXLDLgNatKeU8+60JIwcQfgugQylX06nODiEI2c+Z8xpcoaPaC vS1Qle1SoG7QNGjLq3iqP5UzJiMkG5Oxf5mYAc6TjNt3606GgGubGCZSfpPfkvFH RjohttcSeK4Wh0MYu64sMjsTaqagYEg= -----END CERTIFICATE-----Generated at Sun Jun 29 08:59:41 2025 by rpki-client