$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/561b3df8-72ca-3293-b162-242024968966.roa File: 561b3df8-72ca-3293-b162-242024968966.roa (raw, json) Hash identifier: 6AUeKmVw2moVQcrHTEevAYCyAE17Z+PY/dgrrhjVJf0= Subject key identifier: 91:2B:F0:67:F4:96:90:13:53:24:BB:4C:4A:75:DA:82:ED:B6:C2:40 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4DA050AFCB3A5B063330C140 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/561b3df8-72ca-3293-b162-242024968966.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.186.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:50:af:cb:3a:5b:06:33:30:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=cef0a910-17ec-4119-be61-91b6ae5b6e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:80:ab:42:6c:22:0d:be:d3:64:0c:50:40: 39:77:c1:65:46:52:aa:30:db:04:ee:a8:8a:21:d9: a4:69:db:51:b3:6a:b2:49:7a:68:e8:f6:82:d7:66: 85:aa:66:c1:b6:c8:af:cc:3e:f7:62:35:ee:40:0e: 27:ab:ef:3f:9f:ea:f8:f4:99:c7:e5:9c:c1:56:be: 9a:46:ca:8d:e2:a3:81:19:5c:c6:53:3f:0a:82:5c: 79:8c:54:2f:f9:b8:a5:47:28:8b:33:47:8c:6f:1c: e5:cb:63:02:b8:dd:c9:6a:05:3f:86:9f:9a:98:f9: 67:47:f3:f8:0e:c7:19:20:a1:5e:c2:ec:c3:32:8d: bf:35:28:53:b8:7f:e2:6b:53:b0:24:db:4f:13:e2: 5f:7f:e1:0a:71:f9:a0:47:42:79:3c:59:8c:70:85: d3:d4:8e:f2:9e:43:ed:f8:9a:73:ef:c1:02:cd:12: 16:54:4c:50:8e:74:ba:93:94:e7:cb:c9:67:e8:fa: 7c:44:5e:87:f5:b4:70:12:60:f8:69:c0:d3:f6:54: f1:76:ad:46:8d:4b:9a:40:81:2d:b7:47:79:44:c2: bb:10:23:ce:19:62:49:2a:df:b2:57:a2:31:66:ec: f4:b1:39:19:06:ca:15:97:fc:cd:f6:ec:8d:b1:46: 3d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2B:F0:67:F4:96:90:13:53:24:BB:4C:4A:75:DA:82:ED:B6:C2:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/561b3df8-72ca-3293-b162-242024968966.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:43:f8:40:7f:b7:bb:50:96:a2:2e:cc:e0:9a:ad:f2:be:53: 54:88:af:30:fe:da:19:64:9a:7b:67:1e:45:82:b3:68:e4:47: c6:c5:eb:df:a6:3f:8c:c5:4c:71:81:f7:07:c7:f5:74:89:40: 5a:d4:0b:e7:61:da:a4:c8:cd:7d:74:6f:b9:15:58:d2:8b:17: d8:7f:61:ad:ff:b0:12:ae:9b:6c:0c:f7:40:38:47:79:5a:be: 74:b9:8d:08:82:dd:c7:43:ee:bd:4f:89:97:ae:bd:aa:2f:b8: f2:24:4b:86:b7:2d:d8:d8:a0:cc:b7:7b:a2:41:26:3c:92:e4: f7:05:96:ae:26:2c:e8:bd:9c:45:c3:6a:bc:f2:6e:21:77:de: 1a:74:2e:f0:26:9b:3e:ed:72:31:6c:8f:0c:ad:95:7a:52:23: ce:96:d2:c1:9b:1d:b2:f8:0a:39:35:e6:28:97:8e:91:72:79: db:00:73:4a:c9:70:a1:08:18:8d:9c:b9:f7:61:b5:51:55:9e: 69:c1:5b:c8:49:9f:12:47:65:39:5a:70:a2:1c:d0:96:3f:d0: 09:98:b9:56:8d:59:5e:0d:2e:00:b0:42:55:5d:57:8a:4b:35: 76:e0:da:1c:fa:61:a4:93:d9:bc:38:a6:66:3f:96:88:14:2f: 08:ec:bd:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoFCvyzpbBjMwwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk Y2VmMGE5MTAtMTdlYy00MTE5LWJlNjEtOTFiNmFlNWI2ZTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHyAq0JsIg2+02QMUEA5d8FlRlKqMNsE7qiK IdmkadtRs2qySXpo6PaC12aFqmbBtsivzD73YjXuQA4nq+8/n+r49JnH5ZzBVr6a RsqN4qOBGVzGUz8Kglx5jFQv+bilRyiLM0eMbxzly2MCuN3JagU/hp+amPlnR/P4 DscZIKFewuzDMo2/NShTuH/ia1OwJNtPE+Jff+EKcfmgR0J5PFmMcIXT1I7ynkPt +Jpz78ECzRIWVExQjnS6k5Tny8ln6Pp8RF6H9bRwEmD4acDT9lTxdq1GjUuaQIEt t0d5RMK7ECPOGWJJKt+yV6IxZuz0sTkZBsoVl/zN9uyNsUY9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEr8Gf0lpATUyS7TEp12oLttsJAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNTYxYjNkZjgtNzJjYS0z MjkzLWIxNjItMjQyMDI0OTY4OTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1D+EB/t7tQlqIuzOCarfK+U1SIrzD+2hlkmntnHkWCs2jkR8bF69+m P4zFTHGB9wfH9XSJQFrUC+dh2qTIzX10b7kVWNKLF9h/Ya3/sBKum2wM90A4R3la vnS5jQiC3cdD7r1PiZeuvaovuPIkS4a3LdjYoMy3e6JBJjyS5PcFlq4mLOi9nEXD arzybiF33hp0LvAmmz7tcjFsjwytlXpSI86W0sGbHbL4Cjk15iiXjpFyedsAc0rJ cKEIGI2cufdhtVFVnmnBW8hJnxJHZTlacKIc0JY/0AmYuVaNWV4NLgCwQlVdV4pL NXbg2hz6YaST2bw4pmY/logULwjsvdY= -----END CERTIFICATE-----Generated at Wed Jul 2 21:36:11 2025 by rpki-client