$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63e94886-7b47-39ca-8ce4-36137348d8c2.roa File: 63e94886-7b47-39ca-8ce4-36137348d8c2.roa (raw, json) Hash identifier: 9xEJwi3mWB5h5sW4TGLRPQtW4U9qyjDd4DWt3IaKm6c= Subject key identifier: AC:F6:55:33:41:07:DD:09:92:65:D7:B6:B7:CF:F3:11:3F:4E:53:A8 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4970773C24D23DE699EB4F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63e94886-7b47-39ca-8ce4-36137348d8c2.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.184.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:77:3c:24:d2:3d:e6:99:eb:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=cfc0f50c-92da-4eee-8bc9-1c7334fc7b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0d:2a:59:16:1c:06:06:6d:8c:93:94:83:6c: 86:83:22:97:cb:c0:8e:3e:49:5a:db:9f:7c:9f:fc: 18:e4:51:7c:29:7b:33:59:51:ff:bb:9b:ab:ea:f4: 10:49:6a:b8:d7:19:7e:75:45:83:49:e1:76:27:cb: 5d:35:32:98:36:5e:af:50:ca:14:76:b5:57:f1:e9: 83:17:14:06:2d:41:34:15:9d:1a:2b:3f:24:bf:c7: be:38:9a:22:b2:f4:32:d0:91:0d:39:5a:cb:ff:cc: 81:3c:17:15:1a:ec:de:3a:0c:80:b8:fb:6c:51:b3: 16:6e:3f:76:78:f8:2a:4a:bf:33:1e:3a:02:4d:85: 26:8e:ff:b3:f4:8d:cb:f1:46:57:cd:f6:2a:33:bf: 20:23:27:07:2d:f3:a3:50:c1:12:8f:8a:33:d0:fc: 4f:f0:df:b3:1d:76:44:a9:86:ec:54:8c:49:51:b4: ed:5b:12:19:e7:c3:ce:0c:dd:28:b9:96:48:81:60: 62:08:f5:46:da:69:f3:89:4c:f4:0c:aa:ae:ba:e7: 9e:18:ff:ef:da:83:1f:8b:1f:6c:7a:62:6a:0b:fa: b6:53:a4:26:8b:5f:d7:c0:ca:9a:e3:7a:f0:9b:f5: 4b:93:34:c8:f4:3c:2b:27:3e:a6:81:32:54:76:a0: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:F6:55:33:41:07:DD:09:92:65:D7:B6:B7:CF:F3:11:3F:4E:53:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/63e94886-7b47-39ca-8ce4-36137348d8c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:c0:0d:65:22:90:03:8b:1e:60:83:57:84:fa:31:2b:bb:e8: e8:a3:e0:a5:5c:3b:a8:c6:8b:13:27:7c:42:a2:05:ce:81:87: 7c:0d:3b:29:61:02:10:01:c6:b4:55:f8:4a:92:9d:98:83:c1: 61:e1:a0:60:59:fe:c3:d3:9b:56:5d:4a:b6:b1:a4:81:c7:cf: cc:a5:99:1d:71:1c:cb:b8:c0:62:59:c0:13:ad:6e:01:c9:92: 8b:0b:3e:5e:af:49:58:a1:11:b4:1a:ee:0a:a4:f2:11:2b:d5: db:3a:1d:65:9a:a6:f3:d1:c2:b9:3b:84:e4:4c:99:d5:3e:da: d0:d3:bf:05:02:14:a4:eb:f6:ef:1b:65:97:60:1c:2b:ce:7e: f2:f3:d0:f7:b3:13:b4:c1:f8:ff:23:c9:62:47:6f:d7:e1:7a: 79:dc:00:47:6e:af:a1:03:53:88:59:4b:5c:9f:4d:e6:fd:99: 09:d7:39:3d:38:8e:1f:1d:c3:96:dd:ed:25:21:f6:51:3d:9b: 58:67:4f:74:bd:c8:bd:bd:1d:20:5d:1c:3d:40:6b:be:b3:06: 6d:ef:75:91:51:52:b6:84:2d:6f:d8:c1:03:6b:4b:79:e7:89: 87:f1:c3:e0:e2:d2:cf:9c:0f:38:80:32:7c:b0:0b:2c:cf:75: 79:ba:d8:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHc8JNI95pnrT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk Y2ZjMGY1MGMtOTJkYS00ZWVlLThiYzktMWM3MzM0ZmM3YjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA0qWRYcBgZtjJOUg2yGgyKXy8COPkla2598 n/wY5FF8KXszWVH/u5ur6vQQSWq41xl+dUWDSeF2J8tdNTKYNl6vUMoUdrVX8emD FxQGLUE0FZ0aKz8kv8e+OJoisvQy0JENOVrL/8yBPBcVGuzeOgyAuPtsUbMWbj92 ePgqSr8zHjoCTYUmjv+z9I3L8UZXzfYqM78gIycHLfOjUMESj4oz0PxP8N+zHXZE qYbsVIxJUbTtWxIZ58PODN0ouZZIgWBiCPVG2mnziUz0DKquuueeGP/v2oMfix9s emJqC/q2U6Qmi1/XwMqa43rwm/VLkzTI9DwrJz6mgTJUdqC8LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz2VTNBB90JkmXXtrfP8xE/TlOoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNjNlOTQ4ODYtN2I0Ny0z OWNhLThjZTQtMzYxMzczNDhkOGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnADWUikAOLHmCDV4T6MSu76Oij4KVcO6jGixMnfEKiBc6Bh3wNOylh AhABxrRV+EqSnZiDwWHhoGBZ/sPTm1ZdSraxpIHHz8ylmR1xHMu4wGJZwBOtbgHJ kosLPl6vSVihEbQa7gqk8hEr1ds6HWWapvPRwrk7hORMmdU+2tDTvwUCFKTr9u8b ZZdgHCvOfvLz0PezE7TB+P8jyWJHb9fhenncAEdur6EDU4hZS1yfTeb9mQnXOT04 jh8dw5bd7SUh9lE9m1hnT3S9yL29HSBdHD1Aa76zBm3vdZFRUraELW/YwQNrS3nn iYfxw+Di0s+cDziAMnywCyzPdXm62CY= -----END CERTIFICATE-----Generated at Wed Jul 2 15:55:01 2025 by rpki-client