$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa File: 724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa (raw, json) Hash identifier: ECVYKkYtUPEse+4yXdeH9nVV7OSh4ZFv8cM9rROSQyc= Subject key identifier: 4F:29:68:50:C0:14:73:17:E1:8F:7A:66:2B:98:44:07:ED:86:BB:E5 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707B50C6DEB66A96168300 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 151.213.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7b:50:c6:de:b6:6a:96:16:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=9a0afdbe-7cfe-45aa-a491-ed82c9452041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bc:d4:45:52:70:04:f4:06:53:16:e5:39:da: c3:1b:7a:47:bf:07:fb:f5:18:8c:1b:b2:f0:5c:e8: f2:ac:7b:f1:df:1e:69:be:28:3a:11:df:7c:b5:71: 9d:6c:2a:02:68:2b:1b:6b:f3:b5:be:5a:ee:c1:f3: f5:57:2c:c0:82:dd:40:c7:7d:51:46:89:83:34:eb: 7c:1e:16:1c:3c:b2:61:df:6f:9b:86:50:23:05:2a: 10:d5:a1:ab:36:38:aa:7e:dd:ef:fc:32:ae:b7:3d: 34:2a:35:14:a2:b3:6b:ae:92:c3:2d:b0:32:73:6a: a4:ed:69:61:c0:59:38:3a:33:cb:bf:e5:cb:d5:36: 91:a7:af:53:91:11:cb:b1:6b:ec:7f:58:8e:02:f7: 6d:c8:c7:d7:57:cb:b5:79:e9:f7:e4:9a:c7:6e:ff: 04:eb:30:7d:7d:53:49:08:d4:2c:8d:d5:be:9e:54: 0e:7c:6e:de:8e:8c:88:b1:f3:fe:5a:bc:3a:67:cc: 7f:b8:5c:4c:09:9a:b5:ac:ef:35:47:cd:f8:5d:ed: 3d:c1:a3:f0:3a:d8:6c:d1:2f:c1:18:aa:52:4a:67: 01:c2:5b:22:fc:f5:5b:39:4b:68:02:33:78:88:0c: 32:95:85:3a:4f:99:03:5d:14:63:2e:51:e1:f9:69: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:29:68:50:C0:14:73:17:E1:8F:7A:66:2B:98:44:07:ED:86:BB:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/724e2cc9-e76f-3025-b214-7a76ab7fa9ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:a1:e6:ef:34:e5:0e:9b:6e:4b:bc:34:0e:2e:ad:06:33:98: c0:1f:e8:20:6a:e2:fb:44:90:a8:7b:ab:31:eb:ae:6e:dc:18: 37:c5:50:bc:5e:bf:cf:97:b7:e0:5b:23:45:67:88:a6:69:92: 6f:28:28:87:32:d7:14:e7:ad:b9:29:2d:d1:fd:bf:f6:07:75: 6d:27:1c:52:e8:42:c4:7f:f7:98:2d:09:9e:82:51:76:74:30: eb:ab:10:e7:23:31:bb:28:00:91:43:8a:a2:09:84:5f:01:24: 72:ea:00:34:fb:f9:89:d6:66:14:25:eb:0d:e3:6a:1d:06:04: d6:43:5c:4d:6e:6d:77:c0:b3:cb:63:60:d7:7b:c0:43:2e:7e: c0:35:fb:9c:70:f1:13:08:41:ae:f0:e0:bc:21:97:59:d1:50: 15:95:7a:b4:7a:bd:10:f4:cc:89:66:48:22:26:30:5d:28:28: eb:e7:35:80:ff:95:17:12:39:9e:d5:8f:9e:6d:e9:65:98:68: 59:c3:bb:9b:40:e7:be:6e:93:da:81:3a:37:21:89:32:96:a1: 83:f5:f7:45:03:38:1a:3c:d8:bb:0d:7c:b6:4a:10:a5:84:26: 5e:0e:48:be:00:db:6f:a7:5f:1e:58:a4:cc:47:0c:c6:13:43: 4f:4d:5f:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHtQxt62apYWgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OWEwYWZkYmUtN2NmZS00NWFhLWE0OTEtZWQ4MmM5NDUyMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7zURVJwBPQGUxblOdrDG3pHvwf79RiMG7Lw XOjyrHvx3x5pvig6Ed98tXGdbCoCaCsba/O1vlruwfP1VyzAgt1Ax31RRomDNOt8 HhYcPLJh32+bhlAjBSoQ1aGrNjiqft3v/DKutz00KjUUorNrrpLDLbAyc2qk7Wlh wFk4OjPLv+XL1TaRp69TkRHLsWvsf1iOAvdtyMfXV8u1een35JrHbv8E6zB9fVNJ CNQsjdW+nlQOfG7ejoyIsfP+Wrw6Z8x/uFxMCZq1rO81R834Xe09waPwOths0S/B GKpSSmcBwlsi/PVbOUtoAjN4iAwylYU6T5kDXRRjLlHh+WnvZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8paFDAFHMX4Y96ZiuYRAfthrvlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvNzI0ZTJjYzktZTc2Zi0z MDI1LWIyMTQtN2E3NmFiN2ZhOWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl9WYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACh5u805Q6bbku8NA4urQYzmMAf6CBq4vtEkKh7qzHrrm7cGDfFULxe v8+Xt+BbI0VniKZpkm8oKIcy1xTnrbkpLdH9v/YHdW0nHFLoQsR/95gtCZ6CUXZ0 MOurEOcjMbsoAJFDiqIJhF8BJHLqADT7+YnWZhQl6w3jah0GBNZDXE1ubXfAs8tj YNd7wEMufsA1+5xw8RMIQa7w4Lwhl1nRUBWVerR6vRD0zIlmSCImMF0oKOvnNYD/ lRcSOZ7Vj55t6WWYaFnDu5tA575uk9qBOjchiTKWoYP190UDOBo82LsNfLZKEKWE Jl4OSL4A22+nXx5YpMxHDMYTQ09NXzc= -----END CERTIFICATE-----Generated at Sun Jun 29 09:21:13 2025 by rpki-client