$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/910f6d38-1477-32c4-8de5-b1e42636f0eb.roa File: 910f6d38-1477-32c4-8de5-b1e42636f0eb.roa (raw, json) Hash identifier: 29zlx8sohyf7KpcDKXRGzcGJ3OeQ/R0/TCzh9oaZsC0= Subject key identifier: 03:80:A9:8F:F4:C6:2E:C8:8B:5C:8D:12:AA:61:5D:ED:4F:17:C9:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707C3F43937FE48D4760C0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/910f6d38-1477-32c4-8de5-b1e42636f0eb.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.184.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7c:3f:43:93:7f:e4:8d:47:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=576f1f23-b667-4099-844f-17326f566df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:b1:40:a7:3e:24:97:26:c2:61:3c:1c:72: e2:29:22:d0:3e:4a:59:39:81:ba:97:ff:ad:64:cc: 61:c8:f4:59:fb:a4:2d:ef:75:a7:93:0d:0f:d3:a6: 4a:e2:11:da:2d:f3:f7:5b:cb:64:06:74:49:4d:f6: ed:b2:f4:8e:bb:97:07:23:0f:ea:65:95:22:c2:2b: 20:ec:63:ce:ac:d9:9f:0d:38:10:41:c7:9c:62:8a: eb:8e:bb:d5:7b:d9:eb:9b:9e:36:d1:4b:94:05:a0: 1b:32:c4:cb:b1:18:a9:44:4d:83:5d:33:1b:75:12: fd:0f:19:70:4d:36:6f:8b:24:54:ef:51:8c:7f:1f: f1:68:2c:4b:8e:17:ee:57:7f:db:05:7d:bd:60:a6: e0:9f:16:33:f4:8e:55:19:23:1e:33:1f:41:f6:3c: 11:4e:37:fc:b6:d5:3a:6a:dd:6f:28:4f:5b:c2:86: cf:85:02:6e:32:21:77:c6:8c:7d:51:64:92:88:ce: 1c:74:46:43:d1:1e:c1:f5:32:3f:1b:d1:6a:2e:6d: d1:8c:21:19:17:2f:1e:0d:fc:e5:ae:99:86:22:2a: d9:61:33:4b:8d:b7:16:99:d4:40:31:6b:1e:c7:39: d1:1b:fd:67:50:60:fe:3d:46:4f:c1:be:38:6d:28: 16:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:80:A9:8F:F4:C6:2E:C8:8B:5C:8D:12:AA:61:5D:ED:4F:17:C9:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/910f6d38-1477-32c4-8de5-b1e42636f0eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.204.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:44:fc:48:b1:7f:ac:87:f5:27:38:60:66:82:a8:11:99:50: 40:4d:1e:e9:ca:69:8c:3d:5b:60:5e:6e:e8:e5:43:62:2b:6f: 1d:7f:eb:8e:db:f0:4e:a6:c1:b6:07:46:d8:a0:03:1d:bf:e3: a4:9f:72:c9:92:e1:ef:79:6b:91:0b:7a:5e:f7:ca:03:ac:bf: 69:48:e0:e6:c6:01:d9:65:fc:6c:47:90:54:6f:60:9b:2b:d6: a2:3d:d3:b1:08:eb:33:20:ae:6a:44:2d:88:39:f3:f6:f3:28: 3a:fd:10:96:0c:d0:bc:db:5e:68:6d:02:90:04:fc:89:21:6c: e1:2f:a6:46:75:65:d0:81:8a:d1:1e:68:cf:53:c0:e3:b7:8f: 65:ea:fc:f8:e6:6d:29:9d:9c:04:c9:75:f8:9b:e2:0c:a3:08: 7e:10:33:b2:41:05:f3:4b:f3:f1:eb:93:8f:6a:ab:4c:3d:c0: c1:74:43:dd:78:0a:0a:f1:00:78:e4:c9:92:82:c1:29:e6:9b: e7:2b:d0:6f:e7:1f:86:a0:b3:92:b0:0c:96:11:48:3c:09:a0: 14:1d:a6:88:c4:16:01:17:99:07:1d:bc:ed:89:1c:7f:77:f2: a1:73:f7:1c:67:12:65:31:c2:f5:9f:7f:29:bc:55:eb:bf:d4: d0:9e:9d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHw/Q5N/5I1HYMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTc2ZjFmMjMtYjY2Ny00MDk5LTg0NGYtMTczMjZmNTY2ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2mxQKc+JJcmwmE8HHLiKSLQPkpZOYG6l/+t ZMxhyPRZ+6Qt73Wnkw0P06ZK4hHaLfP3W8tkBnRJTfbtsvSOu5cHIw/qZZUiwisg 7GPOrNmfDTgQQcecYorrjrvVe9nrm5420UuUBaAbMsTLsRipRE2DXTMbdRL9Dxlw TTZviyRU71GMfx/xaCxLjhfuV3/bBX29YKbgnxYz9I5VGSMeMx9B9jwRTjf8ttU6 at1vKE9bwobPhQJuMiF3xox9UWSSiM4cdEZD0R7B9TI/G9FqLm3RjCEZFy8eDfzl rpmGIirZYTNLjbcWmdRAMWsexznRG/1nUGD+PUZPwb44bSgWMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOAqY/0xi7Ii1yNEqphXe1PF8kyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvOTEwZjZkMzgtMTQ3Ny0z MmM0LThkZTUtYjFlNDI2MzZmMGViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrbjMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRE/Eixf6yH9Sc4YGaCqBGZUEBNHunKaYw9W2BebujlQ2Irbx1/647b 8E6mwbYHRtigAx2/46SfcsmS4e95a5ELel73ygOsv2lI4ObGAdll/GxHkFRvYJsr 1qI907EI6zMgrmpELYg58/bzKDr9EJYM0LzbXmhtApAE/IkhbOEvpkZ1ZdCBitEe aM9TwOO3j2Xq/PjmbSmdnATJdfib4gyjCH4QM7JBBfNL8/Hrk49qq0w9wMF0Q914 CgrxAHjkyZKCwSnmm+cr0G/nH4ags5KwDJYRSDwJoBQdpojEFgEXmQcdvO2JHH93 8qFz9xxnEmUxwvWffym8Veu/1NCenWY= -----END CERTIFICATE-----Generated at Sun Jun 29 21:04:58 2025 by rpki-client