$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa File: a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa (raw, json) Hash identifier: ZZ/3ae7FiLCyG0Vz3N40wMPs2f6goIo0lYbliq78ss8= Subject key identifier: 56:54:1B:3E:1D:8C:CA:54:C2:89:AE:2A:3B:E2:52:D8:36:8F:EA:0D Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285849D1658811F53778C3B0BCC880 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa Signing time: Sun 11 May 2025 13:01:01 +0000 ROA not before: Sun 11 May 2025 13:01:01 +0000 ROA not after: Sat 09 Aug 2025 13:01:01 +0000 asID: 7029 IP address blocks: 173.191.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d1:65:88:11:f5:37:78:c3:b0:bc:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: May 11 13:01:01 2025 GMT Not After : Aug 9 13:01:01 2025 GMT Subject: CN=f597d406-b2af-4306-82c5-34f2a8bcc026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b9:96:64:8e:82:fe:bd:97:b7:04:51:7c:c0: 9f:c6:0b:37:df:93:f2:be:d6:81:e1:3d:ef:c0:e4: c0:46:e4:8d:04:a7:b8:bf:5f:30:03:2d:81:20:e2: 12:3d:d2:5c:bf:6d:60:a9:87:e6:a5:a4:47:7f:2d: 86:39:3a:fa:c2:85:63:61:36:80:8c:a0:31:53:93: 44:fa:22:15:e9:a4:65:e2:c2:31:66:d8:15:46:ac: 51:78:82:ed:8d:72:e9:02:7e:84:86:73:0b:d3:3d: ac:97:3d:85:20:b1:3d:15:ed:6d:a8:19:6a:a9:80: b9:6f:69:6e:fa:d1:40:73:3b:eb:e5:03:63:96:7f: e0:36:6d:65:dc:50:1a:0a:1f:a6:cf:65:41:4f:2e: 07:b4:96:f8:16:f4:02:09:44:49:5b:e3:bf:a5:c7: 45:04:c6:54:5c:0f:47:19:af:7e:60:c1:43:e9:90: 77:52:3e:3c:c6:0a:75:26:00:0f:e0:c9:0c:9b:4f: b6:cf:f9:07:3a:a6:61:00:b0:89:28:b9:e0:e8:d6: c6:c4:54:ae:b4:9e:de:2d:67:11:97:ea:4a:3e:49: 77:18:54:fd:f3:a1:ed:62:2f:5d:c6:30:3b:43:52: c3:f5:70:f4:3e:bf:81:9f:db:be:b3:fe:8c:a9:89: b2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:54:1B:3E:1D:8C:CA:54:C2:89:AE:2A:3B:E2:52:D8:36:8F:EA:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/a598b2b0-16e5-30a3-a8d0-df4da5fb2080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.191.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:8a:d4:e9:e9:ca:7e:05:d7:3a:a8:74:2d:45:e1:8d:8c:46: be:08:3d:01:a1:8f:ab:ca:5f:e6:5f:34:ad:40:f6:01:0c:58: a5:a9:48:c6:4a:3a:44:8a:14:69:f8:a6:12:89:a8:a4:a2:ce: 8c:e1:b0:1c:74:d2:0d:07:b4:7c:6e:9e:0f:00:ea:2b:b3:ef: d8:fb:46:73:9f:fa:4e:a7:20:0f:d3:a6:a4:10:41:21:59:9a: 71:4f:0b:4b:31:5a:39:f0:e0:51:e3:5b:76:da:ec:55:61:99: f4:f9:9f:90:b4:e8:47:84:55:89:e2:7f:cb:eb:7f:76:05:f2: b5:48:66:58:79:30:f2:63:6b:2c:05:f0:7a:cf:d7:c7:c4:11: c0:98:52:11:98:65:f4:43:59:bd:d8:8c:c5:6c:a4:d9:df:be: 9c:cc:58:f8:ca:8d:c9:2a:fb:b6:d4:70:53:bd:1a:d7:eb:de: 25:46:91:ae:38:5f:5e:be:82:88:5a:89:dd:ca:9c:b2:c9:df: 2c:73:d1:23:71:06:3b:0f:ab:da:22:59:fd:2d:a7:0a:36:e9: 1b:cc:b4:89:dd:f6:02:f0:3d:61:2b:d4:e5:3b:3a:06:18:8a: 55:5a:1f:47:2e:74:cd:23:3d:3c:19:e7:3c:99:bd:fa:97:c4: 06:a7:9f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZYgR9Td4w7C8yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjU5N2Q0MDYtYjJhZi00MzA2LTgyYzUtMzRmMmE4YmNjMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbmWZI6C/r2XtwRRfMCfxgs335PyvtaB4T3v wOTARuSNBKe4v18wAy2BIOISPdJcv21gqYfmpaRHfy2GOTr6woVjYTaAjKAxU5NE +iIV6aRl4sIxZtgVRqxReILtjXLpAn6EhnML0z2slz2FILE9Fe1tqBlqqYC5b2lu +tFAczvr5QNjln/gNm1l3FAaCh+mz2VBTy4HtJb4FvQCCURJW+O/pcdFBMZUXA9H Ga9+YMFD6ZB3Uj48xgp1JgAP4MkMm0+2z/kHOqZhALCJKLng6NbGxFSutJ7eLWcR l+pKPkl3GFT986HtYi9dxjA7Q1LD9XD0Pr+Bn9u+s/6MqYmydwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZUGz4djMpUwomuKjviUtg2j+oNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYTU5OGIyYjAtMTZlNS0z MGEzLWE4ZDAtZGY0ZGE1ZmIyMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrb9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6K1Onpyn4F1zqodC1F4Y2MRr4IPQGhj6vKX+ZfNK1A9gEMWKWpSMZK OkSKFGn4phKJqKSizozhsBx00g0HtHxung8A6iuz79j7RnOf+k6nIA/TpqQQQSFZ mnFPC0sxWjnw4FHjW3ba7FVhmfT5n5C06EeEVYnif8vrf3YF8rVIZlh5MPJjaywF 8HrP18fEEcCYUhGYZfRDWb3YjMVspNnfvpzMWPjKjckq+7bUcFO9Gtfr3iVGka44 X16+gohaid3KnLLJ3yxz0SNxBjsPq9oiWf0tpwo26RvMtInd9gLwPWEr1OU7OgYY ilVaH0cudM0jPTwZ5zyZvfqXxAann/E= -----END CERTIFICATE-----Generated at Sun Jun 29 01:35:38 2025 by rpki-client