$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa File: b38aba09-012f-3d09-87cf-93c71f23adb3.roa (raw, json) Hash identifier: 0Ed6HlRzm8f/AoHyfXMyemxdt1sQZu5CkWSsEH+NKRM= Subject key identifier: D3:95:45:FA:18:A8:26:C7:D9:32:08:52:95:4A:F9:AA:A0:10:D0:37 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707C501491ADA22953AF00 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.185.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7c:50:14:91:ad:a2:29:53:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=d04cb6f4-11df-417f-b2c4-79362c99968c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:6d:28:7b:15:1b:7d:d2:3d:8a:0e:7e:52:dd: 08:65:a3:73:51:7e:82:dd:5e:91:c3:88:c2:de:2b: 0f:cf:16:51:cb:c6:5d:bd:00:58:25:8c:f4:22:15: 06:c3:93:23:6f:14:e1:d0:d7:13:de:24:2d:70:df: 48:6a:9b:3e:86:20:c9:55:c6:61:7d:d7:3e:d8:e6: 17:83:00:38:03:fe:9d:75:b1:df:81:bf:43:02:a5: 34:b1:2e:8a:ad:11:25:3b:4c:b2:06:db:b2:2c:ec: 9b:33:7c:c2:db:ce:34:b9:da:e9:99:14:2d:53:ce: 14:1e:64:08:07:5f:f3:e0:d7:62:24:cb:94:21:eb: 3a:4d:05:55:20:d0:3e:f6:57:9b:98:d2:af:b2:e1: 7e:97:65:f3:b0:fe:21:c8:ce:d8:1d:07:3c:e4:7f: fe:38:ec:2b:e0:b0:75:cd:e8:3c:16:1f:6f:d3:bd: 27:f3:89:83:22:d5:1d:cc:5a:ac:24:74:c4:48:97: 5e:c9:21:5a:6d:b9:24:8f:50:ef:13:20:24:83:dc: 6f:12:86:23:9e:55:62:b4:37:2f:15:0b:aa:87:31: dd:e8:13:dd:ba:ee:1d:6b:ad:d5:ec:d7:0c:32:a2: 57:4d:2a:1b:ca:8c:ed:95:16:21:8a:ae:6a:6f:17: 62:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:45:FA:18:A8:26:C7:D9:32:08:52:95:4A:F9:AA:A0:10:D0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b38aba09-012f-3d09-87cf-93c71f23adb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6a:8e:03:41:d4:4d:1f:ee:94:3c:98:a3:a3:49:50:c7:f3: 0c:b1:14:94:ee:f9:15:a6:ba:91:5e:14:15:55:86:fa:c9:6a: a0:3f:5b:03:d0:88:ce:fc:4a:a5:33:59:a3:a6:e5:6f:b5:db: 27:4d:8b:ca:01:f8:27:0d:9b:0d:06:b6:73:ca:d3:78:77:fb: 9d:65:3d:47:bb:8e:df:75:84:e4:8b:97:53:ba:0d:ea:a9:2a: 52:21:d7:fb:c2:23:5e:07:43:22:ab:a0:de:fb:a8:e7:92:3b: b4:fa:76:58:d0:88:a5:2e:09:39:0e:74:cc:15:28:5e:54:d9: 39:df:9d:ee:c8:30:67:96:b9:a0:dc:bd:70:2c:0d:6d:79:5f: 76:4e:3a:48:41:3e:53:fb:4a:57:32:f3:42:17:b4:68:e9:66: 8f:e0:1e:fe:d6:1c:2d:03:4b:f0:e3:13:06:33:08:5e:de:49: 02:7e:38:ce:fd:39:49:72:59:52:e2:a9:56:9f:9b:fc:9c:1d: f1:49:78:12:33:04:ce:34:7d:bc:18:17:2a:1b:49:55:98:73: ec:6e:d1:8f:af:fd:b8:86:50:c7:a9:6d:9f:fa:9f:cf:34:1e: 63:30:23:f5:ab:a4:4c:0b:00:17:39:6e:0f:5c:52:9d:09:19: 9a:60:fc:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHxQFJGtoilTrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDA0Y2I2ZjQtMTFkZi00MTdmLWIyYzQtNzkzNjJjOTk5NjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj20oexUbfdI9ig5+Ut0IZaNzUX6C3V6Rw4jC 3isPzxZRy8ZdvQBYJYz0IhUGw5MjbxTh0NcT3iQtcN9Iaps+hiDJVcZhfdc+2OYX gwA4A/6ddbHfgb9DAqU0sS6KrRElO0yyBtuyLOybM3zC2840udrpmRQtU84UHmQI B1/z4NdiJMuUIes6TQVVINA+9lebmNKvsuF+l2XzsP4hyM7YHQc85H/+OOwr4LB1 zeg8Fh9v070n84mDItUdzFqsJHTESJdeySFabbkkj1DvEyAkg9xvEoYjnlVitDcv FQuqhzHd6BPduu4da63V7NcMMqJXTSobyoztlRYhiq5qbxdi7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOVRfoYqCbH2TIIUpVK+aqgENA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjM4YWJhMDktMDEyZi0z ZDA5LTg3Y2YtOTNjNzFmMjNhZGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFqjgNB1E0f7pQ8mKOjSVDH8wyxFJTu+RWmupFeFBVVhvrJaqA/WwPQ iM78SqUzWaOm5W+12ydNi8oB+CcNmw0GtnPK03h3+51lPUe7jt91hOSLl1O6Deqp KlIh1/vCI14HQyKroN77qOeSO7T6dljQiKUuCTkOdMwVKF5U2Tnfne7IMGeWuaDc vXAsDW15X3ZOOkhBPlP7Slcy80IXtGjpZo/gHv7WHC0DS/DjEwYzCF7eSQJ+OM79 OUlyWVLiqVafm/ycHfFJeBIzBM40fbwYFyobSVWYc+xu0Y+v/biGUMepbZ/6n880 HmMwI/WrpEwLABc5bg9cUp0JGZpg/C8= -----END CERTIFICATE-----Generated at Sun Jun 29 02:00:53 2025 by rpki-client