$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa File: b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa (raw, json) Hash identifier: TqgH/7ZbzWKfIJnsvtwT+NLi7y45Fe8JJ2OWgjq3tlg= Subject key identifier: D1:C8:3A:09:40:01:F2:7D:58:0F:29:95:45:AB:CC:92:02:D3:79:32 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707B877EDC66CDE59451A0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 162.40.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7b:87:7e:dc:66:cd:e5:94:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=8dcb849a-9794-422c-b475-2c53707dcd5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:89:81:8e:94:87:24:78:f2:59:af:5b:f6: c1:c9:55:2d:fb:2e:91:31:49:35:0b:d5:40:39:4a: c2:2a:b0:7d:7f:da:d9:56:9e:94:95:e0:50:e2:c8: 27:39:91:a1:e5:18:32:82:3c:f1:fc:87:48:ae:9b: 74:6b:8f:16:58:54:af:5d:0d:b2:ed:53:68:c0:2c: d1:91:99:0f:9b:35:ae:ab:01:76:2b:dc:00:93:c6: b2:60:1e:99:1c:72:41:5e:47:58:b7:93:aa:1d:66: 2f:21:e4:91:1d:d7:c4:0c:cb:7e:f2:40:0b:95:be: b6:98:4e:53:70:61:78:c3:6e:07:f0:96:21:ee:ad: f8:99:dd:c4:68:65:d3:1d:ae:55:28:be:7e:69:af: 09:8e:5a:b1:8a:b9:35:d9:7c:86:95:27:49:79:4f: 76:10:08:fe:32:2b:5c:e1:47:44:b6:12:ce:ba:c3: 64:f9:73:0e:90:36:6c:9a:d4:ba:ca:33:ea:10:75: e0:0f:9e:c4:38:3f:a1:be:38:5e:02:dc:f4:b1:b5: 38:6c:47:9c:ae:26:cb:cc:3f:33:b8:7a:8b:78:83: ce:16:c8:f2:89:87:69:1a:b7:5e:9d:e0:64:94:bd: d9:91:fc:b7:fd:17:a2:7a:77:9b:a4:2b:94:a8:2b: ec:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C8:3A:09:40:01:F2:7D:58:0F:29:95:45:AB:CC:92:02:D3:79:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/b4b8bc59-38be-322e-9f9a-8c24b32e085e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.40.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f3:74:c2:ac:e4:34:08:bb:a6:44:e6:2d:94:99:2a:41:ce: 83:dc:5f:23:ca:81:3e:ce:cf:1f:cd:ed:69:17:34:d2:65:5d: 36:08:d4:96:77:ed:9f:24:a8:07:6b:b7:2c:90:f1:38:41:2e: 1f:8f:ca:db:5e:ce:d9:02:4a:6f:7c:44:a3:95:ee:04:ca:64: c9:df:6a:e9:b4:e6:c0:11:fc:f4:b4:30:7e:81:79:6d:b2:ee: da:6f:e6:d1:5f:66:46:55:e3:20:82:c0:71:e3:49:36:5a:a7: 60:a8:7c:2d:c7:ee:54:4a:4f:30:95:10:75:26:3f:7a:ec:00: 1b:c4:8a:20:53:88:1b:1d:32:8c:ca:cd:49:e3:d9:35:69:5e: 87:22:32:58:da:11:59:58:d1:1f:68:39:d7:29:8c:53:7e:69: f8:43:82:33:90:e9:9b:5d:42:5a:a1:3b:3e:84:95:e9:aa:5c: 70:20:5d:8e:8d:aa:c1:b3:b7:c7:e5:0d:52:0c:a9:62:c8:23: a2:27:64:7b:71:5b:98:a2:73:1c:d3:76:74:68:9f:9c:9e:f8: e9:be:80:58:eb:b4:0b:74:6d:38:7e:86:71:46:0a:c9:59:d3: 63:be:22:0a:e1:40:cb:f0:f1:b3:97:c7:f4:e3:4f:2f:fc:cd: bc:e8:c4:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHuHftxmzeWUUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OGRjYjg0OWEtOTc5NC00MjJjLWI0NzUtMmM1MzcwN2RjZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKCJgY6UhyR48lmvW/bByVUt+y6RMUk1C9VA OUrCKrB9f9rZVp6UleBQ4sgnOZGh5Rgygjzx/IdIrpt0a48WWFSvXQ2y7VNowCzR kZkPmzWuqwF2K9wAk8ayYB6ZHHJBXkdYt5OqHWYvIeSRHdfEDMt+8kALlb62mE5T cGF4w24H8JYh7q34md3EaGXTHa5VKL5+aa8Jjlqxirk12XyGlSdJeU92EAj+Mitc 4UdEthLOusNk+XMOkDZsmtS6yjPqEHXgD57EOD+hvjheAtz0sbU4bEecribLzD8z uHqLeIPOFsjyiYdpGrdeneBklL3Zkfy3/ReienebpCuUqCvsIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHIOglAAfJ9WA8plUWrzJIC03kyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYjRiOGJjNTktMzhiZS0z MjJlLTlmOWEtOGMyNGIzMmUwODVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoig4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDzdMKs5DQIu6ZE5i2UmSpBzoPcXyPKgT7Ozx/N7WkXNNJlXTYI1JZ3 7Z8kqAdrtyyQ8ThBLh+PytteztkCSm98RKOV7gTKZMnfaum05sAR/PS0MH6BeW2y 7tpv5tFfZkZV4yCCwHHjSTZap2CofC3H7lRKTzCVEHUmP3rsABvEiiBTiBsdMozK zUnj2TVpXociMljaEVlY0R9oOdcpjFN+afhDgjOQ6ZtdQlqhOz6ElemqXHAgXY6N qsGzt8flDVIMqWLII6InZHtxW5iicxzTdnRon5ye+Om+gFjrtAt0bTh+hnFGCslZ 02O+IgrhQMvw8bOXx/TjTy/8zbzoxPk= -----END CERTIFICATE-----Generated at Sun Jun 29 08:57:17 2025 by rpki-client