$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa File: c2e69a4e-a91b-3d73-bea6-467992e1639a.roa (raw, json) Hash identifier: qZ36dY5omC9PEpL2IiK6010fbbYRK+DkkxQBojnGl8A= Subject key identifier: 32:FA:62:25:21:95:7D:E1:6D:B6:9D:BA:BE:F2:8E:BE:74:0F:6D:72 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707C709F20DE4C7D1CD280 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.186.192.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7c:70:9f:20:de:4c:7d:1c:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=8f774018-aabc-47c7-ae31-0b7cba9b0ff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:18:a9:ab:a0:3c:33:c3:bb:93:6b:0d:77:c7: 19:25:1d:7b:06:e4:e2:1e:45:6b:d6:88:36:5f:5a: f4:d9:0c:f8:b3:84:ba:56:b4:93:b9:dc:fd:d2:10: e6:b3:d1:73:9d:3e:86:17:c7:82:f0:00:0a:b5:6b: bc:0b:dd:a8:95:e7:47:f4:93:89:e8:b8:82:1b:cb: 98:a5:d0:62:bc:c8:ac:c3:4d:74:a3:43:28:51:85: 02:f4:53:5b:71:8d:e7:89:72:2b:c5:27:ca:d6:62: 3b:a1:cc:0d:a4:61:8a:fc:56:cb:30:4d:13:e4:8c: 9e:36:03:be:7d:77:10:44:fc:fd:ea:2d:54:69:21: 1b:24:28:18:f2:d0:60:f2:e2:cd:2a:f6:cb:9e:dc: 1b:10:3f:a9:31:cc:37:e0:89:4c:19:a9:2e:be:af: 5f:20:c3:fc:80:59:9b:48:89:c2:3a:64:3f:21:e6: 11:f7:96:42:4f:01:01:ce:44:ea:0c:36:df:31:d4: c7:7e:67:c7:74:ed:98:24:b1:87:72:51:34:f2:ae: d9:e9:97:f3:da:c8:54:32:bc:d4:4c:51:96:41:37: e9:79:44:10:f4:a7:49:9f:88:b1:a2:dc:ff:f4:53: 0e:ae:b0:c7:b4:6a:e6:0d:58:7f:be:bc:2d:72:58: 16:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FA:62:25:21:95:7D:E1:6D:B6:9D:BA:BE:F2:8E:BE:74:0F:6D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e69a4e-a91b-3d73-bea6-467992e1639a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.186.192.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:18:a9:f3:3d:36:e0:36:ee:85:fb:77:85:b7:c0:b1:c6:7e: b0:dc:21:6b:a7:e9:9d:f2:8f:a6:97:19:0e:fe:33:b4:fa:55: b5:af:d1:b5:37:90:3d:cc:d2:1e:f7:78:fc:cf:b2:c7:af:db: 9c:70:37:f3:20:52:be:ba:27:c6:02:00:e7:7e:e3:6c:4e:f7: ec:dc:98:74:b5:9a:9a:ee:4d:64:c3:8d:72:d0:1e:a7:39:1c: 6b:7d:54:83:9e:17:d1:63:0e:9c:ef:f1:18:67:05:dd:0d:7a: ab:a6:67:ec:3a:41:96:bf:03:61:04:e6:20:04:8f:03:dd:b8: 5d:0a:ee:0c:67:55:4f:61:cf:f1:c8:fd:c2:cf:4c:8b:27:29: 3a:0f:c7:38:11:53:a2:47:4f:41:6f:b9:f9:f6:91:b9:4c:e3: 3f:85:1d:c2:64:46:86:f8:0c:3a:da:b5:86:9c:04:47:5c:00: 16:41:8f:f7:35:1d:63:71:89:e0:89:09:63:1a:25:6e:b8:06: 54:ae:d2:23:01:68:b5:c4:12:ad:7b:41:8c:85:eb:42:f6:70: 99:1f:2b:c5:97:2b:c7:0f:d4:69:0c:f3:29:39:53:1a:f9:07: 88:bc:61:e4:7e:ec:03:2e:28:6b:0f:7f:52:17:3f:36:06:7d: 25:16:47:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHxwnyDeTH0c0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk OGY3NzQwMTgtYWFiYy00N2M3LWFlMzEtMGI3Y2JhOWIwZmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxipq6A8M8O7k2sNd8cZJR17BuTiHkVr1og2 X1r02Qz4s4S6VrSTudz90hDms9FznT6GF8eC8AAKtWu8C92oledH9JOJ6LiCG8uY pdBivMisw010o0MoUYUC9FNbcY3niXIrxSfK1mI7ocwNpGGK/FbLME0T5IyeNgO+ fXcQRPz96i1UaSEbJCgY8tBg8uLNKvbLntwbED+pMcw34IlMGakuvq9fIMP8gFmb SInCOmQ/IeYR95ZCTwEBzkTqDDbfMdTHfmfHdO2YJLGHclE08q7Z6Zfz2shUMrzU TFGWQTfpeUQQ9KdJn4ixotz/9FMOrrDHtGrmDVh/vrwtclgWgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDL6YiUhlX3hbbadur7yjr50D21yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJlNjlhNGUtYTkxYi0z ZDczLWJlYTYtNDY3OTkyZTE2MzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrbrAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIYqfM9NuA27oX7d4W3wLHGfrDcIWun6Z3yj6aXGQ7+M7T6VbWv0bU3 kD3M0h73ePzPssev25xwN/MgUr66J8YCAOd+42xO9+zcmHS1mpruTWTDjXLQHqc5 HGt9VIOeF9FjDpzv8RhnBd0NequmZ+w6QZa/A2EE5iAEjwPduF0K7gxnVU9hz/HI /cLPTIsnKToPxzgRU6JHT0Fvufn2kblM4z+FHcJkRob4DDratYacBEdcABZBj/c1 HWNxieCJCWMaJW64BlSu0iMBaLXEEq17QYyF60L2cJkfK8WXK8cP1GkM8yk5Uxr5 B4i8YeR+7AMuKGsPf1IXPzYGfSUWR/Q= -----END CERTIFICATE-----Generated at Sun Jun 29 01:57:36 2025 by rpki-client