$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa File: c2e823ae-4aec-34a0-8195-de7514832f7a.roa (raw, json) Hash identifier: xMwGNDBBbfbrE3EGrJ1jUhJBMtk6ZIQuJB6Rr9Mx7lI= Subject key identifier: 7D:66:66:C4:C8:45:DB:CA:35:9A:D8:AD:06:6A:F7:EE:D4:36:B0:5B Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707B6921BF5DF338EC17D0 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 162.39.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7b:69:21:bf:5d:f3:38:ec:17:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=559935eb-38a4-4ec3-a768-f8cab72f04f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:cf:82:3b:44:d2:c0:cf:03:47:c0:c2:ae:27: b4:5c:94:39:d9:b9:74:2c:bb:13:1d:d7:9d:67:00: 77:6f:6b:78:01:05:58:3b:0d:7b:60:8b:e1:73:ac: ca:0f:c1:81:6e:2f:7c:78:8d:ab:aa:a7:c8:91:ab: 8f:74:fc:e4:c2:80:0f:da:9e:38:28:aa:55:3f:56: fb:ea:c1:a6:66:cd:7f:e2:2d:f6:c0:4f:8e:ec:ff: 83:d5:79:2e:89:e8:61:fa:10:9c:2f:e0:53:69:0b: d9:7e:13:00:4b:5a:2b:27:c7:cf:55:e6:3b:28:0c: 83:0c:16:80:e7:3e:68:a2:c6:a3:4d:18:98:e5:36: df:5e:b5:fb:3b:39:d8:0c:ea:3b:b5:4b:0d:d8:6c: 50:cf:22:22:df:16:c9:b9:79:c0:b4:2a:91:4c:48: ec:78:cd:e5:ee:29:34:96:5b:c1:bf:31:77:f2:86: fd:3d:29:6a:96:e9:86:a8:75:62:e8:ca:a8:cd:41: 9f:44:09:ef:2f:1b:84:3f:b8:cf:7a:37:7f:8e:4f: 6a:75:ed:bf:1f:8a:f6:37:1c:92:0e:a3:14:3c:21: f9:f0:e6:42:e4:a9:ec:04:12:9c:4c:10:21:e4:56: 35:14:a5:a6:f2:da:da:db:07:7d:c6:fe:23:ef:ec: 52:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:66:66:C4:C8:45:DB:CA:35:9A:D8:AD:06:6A:F7:EE:D4:36:B0:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/c2e823ae-4aec-34a0-8195-de7514832f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 162.39.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:20:87:fc:d2:a0:db:95:00:74:9f:0e:a0:de:a0:ae:09:09: f3:c3:ef:53:97:5a:c6:24:2a:1f:84:8c:44:65:55:9c:f4:a2: b6:a0:db:5f:9d:d2:87:a8:78:b2:fc:dc:6f:80:04:6d:e6:bc: e4:9f:7b:57:dd:e7:58:7b:47:6a:5e:d6:f3:ac:a9:c7:fb:29: 8e:fd:72:cd:a5:60:21:ec:75:ef:d5:88:17:98:d2:45:65:15: 7f:64:ee:dd:82:05:2c:ca:66:d6:9a:d7:d9:e3:db:b2:e9:ef: 15:de:40:0e:45:d6:7e:64:03:86:3c:af:12:ab:89:ed:d1:30: e6:3e:54:6b:55:2c:14:05:16:af:ec:97:a8:1c:f4:b3:af:60: 5c:6b:4b:38:16:bf:fc:2f:ff:1c:72:80:6b:45:24:9b:49:cd: a1:c0:93:37:ed:f5:0e:00:c9:71:f1:ba:b9:48:9f:0d:ec:6b: 20:d0:3b:92:d9:7f:33:4d:ce:46:6a:da:7c:34:13:3a:99:0b: 1e:0b:1e:b7:63:ec:c7:5a:01:1d:03:32:4f:70:cb:e5:1b:4b: 17:04:e4:4e:bc:0d:6b:51:1c:fe:3d:3d:d9:c4:cf:41:18:d2: 70:e0:03:a8:c3:77:cd:2b:2c:da:88:2c:39:d4:a6:d2:27:cf: 87:43:e2:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHtpIb9d8zjsF9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk NTU5OTM1ZWItMzhhNC00ZWMzLWE3NjgtZjhjYWI3MmYwNGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8+CO0TSwM8DR8DCrie0XJQ52bl0LLsTHded ZwB3b2t4AQVYOw17YIvhc6zKD8GBbi98eI2rqqfIkauPdPzkwoAP2p44KKpVP1b7 6sGmZs1/4i32wE+O7P+D1Xkuiehh+hCcL+BTaQvZfhMAS1orJ8fPVeY7KAyDDBaA 5z5oosajTRiY5TbfXrX7OznYDOo7tUsN2GxQzyIi3xbJuXnAtCqRTEjseM3l7ik0 llvBvzF38ob9PSlqlumGqHVi6MqozUGfRAnvLxuEP7jPejd/jk9qde2/H4r2NxyS DqMUPCH58OZC5KnsBBKcTBAh5FY1FKWm8tra2wd9xv4j7+xSkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1mZsTIRdvKNZrYrQZq9+7UNrBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvYzJlODIzYWUtNGFlYy0z NGEwLTgxOTUtZGU3NTE0ODMyZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoie8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQgh/zSoNuVAHSfDqDeoK4JCfPD71OXWsYkKh+EjERlVZz0orag21+d 0oeoeLL83G+ABG3mvOSfe1fd51h7R2pe1vOsqcf7KY79cs2lYCHsde/ViBeY0kVl FX9k7t2CBSzKZtaa19nj27Lp7xXeQA5F1n5kA4Y8rxKrie3RMOY+VGtVLBQFFq/s l6gc9LOvYFxrSzgWv/wv/xxygGtFJJtJzaHAkzft9Q4AyXHxurlInw3sayDQO5LZ fzNNzkZq2nw0EzqZCx4LHrdj7MdaAR0DMk9wy+UbSxcE5E68DWtRHP49PdnEz0EY 0nDgA6jDd80rLNqILDnUptInz4dD4kY= -----END CERTIFICATE-----Generated at Tue Jul 1 18:31:32 2025 by rpki-client