$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa File: d14864e2-0c04-30bd-aa58-ba30680b128d.roa (raw, json) Hash identifier: ks2z684hyngPFqZzNsQf4g38BJSOLOApOnPitAe3kx8= Subject key identifier: DD:C3:CE:1F:CA:96:55:06:DC:73:DD:EC:21:39:38:02:58:CB:B6:CD Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A5E605D7C8F08D79A7A796200 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa Signing time: Tue 01 Jul 2025 01:00:50 +0000 ROA not before: Tue 01 Jul 2025 01:00:50 +0000 ROA not after: Mon 29 Sep 2025 01:00:50 +0000 asID: 7029 IP address blocks: 173.187.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:60:5d:7c:8f:08:d7:9a:7a:79:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jul 1 01:00:50 2025 GMT Not After : Sep 29 01:00:50 2025 GMT Subject: CN=0a49bf2a-740e-4c9a-9b66-febc08401ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:98:85:61:89:f2:71:79:0c:4e:6a:ff:50:d3: 61:3a:04:c2:cc:d3:a8:22:9b:94:ae:2d:73:f6:65: 12:50:54:c1:6b:2e:f5:f6:8b:34:1a:4a:ad:7d:a6: a8:e6:74:a3:39:77:8b:8e:55:87:7e:47:bd:52:ef: 33:f1:2a:62:ab:2c:45:00:0f:8f:c1:28:03:c1:18: a3:14:0c:d8:c9:25:09:3a:cb:b3:94:ec:e3:ec:29: 31:79:a2:be:d0:42:af:1f:0d:92:b9:cd:38:43:e4: b5:05:f7:77:7a:6d:dd:ac:5e:34:e5:96:a3:6d:ad: fa:51:76:ec:c2:bd:a8:b1:ce:9a:9a:f7:72:33:11: cd:20:22:bc:1d:f0:64:e7:03:9b:68:16:fc:a5:02: 7b:52:f2:97:95:02:bd:8a:83:9e:ec:2c:d7:72:c2: 1b:b3:55:e3:92:09:86:15:53:b2:82:1c:5b:4b:b3: fe:2e:ee:00:22:d3:fb:2c:28:c7:62:cd:dd:1e:6b: 49:19:4b:ae:90:c3:2c:09:64:dc:a2:5e:85:16:31: 39:c8:f8:b0:9f:3d:1d:c1:25:28:ab:a5:58:d8:9f: cd:b6:2c:2c:0b:73:ae:0f:3b:6c:7a:e9:70:0c:fa: ec:c3:6e:cc:92:ac:17:f4:42:25:56:40:9a:73:b2: f7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C3:CE:1F:CA:96:55:06:DC:73:DD:EC:21:39:38:02:58:CB:B6:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d14864e2-0c04-30bd-aa58-ba30680b128d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.187.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:66:72:dd:d9:d4:1d:1c:49:4e:2b:55:80:0f:20:ef:8b:b0: 18:ae:97:26:74:5c:e3:6d:f4:1b:ff:cf:42:26:87:71:85:2b: e5:46:67:e2:7f:13:c5:c9:77:38:c4:b3:18:fe:e6:8b:96:8a: 63:18:6e:42:d4:9e:1e:f3:0b:d4:54:58:6b:ca:d2:04:37:75: 8d:d1:ae:6f:fd:cb:23:c1:4f:1b:a3:40:8f:21:9d:d0:64:10: 80:fc:ae:7f:1a:28:3d:a6:ba:b3:8d:a3:9a:c5:eb:f9:c4:9f: 9e:87:d8:10:53:27:f8:aa:b5:04:48:fc:79:0d:72:e6:0f:97: 1c:83:3a:e5:7f:dd:fc:84:2a:25:b4:b3:c1:9e:30:9c:20:70: ab:0d:3d:1e:bf:db:e9:d1:47:41:58:1d:70:cd:a5:65:9f:a7: c8:95:53:1c:d0:01:33:75:8e:e3:d0:ff:3e:a5:11:28:ed:20: 83:0d:1e:f6:83:90:b1:a4:b4:bc:92:9a:1d:6e:d2:ec:50:b9: 94:c8:08:63:c3:41:c2:6d:07:f9:97:f2:48:c8:2f:06:3d:3b: 43:95:91:25:6c:93:e5:8c:28:9b:3a:5e:23:1f:b3:23:83:5d: 92:0d:11:37:ee:7f:93:50:71:dc:9f:f0:4e:d6:bf:02:4c:b2: a2:de:60:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeYF18jwjXmnp5YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk MGE0OWJmMmEtNzQwZS00YzlhLTliNjYtZmViYzA4NDAxYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5iFYYnycXkMTmr/UNNhOgTCzNOoIpuUri1z 9mUSUFTBay719os0Gkqtfaao5nSjOXeLjlWHfke9Uu8z8SpiqyxFAA+PwSgDwRij FAzYySUJOsuzlOzj7CkxeaK+0EKvHw2Suc04Q+S1Bfd3em3drF405Zajba36UXbs wr2osc6amvdyMxHNICK8HfBk5wObaBb8pQJ7UvKXlQK9ioOe7CzXcsIbs1XjkgmG FVOyghxbS7P+Lu4AItP7LCjHYs3dHmtJGUuukMMsCWTcol6FFjE5yPiwnz0dwSUo q6VY2J/NtiwsC3OuDztseulwDPrsw27MkqwX9EIlVkCac7L3KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3Dzh/KllUG3HPd7CE5OAJYy7bNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDE0ODY0ZTItMGMwNC0z MGJkLWFhNTgtYmEzMDY4MGIxMjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrbsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtmct3Z1B0cSU4rVYAPIO+LsBiulyZ0XONt9Bv/z0Imh3GFK+VGZ+J/ E8XJdzjEsxj+5ouWimMYbkLUnh7zC9RUWGvK0gQ3dY3Rrm/9yyPBTxujQI8hndBk EID8rn8aKD2murONo5rF6/nEn56H2BBTJ/iqtQRI/HkNcuYPlxyDOuV/3fyEKiW0 s8GeMJwgcKsNPR6/2+nRR0FYHXDNpWWfp8iVUxzQATN1juPQ/z6lESjtIIMNHvaD kLGktLySmh1u0uxQuZTICGPDQcJtB/mX8kjILwY9O0OVkSVsk+WMKJs6XiMfsyOD XZINETfuf5NQcdyf8E7WvwJMsqLeYBE= -----END CERTIFICATE-----Generated at Tue Jul 1 09:21:08 2025 by rpki-client