$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa File: d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa (raw, json) Hash identifier: 8WR3mJ1BpuOWdCJtC1r3+hlveRvJnrX5hiZ+Ct1T9xE= Subject key identifier: E1:E8:81:41:6C:A0:1E:99:79:C0:74:3D:CE:E7:5F:01:76:D6:D4:25 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A35E590075A605F003DB40380 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 173.184.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:90:07:5a:60:5f:00:3d:b4:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=6616ae5a-9acd-4a8b-8097-7ffb82b5afb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:86:b4:17:e5:b9:c6:00:17:b0:7c:b2:0f:c4: 8c:21:c1:38:f8:ec:88:57:e4:d9:ae:29:e4:25:3e: fa:8c:84:50:2d:41:a4:f8:ab:8c:0a:52:b2:ed:91: c6:08:07:38:af:af:a3:7d:99:53:ba:63:c7:65:69: b7:cd:85:1d:45:87:a6:a0:2a:67:2b:13:36:1c:b8: 18:a4:97:78:f7:57:dc:09:87:97:4a:67:0f:ca:ec: e8:3b:ad:33:8e:37:d6:5d:77:93:71:96:5d:62:96: 12:3c:7f:45:d5:3e:e0:fc:cd:12:f3:58:43:19:b0: f9:10:bc:53:53:47:20:40:14:03:dc:52:02:b4:9e: 5b:bb:86:83:bc:54:84:c5:05:fa:9a:94:63:ae:61: 58:a2:f0:f8:e6:36:e7:7b:9a:ea:44:31:36:30:5e: 9c:be:1d:9b:27:51:0b:38:66:ff:b0:78:5e:96:ec: 31:96:19:45:03:ac:0e:f1:78:66:12:54:2c:dc:cc: 8f:e8:b9:fb:a3:53:3a:4e:8a:d7:78:56:b8:b8:28: 84:fb:61:28:55:e0:da:82:d9:b9:eb:3c:cf:85:b8: 51:b2:45:e7:c0:0a:7f:ed:10:30:a2:ed:af:e9:94: 0c:a2:1d:60:38:ef:de:63:11:c6:3a:a6:02:30:92: 59:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E8:81:41:6C:A0:1E:99:79:C0:74:3D:CE:E7:5F:01:76:D6:D4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d1a4d6b1-6aa8-317b-a973-11ce5c35d169.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.184.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ab:6f:c7:3c:69:53:8c:c1:e7:dd:d5:a7:a3:35:2b:09:20: 06:12:34:e4:85:fe:3e:dd:a2:48:91:46:ac:8b:40:bf:1b:6a: 2c:dc:58:dc:f0:fe:63:5f:21:3c:6a:49:be:70:9a:58:64:5c: 2a:28:73:d7:52:df:3a:1c:4f:93:a2:c5:21:e4:c9:5f:d3:78: 57:46:60:49:01:69:35:50:b9:54:a7:68:30:8c:95:61:40:df: 33:98:b1:51:65:62:4b:64:0a:38:62:a8:9c:13:21:d6:c1:3e: 9d:3a:73:1c:5a:11:38:9f:1c:89:10:bd:d5:76:b1:5d:66:8d: dd:2d:09:44:6d:a0:82:1a:b5:cd:92:90:91:fd:f2:20:f1:d3: e9:ed:78:70:e7:80:6c:18:04:78:83:3b:5e:90:53:58:b7:77: 3f:7e:89:ff:af:38:89:8e:f2:88:74:55:1a:76:b2:fd:62:27: f8:f7:22:30:9b:c3:3a:ee:28:0d:05:8c:b0:70:51:c7:3a:d5: 37:3e:b5:a3:7d:71:85:0c:5f:7b:bf:bd:8b:d5:79:cb:27:30: fc:18:52:6f:e6:27:bc:d7:ee:5d:69:b2:55:09:9e:7e:8a:1b: 09:0e:b0:2f:90:46:2b:18:4d:e8:40:04:da:47:14:73:ef:74: 98:11:be:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15ZAHWmBfAD20A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk NjYxNmFlNWEtOWFjZC00YThiLTgwOTctN2ZmYjgyYjVhZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIa0F+W5xgAXsHyyD8SMIcE4+OyIV+TZrink JT76jIRQLUGk+KuMClKy7ZHGCAc4r6+jfZlTumPHZWm3zYUdRYemoCpnKxM2HLgY pJd491fcCYeXSmcPyuzoO60zjjfWXXeTcZZdYpYSPH9F1T7g/M0S81hDGbD5ELxT U0cgQBQD3FICtJ5bu4aDvFSExQX6mpRjrmFYovD45jbne5rqRDE2MF6cvh2bJ1EL OGb/sHheluwxlhlFA6wO8XhmElQs3MyP6Ln7o1M6TorXeFa4uCiE+2EoVeDagtm5 6zzPhbhRskXnwAp/7RAwou2v6ZQMoh1gOO/eYxHGOqYCMJJZ0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHogUFsoB6ZecB0Pc7nXwF21tQlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDFhNGQ2YjEtNmFhOC0z MTdiLWE5NzMtMTFjZTVjMzVkMTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErbigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmrb8c8aVOMwefd1aejNSsJIAYSNOSF/j7dokiRRqyLQL8baizcWNzw /mNfITxqSb5wmlhkXCooc9dS3zocT5OixSHkyV/TeFdGYEkBaTVQuVSnaDCMlWFA 3zOYsVFlYktkCjhiqJwTIdbBPp06cxxaETifHIkQvdV2sV1mjd0tCURtoIIatc2S kJH98iDx0+nteHDngGwYBHiDO16QU1i3dz9+if+vOImO8oh0VRp2sv1iJ/j3IjCb wzruKA0FjLBwUcc61Tc+taN9cYUMX3u/vYvVecsnMPwYUm/mJ7zX7l1pslUJnn6K GwkOsC+QRisYTehABNpHFHPvdJgRvsQ= -----END CERTIFICATE-----Generated at Mon Jun 30 14:53:41 2025 by rpki-client