$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d225ad19-e9d2-3019-b574-56c7396b905c.roa File: d225ad19-e9d2-3019-b574-56c7396b905c.roa (raw, json) Hash identifier: lCbVE/+807WH/s3B781xMNL3QQPbA99FxF5nh756F4I= Subject key identifier: 49:BC:FC:35:EB:6A:5A:DA:77:15:4B:03:5C:F6:C6:FE:09:FA:89:5A Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A4DA05223226D3715AE206F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d225ad19-e9d2-3019-b574-56c7396b905c.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 7029 IP address blocks: 173.185.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:52:23:22:6d:37:15:ae:20:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=eb3ad520-08d6-457d-9e9a-247c6b3084be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:78:36:72:a0:cd:d1:ee:b9:db:db:26:1d:ce: 9a:34:78:2a:4a:20:91:77:ed:8d:62:30:60:d9:58: 21:7d:b5:f1:d8:8e:8f:2d:46:cc:32:f2:4f:ab:f0: a3:ba:01:a1:1f:ca:0d:4c:c9:42:d1:c0:2d:f9:50: ab:e3:a5:f9:ba:36:3b:3a:19:84:fb:ee:98:92:78: a7:b4:9d:03:a5:3d:34:fd:70:9a:af:18:cb:43:5b: 8f:6a:f2:fa:ed:d1:e3:ab:a5:ce:ba:e4:1d:07:69: cd:8c:3c:ad:d2:ce:97:61:b3:67:6e:b1:96:80:00: 21:d4:60:a0:63:64:ac:e2:19:d8:32:fc:b8:b7:76: 92:ba:e4:6a:74:6c:7c:76:d5:46:5e:8a:49:21:df: 9b:9f:8c:48:05:81:6e:74:aa:32:dc:49:bd:25:0a: 4b:26:7f:0d:54:0e:f5:47:c3:9f:79:63:dc:fe:79: 00:33:4c:13:72:bf:7f:5f:29:be:95:58:36:e7:5e: 97:0a:97:9b:62:73:a5:e4:b6:b2:d6:a4:29:c1:92: b0:87:a3:4d:f3:4b:fb:60:ec:3f:0f:b2:46:d6:75: d6:20:d1:f7:db:81:55:b9:90:7f:10:7c:c2:91:8c: 7a:35:9e:7a:a2:85:8a:ea:14:14:2b:6a:0d:ef:71: 7b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BC:FC:35:EB:6A:5A:DA:77:15:4B:03:5C:F6:C6:FE:09:FA:89:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d225ad19-e9d2-3019-b574-56c7396b905c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 173.185.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:45:97:5d:73:bb:b8:dd:0d:41:6b:26:dc:73:19:08:5b:9b: cd:85:22:97:4a:20:6f:11:14:15:65:13:9d:dc:67:80:d8:b5: 22:55:63:1d:63:ac:ad:9a:73:26:42:53:e4:11:3c:d7:d5:08: 76:53:52:8a:d4:80:93:13:60:c6:2c:3b:1b:98:9a:b9:cb:7e: 45:dd:37:ef:5f:3c:ed:6c:a3:f3:64:69:1e:4a:df:f4:33:5f: d1:be:13:0a:cf:e4:18:9e:c5:8b:20:9c:35:ec:7d:64:d9:65: 5d:9a:f5:d6:d5:de:3f:34:b9:3a:47:0b:f3:f7:10:dc:de:d4: 64:78:09:fb:64:22:6a:c8:a2:5e:9c:4d:14:8c:e4:27:e6:b3: e5:e9:d1:3f:f1:db:4a:03:51:a3:ad:6f:c2:7f:34:ec:79:f4: d1:7c:a8:86:a3:c9:e2:d3:17:c7:e2:7e:f1:93:97:4d:fa:7d: d8:c4:0d:41:4f:c3:85:e6:5c:dd:07:4b:34:34:2d:c3:0b:1d: 5f:5a:58:f3:68:7d:92:f3:96:1e:0e:e0:7c:b6:ee:95:53:af: 31:89:f9:6f:40:3c:b8:97:6f:76:40:1f:57:7c:52:69:66:ed: 43:69:16:15:77:f2:0a:47:00:96:b7:1c:f4:17:87:9d:38:07: f7:68:95:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoFIjIm03Fa4gb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZWIzYWQ1MjAtMDhkNi00NTdkLTllOWEtMjQ3YzZiMzA4NGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3g2cqDN0e6529smHc6aNHgqSiCRd+2NYjBg 2VghfbXx2I6PLUbMMvJPq/CjugGhH8oNTMlC0cAt+VCr46X5ujY7OhmE++6Yknin tJ0DpT00/XCarxjLQ1uPavL67dHjq6XOuuQdB2nNjDyt0s6XYbNnbrGWgAAh1GCg Y2Ss4hnYMvy4t3aSuuRqdGx8dtVGXopJId+bn4xIBYFudKoy3Em9JQpLJn8NVA71 R8OfeWPc/nkAM0wTcr9/Xym+lVg2516XCpebYnOl5Lay1qQpwZKwh6NN80v7YOw/ D7JG1nXWINH324FVuZB/EHzCkYx6NZ56ooWK6hQUK2oN73F7hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEm8/DXralradxVLA1z2xv4J+olaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDIyNWFkMTktZTlkMi0z MDE5LWI1NzQtNTZjNzM5NmI5MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArbkjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVFl11zu7jdDUFrJtxzGQhbm82FIpdKIG8RFBVlE53cZ4DYtSJVYx1j rK2acyZCU+QRPNfVCHZTUorUgJMTYMYsOxuYmrnLfkXdN+9fPO1so/NkaR5K3/Qz X9G+EwrP5BiexYsgnDXsfWTZZV2a9dbV3j80uTpHC/P3ENze1GR4CftkImrIol6c TRSM5Cfms+Xp0T/x20oDUaOtb8J/NOx59NF8qIajyeLTF8fifvGTl036fdjEDUFP w4XmXN0HSzQ0LcMLHV9aWPNofZLzlh4O4Hy27pVTrzGJ+W9APLiXb3ZAH1d8Umlm 7UNpFhV38gpHAJa3HPQXh504B/doleE= -----END CERTIFICATE-----Generated at Tue Jul 1 08:16:28 2025 by rpki-client