$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa File: d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa (raw, json) Hash identifier: drx/hQuzcjE15ulMSYGzP3U6q4/Zh9ESqs6ragYtgVI= Subject key identifier: F6:85:CE:84:FE:19:92:2D:FC:95:27:55:02:FE:31:C0:32:3A:87:A9 Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F4328584A49707B303A521B7B5D604700 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa Signing time: Mon 23 Jun 2025 13:01:03 +0000 ROA not before: Mon 23 Jun 2025 13:01:03 +0000 ROA not after: Sun 21 Sep 2025 13:01:03 +0000 asID: 7029 IP address blocks: 151.213.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:49:70:7b:30:3a:52:1b:7b:5d:60:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Jun 23 13:01:03 2025 GMT Not After : Sep 21 13:01:03 2025 GMT Subject: CN=38f00220-c9a1-4608-a78d-e0d9473c3b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:11:94:6c:9d:85:c9:f5:f4:ed:78:fb:e3: b8:9f:94:db:0a:2e:63:50:18:ec:64:df:94:76:a6: 30:05:3d:d2:a1:f2:39:eb:0f:d2:2d:e0:31:be:4c: 91:84:05:b6:3d:00:16:9c:11:32:40:d6:91:3f:07: 5a:d0:1a:5f:1f:bd:37:bf:38:d6:67:2c:26:2b:50: 49:4a:61:3b:4f:c6:eb:03:90:96:23:60:f9:c9:6e: 5d:5f:c4:98:8f:4a:6b:ee:49:8b:39:ce:fe:be:af: 1b:22:76:eb:be:20:ec:a8:ce:5b:b2:d3:c4:60:52: 23:30:aa:51:94:f3:ab:a6:d6:6e:9e:f8:28:c2:92: 86:77:a7:7c:60:80:c8:14:07:14:9c:f9:06:ce:10: cb:98:f8:21:6c:c1:18:d2:fe:46:80:87:13:fd:ed: b4:3c:f8:3b:14:31:0c:c9:c7:64:40:da:b5:3e:b8: 64:0b:69:c0:d3:94:ca:92:6b:15:6b:99:8f:47:0f: 95:70:d2:c9:f0:6d:2a:88:3c:1b:30:51:88:08:b2: bb:82:7b:77:15:97:2d:43:62:9a:fb:4f:28:4b:dd: 5a:34:47:7b:0b:8d:48:07:21:fd:8d:5e:02:67:2c: 2b:ec:0c:73:e7:0f:59:92:6e:39:0c:62:33:20:6d: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:85:CE:84:FE:19:92:2D:FC:95:27:55:02:FE:31:C0:32:3A:87:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d73a0a2a-9933-3cd5-b289-c7eb2f805c8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 151.213.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:94:95:f0:6a:33:a6:27:3f:8b:4f:2f:95:e7:bb:69:25:34: e6:3b:38:75:26:e5:b9:97:a5:b8:ed:88:0f:7e:c2:4d:06:36: 8c:4e:24:88:c8:51:ef:45:32:8d:31:53:9e:cc:e3:bc:8b:b5: 8e:6b:1e:57:6d:9e:f2:61:50:6f:0a:9e:6f:57:5b:78:26:8f: 27:6f:df:fa:c6:31:e5:76:c0:3d:03:28:32:cc:36:4c:56:6a: 14:89:01:31:2e:01:aa:8b:cc:55:b3:09:c0:93:d8:ba:6a:12: 4f:d4:44:b6:44:d0:1f:79:72:a6:42:3b:4b:72:54:72:5d:e5: a2:17:90:3c:7d:a2:c6:b0:d3:af:62:f2:b6:a4:72:9f:42:4f: 97:d1:53:fd:d1:ca:5c:0b:80:09:e0:81:f0:02:2c:bf:34:cd: 68:b0:0a:3d:65:fb:6b:b5:ee:e7:e3:e3:d3:13:8a:86:8b:21: d7:90:6b:d1:62:e6:9d:0c:56:ff:e0:37:04:e0:8d:73:a4:4a: cc:dd:32:cb:a8:4b:92:a2:d2:bd:79:80:82:ac:66:3f:74:91: 2f:00:1a:b1:55:5a:59:9d:6a:3a:42:bf:26:28:a8:e2:77:03: 6e:37:a5:6d:4e:c3:d1:01:60:d7:32:b3:41:1e:d0:86:0f:ec: 3d:44:51:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcHswOlIbe11gRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk MzhmMDAyMjAtYzlhMS00NjA4LWE3OGQtZTBkOTQ3M2MzYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY0RlGydhcn19O14++O4n5TbCi5jUBjsZN+U dqYwBT3SofI56w/SLeAxvkyRhAW2PQAWnBEyQNaRPwda0BpfH703vzjWZywmK1BJ SmE7T8brA5CWI2D5yW5dX8SYj0pr7kmLOc7+vq8bInbrviDsqM5bstPEYFIjMKpR lPOrptZunvgowpKGd6d8YIDIFAcUnPkGzhDLmPghbMEY0v5GgIcT/e20PPg7FDEM ycdkQNq1PrhkC2nA05TKkmsVa5mPRw+VcNLJ8G0qiDwbMFGICLK7gnt3FZctQ2Ka +08oS91aNEd7C41IByH9jV4CZywr7Axz5w9Zkm45DGIzIG0qdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaFzoT+GZIt/JUnVQL+McAyOoepMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvZDczYTBhMmEtOTkzMy0z Y2Q1LWIyODktYzdlYjJmODA1YzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl9VIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKUlfBqM6YnP4tPL5Xnu2klNOY7OHUm5bmXpbjtiA9+wk0GNoxOJIjI Ue9FMo0xU57M47yLtY5rHldtnvJhUG8Knm9XW3gmjydv3/rGMeV2wD0DKDLMNkxW ahSJATEuAaqLzFWzCcCT2LpqEk/URLZE0B95cqZCO0tyVHJd5aIXkDx9osaw069i 8rakcp9CT5fRU/3RylwLgAnggfACLL80zWiwCj1l+2u17ufj49MTioaLIdeQa9Fi 5p0MVv/gNwTgjXOkSszdMsuoS5Ki0r15gIKsZj90kS8AGrFVWlmdajpCvyYoqOJ3 A243pW1Ow9EBYNcys0Ee0IYP7D1EUSg= -----END CERTIFICATE-----Generated at Sun Jun 29 14:17:54 2025 by rpki-client